Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/7dee5fb2-4783-353a-9ede-647a257671c5.roa
File:                     7dee5fb2-4783-353a-9ede-647a257671c5.roa (raw, json)
Hash identifier:          8iw1+1/hW7yWROCDtKYwAqWQqnNKMUbHaNF7TzQYSQs=
Subject key identifier:   D9:0E:A5:39:DE:1E:93:4B:8B:1D:5E:72:87:E2:CC:54:63:5D:96:7E
Certificate issuer:       /CN=66ee137c-4201-4a21-a4f5-2f3161305281
Certificate serial:       010D0C9F432858498B1C46810B96B1721056E680
Authority key identifier: 93:AB:BA:5B:78:E6:75:D1:1A:42:E2:19:57:D6:1E:B4:6E:0D:DB:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/7dee5fb2-4783-353a-9ede-647a257671c5.roa
Signing time:             Wed 16 Apr 2025 08:48:09 +0000
ROA not before:           Wed 16 Apr 2025 08:48:09 +0000
ROA not after:            Tue 15 Jul 2025 08:48:09 +0000
asID:                     8075
IP address blocks:        23.154.88.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Thu 24 Apr 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8b:1c:46:81:0b:96:b1:72:10:56:e6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66ee137c-4201-4a21-a4f5-2f3161305281
        Validity
            Not Before: Apr 16 08:48:09 2025 GMT
            Not After : Jul 15 08:48:09 2025 GMT
        Subject: CN=05c717d1-5d28-4e47-800f-a9a5009c57d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:a8:5e:93:8c:aa:cc:7b:ac:86:64:3d:4d:81:
                    5e:7c:dd:84:39:fd:80:c2:0a:cc:72:02:27:62:2f:
                    fc:cc:3e:40:56:a2:4d:a6:b0:81:2e:f9:32:96:04:
                    9b:2e:3c:be:15:21:71:34:80:1a:b0:88:5c:7c:36:
                    f7:4a:53:ba:89:6e:7a:82:fe:ea:56:08:48:1a:08:
                    25:1b:26:68:4a:18:bf:56:b1:27:72:eb:ba:f8:f1:
                    8f:21:b6:89:db:6c:05:0c:bd:aa:a7:bc:cd:d2:ca:
                    5d:9d:d9:30:ef:9c:c1:bb:1a:2d:c7:71:d0:ee:6c:
                    6e:23:d8:62:a7:92:9f:df:cf:c6:ce:1d:35:7d:51:
                    2f:14:2b:48:4d:2f:5c:d9:d6:b4:16:5c:48:a0:dc:
                    02:5e:55:81:4b:b8:e0:b8:5c:33:61:46:a8:0a:ba:
                    ec:00:7f:50:26:85:28:6d:24:46:73:98:a6:1a:f2:
                    bb:e1:2c:5d:15:a2:eb:f5:4f:5e:13:9a:11:d5:ec:
                    f3:4f:0d:b9:83:ba:03:6c:83:d5:23:6c:22:99:7c:
                    e2:dd:3b:e9:c6:d8:d9:bd:64:ca:e7:b0:7d:7d:58:
                    f5:8b:8b:e1:1c:9e:3c:6e:55:21:42:96:f6:14:7b:
                    c2:ae:f3:9f:9a:66:4f:6f:b7:fa:5f:a4:f5:e9:5f:
                    3c:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:0E:A5:39:DE:1E:93:4B:8B:1D:5E:72:87:E2:CC:54:63:5D:96:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/7dee5fb2-4783-353a-9ede-647a257671c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/66ee137c-4201-4a21-a4f5-2f3161305281.crl

            X509v3 Authority Key Identifier:
                keyid:93:AB:BA:5B:78:E6:75:D1:1A:42:E2:19:57:D6:1E:B4:6E:0D:DB:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.154.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:7a:3b:78:e5:70:9c:2c:4b:1b:30:d7:aa:36:27:66:3d:60:
         f6:26:ab:e0:92:a9:7a:46:44:7f:62:9f:96:2b:7d:17:b7:7f:
         a1:c3:e2:77:e7:5a:c3:01:9b:59:1d:91:2b:ae:2c:c2:7e:13:
         6c:39:4e:8d:ce:2c:5e:c4:c6:5b:7f:38:48:99:a6:9f:80:31:
         a7:4b:e2:f8:18:64:c9:f5:46:7e:76:4a:d2:a5:b4:2c:b1:fb:
         79:89:4d:27:aa:9a:ee:51:2b:5c:b3:f8:17:24:a5:de:c8:c4:
         c7:75:bb:7d:94:f4:e6:cc:b4:9c:01:8c:b3:7c:a3:50:ef:a6:
         6f:a3:de:34:ec:72:e7:08:82:36:05:dd:40:50:db:11:74:17:
         2a:d1:e5:a2:1f:ab:9e:ee:dc:30:d7:6d:32:29:d2:4d:b9:46:
         93:e0:1d:c1:24:1c:f9:61:56:f7:e0:20:7b:ac:62:ed:49:41:
         d1:8f:b2:ba:60:91:1f:a6:ce:6e:28:4f:42:e7:57:eb:8b:85:
         3a:76:01:c9:4a:c9:9d:8d:da:4c:73:48:2a:74:8e:46:a6:0e:
         30:64:fd:6e:44:cc:1f:eb:52:53:aa:d0:77:df:a9:21:e4:f1:
         18:0f:04:dd:bc:95:22:f2:68:df:7c:72:ed:12:97:78:47:7d:
         1b:a0:ac:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:07:06 2025 by rpki-client