Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/95fa473e-26ec-3686-9c67-23adf96cde17.roa
File:                     95fa473e-26ec-3686-9c67-23adf96cde17.roa (raw, json)
Hash identifier:          EbOsrysE4NGnZrUEqPThMHRzxPuI7nnjW6PcUGy8eqM=
Subject key identifier:   2D:C8:C4:ED:5D:80:09:22:9B:AB:60:36:64:24:D0:5A:9B:0F:07:1A
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F43285849A20E85BF2B5E433DAA4401C0
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/95fa473e-26ec-3686-9c67-23adf96cde17.roa
Signing time:             Thu 24 Apr 2025 14:04:02 +0000
ROA not before:           Thu 24 Apr 2025 14:04:02 +0000
ROA not after:            Wed 23 Jul 2025 14:04:02 +0000
asID:                     207266
IP address blocks:        65.22.4.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Thu 24 Apr 2025 14:06:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a2:0e:85:bf:2b:5e:43:3d:aa:44:01:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Apr 24 14:04:02 2025 GMT
            Not After : Jul 23 14:04:02 2025 GMT
        Subject: CN=350d892d-7b8f-4610-b816-777953956e9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:44:16:72:6c:41:4f:4f:31:ae:56:78:21:55:
                    15:0b:6c:d9:19:b1:e2:c5:b9:ec:91:f0:07:12:68:
                    6d:21:55:f1:ce:79:db:92:9c:9e:97:27:c9:bd:a6:
                    4b:bf:33:01:53:d1:96:01:24:cd:cf:bc:a5:cb:f0:
                    84:89:93:86:ad:5b:10:d3:4f:4e:88:c1:a6:df:d9:
                    d0:ab:e4:82:c1:37:ce:e8:55:cf:e0:8c:c5:e1:bf:
                    b3:1d:fe:2c:e0:a2:87:ff:72:a9:d9:cd:19:91:e4:
                    55:d7:11:ad:54:29:fe:0f:44:be:38:5c:7f:c0:6b:
                    ee:ed:8d:9b:e0:7c:b4:f8:c9:84:65:b7:e2:d8:cd:
                    94:ff:91:b3:d6:c7:1d:1f:31:e1:6d:80:5b:43:bb:
                    5d:44:c9:3e:76:c9:14:bc:04:1e:22:1b:f3:e4:71:
                    88:ae:3d:85:ba:33:ff:df:a2:3e:89:44:e9:f9:37:
                    85:5c:bc:ea:27:79:5f:5b:31:16:49:7d:b8:b1:79:
                    24:b4:91:7e:75:61:68:a0:c3:f1:39:41:eb:30:d2:
                    c8:4a:2b:d1:2f:be:80:90:68:f4:0c:c6:81:9a:47:
                    c2:f0:8b:b6:73:6d:de:d5:18:73:11:4f:f4:a5:f0:
                    21:53:08:d1:ab:9d:d6:dc:67:35:e7:c3:d9:0f:58:
                    d1:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:C8:C4:ED:5D:80:09:22:9B:AB:60:36:64:24:D0:5A:9B:0F:07:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/95fa473e-26ec-3686-9c67-23adf96cde17.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.22.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:a9:db:20:7c:5d:57:b6:db:75:7e:20:dc:73:f0:37:ba:1a:
         2d:7d:17:b6:26:d0:51:bc:76:73:2a:c2:cc:fa:75:c6:7a:f9:
         89:fa:1d:72:f4:44:87:bb:1d:e2:88:7c:b1:78:e5:d9:7d:74:
         c6:e7:db:02:08:b3:13:04:f8:0a:51:2c:d2:90:3c:f5:41:1b:
         91:5a:6f:c0:09:7e:74:33:e1:4d:3e:33:76:3d:e1:92:81:75:
         ec:75:32:78:db:3f:37:56:b8:e8:a7:fb:0e:86:3d:4b:33:ac:
         95:c7:76:67:dc:59:97:b0:bd:24:46:b2:91:a9:6b:6d:8e:bc:
         f5:fa:ea:26:2d:5d:44:48:62:14:62:b8:d6:7b:ed:9d:1a:6c:
         7c:16:e8:e5:04:7a:29:bf:41:fe:ca:b4:4b:0a:9a:67:9b:26:
         db:2d:48:96:00:75:e4:a1:0e:a5:83:e7:db:da:4c:dc:e4:5b:
         03:68:33:95:50:61:60:81:3c:91:c1:9b:fe:7b:87:2f:3c:11:
         6b:a5:69:e8:fa:46:8b:01:a3:3a:a8:23:0f:2a:19:b3:99:2e:
         b6:e8:5c:56:34:e6:3d:d5:89:84:28:f1:35:8e:6f:13:4f:3a:
         6e:6d:c1:1d:7b:35:f4:c2:6d:22:09:49:f2:7a:d5:44:c0:56:
         5e:44:10:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 06:28:09 2025 by rpki-client