Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6aab7cd8-1391-39e2-9518-948176dbc58c.roa
File:                     6aab7cd8-1391-39e2-9518-948176dbc58c.roa (raw, json)
Hash identifier:          9+v1X3+YPlQ1FM/we33XiUPofJHu+fNO+g+KcIH42hk=
Subject key identifier:   FD:7D:37:64:EE:B3:14:9E:67:30:7E:45:25:6E:63:F1:4A:9C:12:01
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F43285849B5DD49183C0A1F8864B9EC00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6aab7cd8-1391-39e2-9518-948176dbc58c.roa
Signing time:             Thu 01 May 2025 16:21:00 +0000
ROA not before:           Thu 01 May 2025 16:21:00 +0000
ROA not after:            Wed 30 Jul 2025 16:21:00 +0000
asID:                     22773
IP address blocks:        68.3.140.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Thu 01 May 2025 21:17:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:dd:49:18:3c:0a:1f:88:64:b9:ec:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  1 16:21:00 2025 GMT
            Not After : Jul 30 16:21:00 2025 GMT
        Subject: CN=4f4750a1-54ca-4693-863a-38c587b6d37d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:83:e3:7b:db:99:43:f6:b9:76:66:d8:cd:87:
                    b2:af:3d:23:1f:59:a6:40:c7:f1:1d:ec:23:3c:65:
                    46:fa:8e:a6:a2:84:e3:da:6f:28:92:12:42:0f:a9:
                    cd:e1:c4:f2:74:08:f3:6e:42:45:2a:1b:f7:6d:47:
                    2c:1b:18:4d:98:57:86:bb:06:b5:2f:85:79:dc:af:
                    a8:4d:0e:fc:3f:43:26:39:68:00:9d:93:fb:08:29:
                    f2:15:ce:92:4c:da:be:91:ee:a8:0c:7d:92:40:d5:
                    f3:78:75:92:d1:94:0d:83:16:95:9d:61:d5:f1:49:
                    14:ba:18:f4:69:36:d4:06:9b:87:42:d7:65:9e:48:
                    83:b0:b5:25:18:73:51:d8:38:c7:44:bc:cb:ea:8d:
                    b6:b0:38:07:4b:29:d6:a1:a4:56:80:fe:d0:25:61:
                    0e:94:8d:3c:05:9c:94:70:47:77:fc:3a:28:e5:94:
                    03:05:d8:40:dc:63:d0:2a:30:df:87:e0:bf:18:de:
                    6d:ab:df:5e:56:ee:cf:71:1b:40:86:e6:de:4b:1d:
                    d4:e3:a7:b8:58:e6:70:cb:4c:4b:3c:fe:00:92:52:
                    90:5e:39:1d:0c:55:63:fe:53:91:71:a1:af:3c:b7:
                    76:79:c5:e8:51:09:4d:72:5a:c7:d3:ee:82:ab:90:
                    d7:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:7D:37:64:EE:B3:14:9E:67:30:7E:45:25:6E:63:F1:4A:9C:12:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6aab7cd8-1391-39e2-9518-948176dbc58c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.3.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:91:34:d1:47:d0:cd:38:22:ac:4a:0c:75:60:39:e8:c6:c6:
         c0:5e:b2:8c:06:2d:71:15:58:8c:86:6a:5a:25:46:e2:f7:5d:
         f1:a8:4b:00:09:54:8f:13:01:be:56:b8:19:c9:5e:86:8f:8b:
         f7:72:ee:e4:dc:6b:6e:cc:46:a6:d6:64:a9:50:7f:b1:84:77:
         aa:c6:21:46:49:1f:6a:ad:3c:3c:c9:de:c7:a4:64:98:72:5f:
         80:ed:46:7f:d0:79:4d:bd:d1:ec:92:8e:b4:ae:15:9b:8f:24:
         78:a5:ef:b3:17:d5:60:1d:2f:e5:0a:6e:96:ae:f6:8a:4e:81:
         e4:3d:fe:86:c9:8b:93:c4:27:1a:38:55:ea:04:93:1d:22:34:
         37:c9:88:ba:97:57:48:f2:8e:c3:69:04:13:05:91:8a:4c:1b:
         ed:2d:9c:d6:37:38:3d:20:55:06:73:ae:1c:1d:cb:54:bc:d9:
         69:ac:e9:06:a9:e0:5c:e2:58:64:8b:43:2b:33:d6:39:1f:e7:
         14:f2:9d:9e:d1:bb:13:bd:8f:d2:5c:69:9a:76:1a:c8:9d:ec:
         32:2f:e9:50:fd:da:92:fa:82:1d:c8:06:1c:0c:b6:02:f8:5e:
         53:42:0a:88:84:3d:9b:3f:83:8a:3d:1b:b5:8f:6a:08:37:09:
         65:df:b2:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 02:44:33 2025 by rpki-client