Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/31f37f10-0fff-38f5-aa7d-bbcfa6f8b966.roa
File:                     31f37f10-0fff-38f5-aa7d-bbcfa6f8b966.roa (raw, json)
Hash identifier:          qf89l2uj4KfnJ4tqxIL8prTllPCpKW50xbL4GgiLDYc=
Subject key identifier:   80:23:51:2D:D0:57:F5:7D:2F:7F:24:96:AF:EC:96:F0:66:27:33:92
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F43285849B5E1D74BC1734344AEF62898
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/31f37f10-0fff-38f5-aa7d-bbcfa6f8b966.roa
Signing time:             Thu 01 May 2025 16:30:11 +0000
ROA not before:           Thu 01 May 2025 16:30:11 +0000
ROA not after:            Wed 30 Jul 2025 16:30:11 +0000
asID:                     22773
IP address blocks:        174.74.164.0/22 maxlen: 22
Validation:               Failed, certificate revoked on Thu 01 May 2025 21:56:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:e1:d7:4b:c1:73:43:44:ae:f6:28:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  1 16:30:11 2025 GMT
            Not After : Jul 30 16:30:11 2025 GMT
        Subject: CN=7262bf9d-91ab-4592-b7c9-19ac48039146
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:9a:ad:b9:76:0c:03:2e:18:77:dc:9f:4f:12:
                    4e:8d:72:96:e5:42:ea:58:21:16:5d:3e:4f:e4:14:
                    18:1b:69:ee:da:de:29:be:f2:18:7a:7a:5f:db:4b:
                    56:1a:21:cf:30:55:d0:82:d5:27:4d:79:60:e3:aa:
                    d2:66:bd:56:7c:35:d7:fa:1a:5e:e3:76:64:b8:d1:
                    df:a1:ad:5f:4e:8c:7b:cc:78:96:77:7b:89:8f:93:
                    3f:e7:2b:3f:ab:91:7c:5f:64:a4:2c:e6:d5:0e:56:
                    8f:6e:0c:ae:8f:7a:72:e7:1f:ca:83:ad:6c:97:71:
                    86:da:70:a9:96:07:ca:c3:50:60:b4:5a:9e:4f:61:
                    f9:bf:b2:04:db:93:45:0d:d2:92:fe:62:74:8a:2b:
                    4a:2b:ef:84:2d:1d:03:68:80:e9:2f:c9:1e:fc:83:
                    fe:d1:b8:24:5e:ec:92:2b:63:c9:01:21:69:f5:86:
                    19:8a:6c:bc:c9:f2:ea:dc:1f:63:ad:f2:b3:1e:37:
                    f7:e6:66:54:af:b3:c7:0a:9f:da:79:b1:03:79:b0:
                    df:2d:12:c3:77:60:72:83:b3:72:7d:b6:ae:17:dd:
                    d5:a5:99:11:1e:7b:38:4a:2a:20:62:f6:02:2b:64:
                    ae:22:be:ab:66:8c:7b:1d:fc:51:8f:7b:b5:af:96:
                    ad:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:23:51:2D:D0:57:F5:7D:2F:7F:24:96:AF:EC:96:F0:66:27:33:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/31f37f10-0fff-38f5-aa7d-bbcfa6f8b966.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.74.164.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:da:c5:58:ae:a6:bb:c2:e5:94:0a:d3:45:28:f1:41:ab:c6:
         c0:b3:e9:ec:17:70:75:99:94:34:33:cc:2d:7d:f2:69:9d:44:
         cd:16:c6:ee:d8:0f:cc:cb:23:4e:80:7a:6c:50:c4:52:b0:9f:
         c2:65:0a:a8:86:0c:3b:15:db:d1:08:e6:35:da:d0:5c:71:f0:
         6d:14:82:79:43:ae:bd:b0:1e:52:39:ae:03:92:02:3d:82:e9:
         6a:55:96:6c:fe:80:a7:99:2a:57:50:0e:cc:77:f7:5d:8e:3c:
         1c:6c:18:8a:b0:1f:14:4b:df:db:2a:24:a2:b3:24:05:c3:8e:
         b3:06:46:e4:e2:16:58:cb:b5:c9:28:5d:93:a7:a2:18:15:20:
         85:98:04:61:b9:11:ce:50:63:85:ff:91:0d:be:d4:15:38:1f:
         6b:81:c8:86:4a:2d:01:8e:66:d1:3d:9e:02:fa:14:c4:85:a1:
         90:e5:b2:7b:24:0d:17:35:18:1a:1c:92:ef:a2:4b:cd:e1:f3:
         7e:5f:71:31:94:11:b4:95:96:a2:4e:ae:f3:99:35:ee:dd:54:
         f5:3e:e4:f0:12:fc:29:2c:e5:cd:98:70:6e:bd:0f:ad:72:93:
         e9:56:b7:f0:fe:7c:cb:64:d0:b7:6b:9a:2d:14:78:3a:5e:bf:
         62:4c:88:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 01:08:45 2025 by rpki-client