Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0c4eb7ea-a9db-3507-aa4b-994050661d03.roa
File:                     0c4eb7ea-a9db-3507-aa4b-994050661d03.roa (raw, json)
Hash identifier:          rJOkhN8iQWj9n28sahEytxklT8qnzFbbNNLlWu7CBvk=
Subject key identifier:   AC:D8:8F:1B:25:D4:7D:85:22:EC:4E:A3:16:F6:E3:73:00:04:72:FB
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F43285849B5E171B2D7872FB6DC70B760
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0c4eb7ea-a9db-3507-aa4b-994050661d03.roa
Signing time:             Thu 01 May 2025 16:29:23 +0000
ROA not before:           Thu 01 May 2025 16:29:23 +0000
ROA not after:            Wed 30 Jul 2025 16:29:23 +0000
asID:                     22773
IP address blocks:        98.171.112.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Thu 01 May 2025 21:53:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:e1:71:b2:d7:87:2f:b6:dc:70:b7:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  1 16:29:23 2025 GMT
            Not After : Jul 30 16:29:23 2025 GMT
        Subject: CN=2646e0b6-b0c4-4332-a849-5c2424c73e45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:2e:da:87:cd:6e:0b:5c:4e:9d:73:be:44:37:
                    60:1c:0a:70:92:26:71:b6:34:54:98:1e:09:68:97:
                    6e:b4:0e:2e:7b:c8:83:09:35:78:63:54:99:03:b5:
                    4b:91:0c:b1:f1:bb:70:c0:ea:d5:4e:31:de:60:4e:
                    63:31:a3:b4:d3:27:4c:a4:22:4d:e7:21:ff:9b:53:
                    b0:f5:a0:04:05:4f:54:fe:4c:b7:9c:0e:6d:21:0f:
                    17:ae:de:79:bb:d8:32:b8:2b:db:41:7d:97:fb:30:
                    b6:45:64:a3:e9:b3:fc:ca:15:06:4f:05:ba:c8:c5:
                    79:63:d4:f0:0e:e7:df:f9:53:5d:51:1c:3c:f1:11:
                    cf:24:b2:ec:a8:70:ee:7b:91:62:e7:6c:ac:22:01:
                    18:5b:e5:49:0c:6a:43:cb:96:07:a9:40:c9:49:98:
                    2a:ae:91:5d:7e:91:73:39:19:30:66:18:94:b0:2e:
                    f7:22:9b:e1:30:8d:03:49:1d:98:d2:a2:5c:ed:15:
                    89:77:9b:c8:89:90:72:ab:24:a1:02:25:cd:b3:f4:
                    27:9f:18:db:ec:43:9f:c7:c7:bd:66:10:46:67:bd:
                    e8:92:81:02:61:5b:f5:38:d8:39:b2:90:7c:ca:dc:
                    60:4f:da:93:f5:9a:a5:92:b7:40:5e:a6:d8:54:40:
                    b7:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:D8:8F:1B:25:D4:7D:85:22:EC:4E:A3:16:F6:E3:73:00:04:72:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0c4eb7ea-a9db-3507-aa4b-994050661d03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.171.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:51:ca:06:d1:c5:f8:34:3f:c0:44:42:61:eb:05:36:27:15:
         0c:9b:c6:73:67:b2:a6:15:56:13:75:ae:c5:a6:54:4f:f8:24:
         2e:fb:99:e1:b0:42:b1:38:08:d9:37:3b:80:e4:80:6e:06:fd:
         6c:21:6e:9c:41:6c:86:94:29:b6:0c:cf:a6:ea:b0:a8:c6:af:
         c6:56:23:b7:46:78:ae:df:55:31:89:a2:b4:50:19:37:b6:b1:
         37:24:77:99:dd:20:f9:03:83:79:d8:9b:85:ae:8f:dd:b0:81:
         bf:dc:95:aa:cb:31:d8:02:ef:9a:a9:13:da:52:4a:7f:15:8f:
         cc:e0:f6:5b:10:4b:f4:af:55:0f:70:f5:7d:ef:19:7c:a6:e2:
         36:64:26:81:22:d5:35:f8:cc:8c:cc:17:68:23:b8:5b:b1:8a:
         02:e1:d0:83:6b:b1:3e:55:76:06:c5:33:f0:8c:c7:70:ae:86:
         ed:b0:1f:e7:45:26:cb:ea:8f:52:63:82:9b:47:d0:a9:76:9c:
         01:dd:f7:a8:dc:2e:ba:9a:e9:03:17:25:19:cd:98:66:d9:ec:
         59:c6:65:13:a0:ae:16:25:82:e0:56:80:91:ea:bb:cd:d5:ce:
         f9:08:bb:f8:3b:6d:a9:fa:4e:24:76:23:c4:3a:08:3d:27:74:
         38:9f:9e:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 01:33:51 2025 by rpki-client