Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/67bae122-63d0-3af5-8987-184dfb9e826b.roa
File:                     67bae122-63d0-3af5-8987-184dfb9e826b.roa (raw, json)
Hash identifier:          HHUUixYtxPDbGunrv3tnLtrAKK4NHziDwWLvfVZYZVI=
Subject key identifier:   C6:F8:5E:A9:F6:70:0D:1D:A9:74:0F:71:DA:0E:6B:C1:31:54:94:08
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F43285849B5DCD4E477A54E8C211A5B80
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/67bae122-63d0-3af5-8987-184dfb9e826b.roa
Signing time:             Thu 01 May 2025 16:20:05 +0000
ROA not before:           Thu 01 May 2025 16:20:05 +0000
ROA not after:            Wed 30 Jul 2025 16:20:05 +0000
asID:                     22773
IP address blocks:        24.251.180.0/23 maxlen: 23
Validation:               Failed, certificate revoked on Thu 01 May 2025 21:12:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:dc:d4:e4:77:a5:4e:8c:21:1a:5b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  1 16:20:05 2025 GMT
            Not After : Jul 30 16:20:05 2025 GMT
        Subject: CN=1f1a95f8-e867-4508-b921-0a95b645c323
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b7:0f:5f:89:08:17:59:4f:ef:31:71:6b:ee:
                    32:a9:13:05:a8:16:26:4a:e9:99:71:e4:99:11:47:
                    b7:d1:dd:68:e7:3e:b9:31:0a:5e:1e:a7:e2:ac:db:
                    79:b8:a8:15:97:85:31:8e:b2:cc:29:d5:66:4c:23:
                    3c:b4:1b:99:8d:e5:a0:4d:02:1c:1d:78:f3:ec:dd:
                    c1:0a:f4:52:c0:f0:86:31:72:2f:ba:38:59:2d:7d:
                    0e:60:e3:9f:f7:be:ae:b8:c5:5c:25:df:35:e8:b9:
                    d6:bd:14:08:f8:02:46:a4:0b:2d:ce:b9:18:d5:88:
                    36:9a:96:87:4a:c7:04:c2:77:7b:db:58:30:56:e7:
                    91:2e:b0:9c:78:f8:4e:db:d1:8c:47:39:e1:87:da:
                    cb:9a:01:90:6d:54:22:67:df:a9:47:ef:8e:98:c2:
                    c5:a3:41:7a:ca:a6:1c:b8:98:03:8e:c6:56:0b:c1:
                    80:dc:ff:4f:c8:bd:6c:44:87:6d:dd:d1:bb:d7:fd:
                    17:a6:f2:7a:25:13:8b:60:67:8e:cb:84:89:92:81:
                    69:04:53:7c:aa:aa:91:a9:e7:32:84:8f:3f:81:36:
                    3a:63:fd:e2:63:8e:7a:1d:73:07:d6:4c:32:d8:1b:
                    25:3e:d6:7a:51:a8:53:0e:06:1e:f6:25:22:43:d6:
                    6d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:F8:5E:A9:F6:70:0D:1D:A9:74:0F:71:DA:0E:6B:C1:31:54:94:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/67bae122-63d0-3af5-8987-184dfb9e826b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.251.180.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:ef:fe:b7:8f:bc:f9:a4:4f:af:f4:2b:d8:df:96:2e:f6:fa:
         b9:f5:e5:6a:49:01:39:5a:bc:7a:3f:27:49:6e:ee:39:c2:aa:
         f8:8a:10:0a:43:2a:86:91:53:f8:ea:5c:02:2f:0a:ee:d5:97:
         aa:fa:05:4e:d6:da:4a:b9:2d:c3:79:65:6e:0c:df:d0:fa:e5:
         30:84:70:6d:05:38:55:64:74:a1:fa:d6:ff:3a:20:bb:a1:52:
         10:43:e8:b0:06:11:89:8c:cc:32:ff:3f:0d:e7:2a:6c:0f:14:
         f5:ea:e4:ac:78:89:90:c4:c1:e5:41:ce:64:d7:73:63:95:41:
         66:d5:d1:de:c8:98:86:4f:7b:70:67:4f:ca:91:ca:cd:15:ad:
         49:57:ac:19:84:ff:28:7b:6d:08:5f:c7:92:9d:8d:7a:e4:ab:
         fc:09:db:88:6b:7a:67:4a:ba:26:51:89:aa:72:67:e2:39:aa:
         ab:82:6f:88:78:b7:f0:e5:54:85:1a:ed:8f:3c:91:36:d3:72:
         16:4a:6e:cf:e3:c6:e7:8b:25:32:d5:e7:f9:44:de:85:b5:38:
         13:2c:86:e2:2f:97:55:0c:ef:4b:d2:b2:a0:74:a6:07:38:2a:
         96:94:ed:aa:c2:ab:f5:7c:b8:a6:f8:90:5b:9f:26:e2:a9:bd:
         83:0e:3d:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 02:33:45 2025 by rpki-client