Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/056a907f-4c41-3e70-9b67-def8fbf18226.roa
File:                     056a907f-4c41-3e70-9b67-def8fbf18226.roa (raw, json)
Hash identifier:          x1MLOF9eyUa9GzPk0d7Z+T/QO4AAr09V9+05q5gTPmM=
Subject key identifier:   A6:CD:BD:4E:8C:20:8A:9E:50:48:7E:CB:ED:F7:E2:93:ED:3F:33:BC
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F43285849B5DDA043D2AA8B0D5B56C6A0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/056a907f-4c41-3e70-9b67-def8fbf18226.roa
Signing time:             Thu 01 May 2025 16:21:41 +0000
ROA not before:           Thu 01 May 2025 16:21:41 +0000
ROA not after:            Wed 30 Jul 2025 16:21:41 +0000
asID:                     22773
IP address blocks:        68.104.190.0/23 maxlen: 23
Validation:               Failed, certificate revoked on Thu 01 May 2025 21:20:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:dd:a0:43:d2:aa:8b:0d:5b:56:c6:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  1 16:21:41 2025 GMT
            Not After : Jul 30 16:21:41 2025 GMT
        Subject: CN=4d9fefce-f27c-4de3-bc4f-051c9cdb88c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:25:3e:b5:c0:37:06:6b:2a:1e:ed:92:ea:94:
                    ba:aa:d5:14:a5:13:20:93:a6:ad:28:62:33:91:41:
                    a6:49:16:ff:84:09:22:a7:af:96:f6:5e:42:9d:b0:
                    55:78:ac:c2:37:e3:cf:43:86:5d:06:fe:8b:36:27:
                    c3:68:9c:64:8e:35:a2:8a:70:bd:cd:ce:62:04:6f:
                    96:24:cc:a7:c9:1f:2d:1b:95:f2:08:ae:d9:f5:fb:
                    84:4f:79:de:a8:51:0f:11:45:a5:11:fc:f8:bc:74:
                    ee:c2:2a:13:ab:82:d1:a9:e0:bf:18:8b:1d:88:ca:
                    7e:ff:61:5d:78:2a:36:d8:06:71:c7:6b:64:39:eb:
                    e9:81:7b:53:09:86:1d:2c:79:23:10:7c:90:72:4a:
                    44:8b:e1:97:c4:29:ac:bd:99:35:07:68:ce:7f:c5:
                    b3:d1:ce:71:02:dc:c8:62:5c:78:4c:09:9b:e9:a3:
                    37:6d:c6:db:f0:88:25:5d:dc:79:f4:60:d2:2e:8f:
                    79:c8:99:30:01:8b:44:89:15:74:d3:ae:40:75:77:
                    02:99:6f:ea:47:59:27:3f:fb:0f:97:36:a1:4a:d8:
                    ed:df:a2:93:89:06:8a:42:62:cd:0e:5e:34:c3:ba:
                    6b:de:42:45:68:dc:46:87:bc:99:38:71:8f:a7:01:
                    de:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:CD:BD:4E:8C:20:8A:9E:50:48:7E:CB:ED:F7:E2:93:ED:3F:33:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/056a907f-4c41-3e70-9b67-def8fbf18226.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.104.190.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:3b:d3:69:4e:00:b7:ae:71:a8:ae:ec:fb:e0:4c:55:52:b3:
         bf:b6:75:5d:43:13:d0:77:f9:66:47:db:98:a6:6b:02:2e:88:
         ea:9b:dc:97:e4:9e:a8:83:e0:32:60:05:ff:be:2f:fc:1d:4f:
         74:d2:df:48:00:bc:62:72:d5:f4:5b:0f:11:b5:b2:ea:32:70:
         6f:69:97:ef:8b:88:83:72:a4:07:af:88:6d:ac:7e:76:b2:94:
         0e:ad:93:08:83:4b:84:38:06:8f:14:b9:91:88:cb:98:c8:3a:
         c2:06:c5:47:3c:69:d4:ce:f6:ee:be:ab:8b:01:bc:84:b2:aa:
         f4:69:c5:f8:53:8f:af:9d:a9:a1:c3:43:df:c2:31:b9:c7:de:
         44:25:68:d7:c6:77:be:f7:65:22:38:aa:57:db:29:eb:f0:3e:
         16:0a:fc:68:53:04:e8:69:5b:c4:d4:10:b7:94:83:65:08:c6:
         1f:89:52:d1:fa:0f:6d:ac:ab:ab:8b:6c:7a:79:59:cb:4b:75:
         76:99:fe:4b:da:95:b0:c2:4f:88:82:20:30:5f:0d:69:12:15:
         54:cb:fa:06:dc:fa:79:d8:d1:87:a1:54:0f:e8:9c:de:78:79:
         0b:5a:a9:fa:17:c2:5a:c6:1d:40:32:2b:0e:8f:e2:bf:68:72:
         3c:f2:bf:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 01:31:29 2025 by rpki-client