Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0219ab39-a81c-3942-9622-6b254c4e83ba.roa
File:                     0219ab39-a81c-3942-9622-6b254c4e83ba.roa (raw, json)
Hash identifier:          JtIDP0lC7dTIPd9FiMUspTl4fuaB2laV0tmeVoOtqSs=
Subject key identifier:   AA:FE:A7:BB:97:32:1E:2F:75:68:11:41:BE:7D:6C:24:BB:AF:E9:7B
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F43285849B5E153A92648293039BF0080
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0219ab39-a81c-3942-9622-6b254c4e83ba.roa
Signing time:             Thu 01 May 2025 16:29:08 +0000
ROA not before:           Thu 01 May 2025 16:29:08 +0000
ROA not after:            Wed 30 Jul 2025 16:29:08 +0000
asID:                     22773
IP address blocks:        98.168.37.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Thu 01 May 2025 21:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:e1:53:a9:26:48:29:30:39:bf:00:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  1 16:29:08 2025 GMT
            Not After : Jul 30 16:29:08 2025 GMT
        Subject: CN=9844937f-0311-4df0-ba54-c02a9fc1cbf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d2:95:df:e8:cc:e4:43:c9:58:5e:d5:e1:0b:
                    72:d3:ef:62:b9:63:69:84:9b:da:75:40:f1:ac:c7:
                    8e:18:ee:32:b3:24:74:a2:72:3f:f2:e7:3a:6b:d2:
                    e1:c2:4a:ab:6a:e4:86:7a:94:90:f8:d5:83:57:8f:
                    58:f5:bd:e5:82:d2:85:0e:c7:a6:d0:1c:de:fc:f5:
                    25:9d:dd:ab:37:58:20:66:d9:a1:fa:da:34:ee:20:
                    19:50:bb:dc:d9:55:ef:10:20:75:d7:b2:2a:08:98:
                    a8:2a:b1:85:4d:79:90:2c:c8:70:70:2a:c5:78:f8:
                    17:1f:b2:1f:7b:17:58:b8:a7:45:85:c5:33:d5:e0:
                    c6:ad:d1:cb:3e:fe:73:5d:7d:ff:78:c5:89:33:d2:
                    cb:4a:b2:72:c1:23:fd:7a:46:d4:ff:d9:fc:57:d0:
                    5e:4f:57:ec:38:9a:90:3c:f5:97:23:d3:b4:14:05:
                    62:54:de:af:25:22:af:10:e0:e6:43:ee:2f:8a:0d:
                    78:df:51:23:fe:6a:ea:df:d0:67:11:93:0d:af:fa:
                    27:ba:d4:35:e6:18:1e:25:f7:f1:ee:72:32:5d:e9:
                    30:f2:3e:bb:e1:95:b6:7d:7a:3c:a9:ff:6f:74:86:
                    41:5f:f5:c4:a8:d5:a2:f3:cc:cf:46:f6:aa:3f:d2:
                    95:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:FE:A7:BB:97:32:1E:2F:75:68:11:41:BE:7D:6C:24:BB:AF:E9:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0219ab39-a81c-3942-9622-6b254c4e83ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.168.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:a3:df:c0:1e:57:fb:bc:4a:aa:cd:34:64:37:fe:7e:db:89:
         0f:58:b3:fd:9c:bc:e0:da:e2:4c:2e:64:2f:d9:e7:a2:30:e1:
         d0:8a:aa:e5:95:56:7f:aa:67:68:ba:02:c0:9a:cf:80:10:82:
         ac:64:52:34:42:a8:c0:d1:5d:1e:e4:7d:6e:de:91:8b:95:92:
         f6:5d:79:ca:40:7c:e6:e1:79:c2:af:49:88:5c:a3:68:48:01:
         f4:e2:df:a8:1b:7b:ab:2a:36:fa:57:33:eb:39:a2:36:b5:1b:
         33:74:2b:6f:93:07:ad:16:9a:24:83:48:7d:2b:46:fd:69:43:
         4a:31:33:eb:8e:36:aa:85:3e:32:46:8c:eb:62:66:30:7c:39:
         85:46:ec:f0:be:4e:cd:eb:e0:3a:67:4e:c4:fb:4d:40:53:da:
         2e:19:43:df:5c:3e:82:c0:87:82:a0:92:ab:c3:b9:f1:82:9f:
         08:39:9e:7a:1c:5f:a1:3e:b1:8d:cc:66:d8:8c:96:6e:02:87:
         28:c0:90:5c:66:6a:f7:c2:d1:38:18:4c:43:b0:69:e0:0b:37:
         74:62:32:73:21:8c:56:26:15:ed:42:46:15:70:6b:c7:56:bf:
         9b:a4:a8:66:44:33:70:29:e0:8d:25:c2:13:20:d6:df:44:35:
         d8:b0:1b:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 05:25:12 2025 by rpki-client