Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/02df9624-38fd-3e8b-885c-885484bb5ef7.roa
File:                     02df9624-38fd-3e8b-885c-885484bb5ef7.roa (raw, json)
Hash identifier:          8L9fIMxWk7yBTOBIsWNpsiWOZSwZONbmN5laOrfvo5U=
Subject key identifier:   C4:FC:BC:99:7A:59:DB:D4:FC:61:DA:85:4F:8B:82:3E:C9:83:05:24
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F43285849B5DECD114AFED6EC774632C0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/02df9624-38fd-3e8b-885c-885484bb5ef7.roa
Signing time:             Thu 01 May 2025 16:24:03 +0000
ROA not before:           Thu 01 May 2025 16:24:03 +0000
ROA not after:            Wed 30 Jul 2025 16:24:03 +0000
asID:                     22773
IP address blocks:        70.174.220.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Thu 01 May 2025 21:32:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:de:cd:11:4a:fe:d6:ec:77:46:32:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  1 16:24:03 2025 GMT
            Not After : Jul 30 16:24:03 2025 GMT
        Subject: CN=e05b21a3-76a2-471f-a1fd-2d20ff58f80a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:bb:9d:4e:99:9a:cd:a8:1d:d3:43:64:6f:72:
                    52:7b:7f:60:7e:8f:09:59:7a:53:ee:50:fa:78:2d:
                    46:e5:77:fd:d0:f2:a2:0b:7d:15:57:43:c6:8d:ea:
                    20:9d:7b:b2:1a:27:b9:ba:99:9c:0d:8e:3c:2f:a5:
                    63:94:b8:3f:41:e3:f2:76:66:78:e5:35:d9:4c:46:
                    6d:12:8b:d2:db:e5:0c:5a:be:4b:81:cc:f9:0c:f0:
                    68:19:2f:4e:a0:0e:89:8e:3c:a5:b6:74:29:eb:b7:
                    d9:fc:7c:46:b8:fe:f5:0b:98:26:a5:d2:34:e1:03:
                    ec:bf:71:81:03:3a:38:e5:89:c8:48:0e:66:a5:2d:
                    14:47:1d:59:67:19:b8:cd:7d:5f:00:26:df:38:a1:
                    2d:c0:66:a6:d0:10:2b:4a:0c:d8:e0:e2:2e:6b:90:
                    13:e3:ec:94:ea:56:43:dd:62:ea:be:b8:02:84:0f:
                    6a:c7:2f:e8:26:35:7d:03:39:a3:a8:07:56:77:91:
                    11:ae:82:5c:4c:f2:ba:02:a3:63:ca:0f:0d:99:e6:
                    4e:ff:5d:67:e0:c5:13:80:69:69:97:86:75:d4:9c:
                    55:eb:1e:0a:57:d3:2a:39:9f:72:5a:47:57:17:66:
                    03:92:a5:68:01:01:d1:7d:24:3c:62:83:e2:80:a3:
                    df:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:FC:BC:99:7A:59:DB:D4:FC:61:DA:85:4F:8B:82:3E:C9:83:05:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/02df9624-38fd-3e8b-885c-885484bb5ef7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.174.220.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:87:e0:e3:0a:49:8c:93:eb:e5:7f:c1:51:67:70:a8:75:fe:
         05:39:0b:41:63:8a:91:76:67:f6:7d:76:45:7f:91:76:ae:b5:
         03:34:c1:c7:3e:ff:cd:2d:c2:ca:dc:50:a6:27:7f:f0:c9:63:
         e0:68:bb:96:44:d0:44:2a:e6:37:11:1a:a6:7f:83:a7:1c:b1:
         c3:df:9f:0d:74:02:3c:3c:42:85:95:00:86:32:c0:ec:f1:8d:
         59:01:e0:56:2d:41:bf:4d:90:5c:48:74:eb:d3:4a:c2:22:9a:
         cc:60:34:fc:69:76:b4:99:8b:51:48:0c:aa:45:2b:47:f8:bd:
         fb:10:1a:1a:37:89:3f:5d:63:97:60:86:9b:09:03:81:05:b7:
         98:a7:4c:5f:c2:07:d5:99:5c:99:2c:fc:6e:5c:1a:13:25:82:
         81:be:e5:da:39:26:1e:2d:ed:61:27:01:41:6e:cf:9b:69:27:
         59:d2:c1:21:25:8a:96:58:83:3d:79:7e:ec:fd:19:35:99:91:
         3d:f1:25:8c:a6:fb:ae:ec:ef:32:d1:55:7d:1c:dc:76:d7:49:
         64:52:c0:ee:ac:3a:8a:b2:68:b2:cd:4d:19:46:93:05:15:30:
         85:1e:d7:10:c7:fb:25:3a:7b:45:b7:43:33:53:bb:6c:d0:ec:
         75:4c:ba:bf
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm13s0RSv7W7HdGMsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MDUwMTE2MjQwM1oXDTI1MDczMDE2MjQwM1owLzEtMCsGA1UEAxMk
ZTA1YjIxYTMtNzZhMi00NzFmLWExZmQtMmQyMGZmNThmODBhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbudTpmazagd00Nkb3JSe39gfo8JWXpT7lD6
eC1G5Xf90PKiC30VV0PGjeognXuyGie5upmcDY48L6VjlLg/QePydmZ45TXZTEZt
EovS2+UMWr5Lgcz5DPBoGS9OoA6JjjyltnQp67fZ/HxGuP71C5gmpdI04QPsv3GB
Azo45YnISA5mpS0URx1ZZxm4zX1fACbfOKEtwGam0BArSgzY4OIua5AT4+yU6lZD
3WLqvrgChA9qxy/oJjV9AzmjqAdWd5ERroJcTPK6AqNjyg8NmeZO/11n4MUTgGlp
l4Z11JxV6x4KV9MqOZ9yWkdXF2YDkqVoAQHRfSQ8YoPigKPf6wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMT8vJl6WdvU/GHahU+Lgj7JgwUkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMDJkZjk2MjQtMzhmZC0z
ZThiLTg4NWMtODg1NDg0YmI1ZWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARq7cMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKiH4OMKSYyT6+V/wVFncKh1/gU5C0FjipF2Z/Z9dkV/kXautQM0wcc+
/80twsrcUKYnf/DJY+Bou5ZE0EQq5jcRGqZ/g6ccscPfnw10Ajw8QoWVAIYywOzx
jVkB4FYtQb9NkFxIdOvTSsIimsxgNPxpdrSZi1FIDKpFK0f4vfsQGho3iT9dY5dg
hpsJA4EFt5inTF/CB9WZXJks/G5cGhMlgoG+5do5Jh4t7WEnAUFuz5tpJ1nSwSEl
ipZYgz15fuz9GTWZkT3xJYym+67s7zLRVX0c3HbXSWRSwO6sOoqyaLLNTRlGkwUV
MIUe1xDH+yU6e0W3QzNTu2zQ7HVMur8=
-----END CERTIFICATE-----
Generated at Thu May 15 07:55:56 2025 by rpki-client