Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4324714a-9dbf-33cf-85f6-3423bf3491d3.roa
File:                     4324714a-9dbf-33cf-85f6-3423bf3491d3.roa (raw, json)
Hash identifier:          YB8sGeZXjni6PWbzP2pfTGuWu/YEkENYzK3+RcZq4E8=
Subject key identifier:   38:96:E9:4C:B2:84:A6:A6:74:0A:9B:97:65:36:E8:4F:86:81:74:4E
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F43285849B5E2AF14720B8B3898DE9C80
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4324714a-9dbf-33cf-85f6-3423bf3491d3.roa
Signing time:             Thu 01 May 2025 16:31:53 +0000
ROA not before:           Thu 01 May 2025 16:31:53 +0000
ROA not after:            Wed 30 Jul 2025 16:31:53 +0000
asID:                     22773
IP address blocks:        2600:8800:2ce0::/47 maxlen: 47
Validation:               Failed, certificate revoked on Thu 01 May 2025 22:04:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:e2:af:14:72:0b:8b:38:98:de:9c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  1 16:31:53 2025 GMT
            Not After : Jul 30 16:31:53 2025 GMT
        Subject: CN=c95d5875-c0d9-4a4a-97e7-9fc1732c010f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:2d:ff:f4:6c:3c:f3:52:68:4d:41:c7:40:41:
                    ae:64:ec:f1:72:50:ef:07:29:87:64:37:2e:dd:b6:
                    6a:3e:13:da:bc:cd:dc:89:27:84:88:4d:c0:72:90:
                    9c:67:5e:00:28:60:41:f2:80:3f:7d:e5:e7:bb:c6:
                    f2:ea:0f:ff:7b:ed:60:16:3e:a8:bc:fd:82:ab:28:
                    2b:42:0c:fc:14:1e:19:55:ca:57:6a:15:f9:dc:08:
                    08:5b:b7:a7:ef:8d:ed:85:c7:7c:62:80:ad:9d:b9:
                    68:e9:5a:c4:b0:94:7f:ab:b4:9f:55:ed:54:40:cd:
                    84:06:7f:8e:71:ce:37:ea:cc:cd:4f:8b:91:e5:3b:
                    58:48:7a:c5:af:06:9c:71:4b:7a:d0:44:c6:7a:79:
                    f2:eb:35:49:22:2c:04:fd:76:bf:b5:86:83:95:22:
                    e0:a2:d8:96:6e:65:52:16:9b:62:01:63:0c:63:e7:
                    a0:13:8a:00:21:05:ac:b2:52:ec:3a:ab:a6:f9:53:
                    98:d5:a9:d7:c0:79:4b:81:19:52:8d:97:be:3c:6d:
                    b8:1d:e8:97:6b:0a:3c:19:d7:67:b0:9d:14:c5:5a:
                    2c:06:dc:e6:8e:6b:5b:67:b4:dc:08:76:a5:fb:d8:
                    46:0e:ca:6e:16:c6:8a:9a:6a:96:1f:c8:23:87:f3:
                    20:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:96:E9:4C:B2:84:A6:A6:74:0A:9B:97:65:36:E8:4F:86:81:74:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4324714a-9dbf-33cf-85f6-3423bf3491d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:8800:2ce0::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:9b:60:4e:1f:3e:e9:18:8a:a4:2c:04:0a:9c:9e:8f:1f:33:
         5e:dd:29:87:8c:37:a3:f2:11:51:65:8a:ce:df:7e:2d:4e:f1:
         c3:9e:c2:1e:5a:e3:89:19:0f:d8:ca:ff:df:25:0a:48:b8:77:
         fa:a4:5f:a2:68:f5:bd:4e:9a:b3:aa:f9:cc:ee:72:e0:f2:de:
         c9:27:c7:98:8d:38:96:ef:c2:47:4c:bc:2a:84:c9:e1:fe:4e:
         c8:00:e3:aa:f1:3c:2d:96:4d:db:cd:09:78:39:4e:5b:d1:9a:
         cb:34:d4:98:80:28:99:fa:0d:be:9c:a1:71:b7:e9:f6:2e:19:
         b5:9d:f9:6f:b2:96:56:75:24:86:41:ab:b6:2e:cd:d4:9a:a8:
         48:e3:19:de:8d:a1:9d:7f:8f:b9:06:44:55:24:de:b9:a7:66:
         7b:50:c5:b2:b4:62:a5:b7:2c:2e:42:17:4f:54:66:cb:1a:e8:
         71:22:b7:f0:fe:cb:f9:d3:a6:1b:0a:6f:d1:f2:c2:60:eb:e2:
         8f:bb:99:b9:c5:2c:72:ef:62:53:e0:aa:73:15:28:d7:3b:1d:
         49:97:f3:cf:3c:bc:92:63:27:ee:72:5f:14:a1:90:0e:91:d0:
         50:c1:2b:46:1c:cb:47:a4:86:38:60:ce:10:7e:b7:fc:68:5a:
         a8:80:45:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 02:12:44 2025 by rpki-client