Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/46e3e555-1a84-3655-ac7b-f7c3d67d3119.roa
File:                     46e3e555-1a84-3655-ac7b-f7c3d67d3119.roa (raw, json)
Hash identifier:          cFND7awpBKh1Fn5Kxo2frwBnTznzKropta9kpl1vh9g=
Subject key identifier:   44:DF:27:1C:4C:91:E0:F8:1C:D4:0F:22:ED:59:5C:F6:10:1C:92:51
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F43285849B5E1D144F1F2F43595869260
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/46e3e555-1a84-3655-ac7b-f7c3d67d3119.roa
Signing time:             Thu 01 May 2025 16:30:08 +0000
ROA not before:           Thu 01 May 2025 16:30:08 +0000
ROA not after:            Wed 30 Jul 2025 16:30:08 +0000
asID:                     22773
IP address blocks:        174.74.136.0/22 maxlen: 22
Validation:               Failed, certificate revoked on Thu 01 May 2025 21:56:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:e1:d1:44:f1:f2:f4:35:95:86:92:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  1 16:30:08 2025 GMT
            Not After : Jul 30 16:30:08 2025 GMT
        Subject: CN=3921a945-d1eb-41bb-8cd1-4b3457c1b516
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:f1:2d:0e:44:59:97:17:71:75:03:94:35:b7:
                    b8:d4:fc:7e:e9:10:a5:45:0c:fd:1d:f3:43:13:8c:
                    79:8f:23:7d:31:8b:54:44:53:2d:99:24:e4:09:e7:
                    5e:84:04:ae:25:c7:67:28:ab:61:eb:a9:db:e6:ac:
                    c9:4e:7e:22:87:4b:61:a9:06:7f:5a:4e:aa:c8:88:
                    05:af:1b:b8:4f:37:00:0f:0f:e9:43:b6:39:06:21:
                    5d:0b:01:64:c8:2e:42:53:6e:39:4b:32:ea:98:d5:
                    99:7a:aa:d3:af:41:4e:1d:22:49:fb:b9:8d:dc:90:
                    7f:3c:50:fc:2e:ec:c0:3d:cc:8b:9c:0a:33:6a:48:
                    c3:bc:64:85:ea:d8:0b:7c:e4:03:dc:8d:74:aa:3a:
                    5d:10:39:25:f4:e0:69:30:1a:51:f0:d7:b1:6b:75:
                    47:e3:5e:ea:aa:ac:f5:37:62:23:f1:80:be:f3:c5:
                    98:eb:6a:96:d8:6f:d8:8a:f8:e1:d3:0a:5a:8c:ac:
                    34:64:05:9f:02:25:ad:32:7c:9f:ef:29:8f:34:06:
                    03:9a:f5:54:7c:97:b1:0a:70:41:6e:6a:87:76:ed:
                    dd:3a:24:1f:86:2b:af:7a:14:be:70:ee:96:2e:be:
                    29:a5:c3:05:01:28:2e:87:93:7d:dd:76:15:5c:f3:
                    50:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:DF:27:1C:4C:91:E0:F8:1C:D4:0F:22:ED:59:5C:F6:10:1C:92:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/46e3e555-1a84-3655-ac7b-f7c3d67d3119.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.74.136.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:9a:80:3f:6e:10:66:64:62:45:c9:fd:99:0b:3f:ca:59:33:
         f6:19:7b:25:48:b9:91:59:bb:d7:b6:82:60:f3:31:9d:45:1e:
         e4:50:d8:df:db:26:90:f7:a3:f9:c7:c5:f9:2d:fe:7a:fa:04:
         f7:9d:76:f3:01:8a:79:c4:dc:26:35:58:21:29:e0:f5:4e:6d:
         78:20:49:2c:f3:c3:c2:95:21:a8:ff:64:f4:94:82:ed:56:ee:
         ef:d3:5e:d1:91:d9:27:c8:78:e7:bf:80:77:ba:fd:1e:e9:c3:
         2b:00:cf:bf:56:82:30:27:86:77:a4:ca:f3:5f:64:8d:b4:60:
         e1:ec:25:70:05:d4:c2:9a:b4:49:d5:c6:49:4c:59:d8:ef:7e:
         6f:dc:b2:42:a0:fd:0a:ce:08:5f:87:d2:99:db:9d:bd:56:d1:
         f9:71:66:82:cd:20:8d:0f:2d:74:6a:05:3c:5e:88:06:be:01:
         1b:2e:20:63:dd:d3:1f:63:9f:91:a2:9e:0e:10:ab:ac:e9:9b:
         e9:15:95:f1:77:66:69:33:8b:c8:a0:47:7d:3f:27:21:84:51:
         d1:51:5b:77:75:2d:ad:c9:05:78:c5:44:47:83:a2:03:7a:13:
         52:50:d1:5e:3b:bc:50:f8:f9:37:aa:86:17:b6:66:9c:e6:b9:
         9d:0d:8c:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 05:20:54 2025 by rpki-client