Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/17321389-82c8-40ad-969d-f355a789f579/b5e19845-18ec-3998-b3f9-d75ca70625ef.roa
File:                     b5e19845-18ec-3998-b3f9-d75ca70625ef.roa (raw, json)
Hash identifier:          NfY5/4eKMK0XSaf1AZsyXFv4afg/m8egdr6AUMY0ZdE=
Subject key identifier:   20:4A:93:B6:52:10:45:AF:66:92:9E:F1:AC:51:8D:1F:B9:4D:8E:1C
Certificate issuer:       /CN=17321389-82c8-40ad-969d-f355a789f579
Certificate serial:       010D0C9F43285849D85F8EAC95947C5A4D9CAE00
Authority key identifier: F2:07:B2:81:1D:EE:20:A3:1B:D2:87:04:DA:9C:1D:80:CE:FA:B4:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/17321389-82c8-40ad-969d-f355a789f579.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/17321389-82c8-40ad-969d-f355a789f579/b5e19845-18ec-3998-b3f9-d75ca70625ef.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     6939
IP address blocks:        74.114.88.0/22 maxlen: 24
                          158.51.60.0/22 maxlen: 24
                          208.80.4.0/22 maxlen: 24
                          2604:4f00::/32 maxlen: 48
Validation:               Failed, certificate revoked on Thu 15 May 2025 18:55:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:8e:ac:95:94:7c:5a:4d:9c:ae:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17321389-82c8-40ad-969d-f355a789f579
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=1e449a81-b722-4946-addf-dc48b02d20fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:b3:b5:d0:81:81:67:5c:d7:bf:07:75:5d:e3:
                    5a:27:8e:a5:30:d4:91:f9:97:08:bd:9b:c9:3f:21:
                    2c:d3:e9:b3:02:4f:b5:da:50:a3:82:3d:2a:54:f7:
                    3c:d2:60:e0:63:72:ae:42:10:95:15:41:53:12:96:
                    94:ab:9e:3a:09:70:d1:57:36:15:63:ea:80:02:1d:
                    c6:cd:d1:99:dd:95:6f:cf:82:c5:c3:45:7d:db:38:
                    23:2e:b3:8f:06:ef:3b:fe:da:ca:9a:e7:38:fa:d6:
                    6f:6e:33:43:c5:a2:5d:38:a4:cc:8a:4e:83:d2:dd:
                    4f:99:75:d1:19:05:33:f5:95:7a:1b:00:e1:43:e6:
                    e6:64:36:a3:b6:76:a0:b6:82:14:b5:df:d2:36:4b:
                    b4:0a:32:6b:6d:bc:39:93:b7:a4:15:ce:25:86:b1:
                    33:e5:21:4d:73:99:6a:af:b8:b4:b5:30:41:11:90:
                    9e:a3:bb:36:99:b9:d9:96:19:ce:3b:2d:c5:81:57:
                    31:60:62:06:fc:80:e5:98:d8:e4:85:aa:76:ff:f2:
                    bf:b4:02:3e:c4:21:e0:c9:0f:fb:55:af:4f:fb:1a:
                    5d:ca:d5:43:ce:b0:22:2b:e0:75:8a:4b:6b:dd:28:
                    73:96:dd:17:02:4a:62:eb:8c:93:bc:44:fb:6c:99:
                    52:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:4A:93:B6:52:10:45:AF:66:92:9E:F1:AC:51:8D:1F:B9:4D:8E:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/17321389-82c8-40ad-969d-f355a789f579/b5e19845-18ec-3998-b3f9-d75ca70625ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/17321389-82c8-40ad-969d-f355a789f579/17321389-82c8-40ad-969d-f355a789f579.crl

            X509v3 Authority Key Identifier:
                keyid:F2:07:B2:81:1D:EE:20:A3:1B:D2:87:04:DA:9C:1D:80:CE:FA:B4:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/17321389-82c8-40ad-969d-f355a789f579.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.114.88.0/22
                  158.51.60.0/22
                  208.80.4.0/22
                IPv6:
                  2604:4f00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:40:7d:e8:4a:31:42:c0:1e:92:b4:31:c7:69:ab:b3:ea:c5:
         a4:5d:ff:26:f8:d1:18:7d:25:df:59:99:5f:05:45:85:79:bb:
         aa:43:35:c3:f2:1c:f9:ff:cf:32:88:b8:c6:3c:42:f8:16:91:
         5d:a7:fe:e2:97:58:25:10:df:74:54:9d:92:c3:d3:84:3e:fe:
         ab:0e:3d:3a:b2:f7:56:7b:0d:8f:39:30:8f:39:f9:12:38:d6:
         1d:ba:15:ac:0a:df:aa:d9:fe:f0:b4:f6:73:68:5b:30:0e:a6:
         34:70:9d:78:b5:58:37:a7:47:7a:30:1f:1a:2f:3b:dc:ce:72:
         29:3a:af:e9:bc:5c:f7:41:05:7c:31:f6:81:b9:44:e4:f7:4d:
         1f:a7:65:bd:c0:e0:7f:03:24:1d:a4:c9:75:72:a5:07:28:95:
         b1:21:81:62:40:77:9b:b2:49:4f:f2:14:cc:6d:d7:7d:da:20:
         1e:a9:78:5b:ec:65:c8:3b:dd:6a:54:4c:97:e1:c9:7f:52:e4:
         92:39:17:a2:0c:2b:f0:6f:47:0d:a9:e5:87:b3:8f:ec:88:1e:
         21:57:08:fb:39:b0:b2:c7:9f:24:c8:6d:5b:bd:2e:48:2c:e1:
         59:49:5a:e0:26:59:a2:8c:c9:9c:32:1b:54:a9:87:ba:eb:42:
         a4:61:91:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 10:32:35 2025 by rpki-client