Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6ad1606d-bce0-3ca3-a323-a1fcba6682a1.roa
File:                     6ad1606d-bce0-3ca3-a323-a1fcba6682a1.roa (raw, json)
Hash identifier:          0mYAgQapZ35IO/hiZVAHEhEvAzeLihgNlpcf9q4RK1w=
Subject key identifier:   6D:AB:76:BE:AE:EE:7F:50:6E:40:FD:CB:2F:46:BF:EA:D6:A0:22:E0
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F43285849B5DD4DEF83AEA51341C9E080
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6ad1606d-bce0-3ca3-a323-a1fcba6682a1.roa
Signing time:             Thu 01 May 2025 16:21:02 +0000
ROA not before:           Thu 01 May 2025 16:21:02 +0000
ROA not after:            Wed 30 Jul 2025 16:21:02 +0000
asID:                     22773
IP address blocks:        68.3.164.0/23 maxlen: 23
Validation:               Failed, certificate revoked on Thu 01 May 2025 21:17:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:dd:4d:ef:83:ae:a5:13:41:c9:e0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  1 16:21:02 2025 GMT
            Not After : Jul 30 16:21:02 2025 GMT
        Subject: CN=5f7dd23f-959a-455b-9a43-0f0d2c6793f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:8e:ce:0d:d2:fd:7c:e0:7e:4a:d0:9a:30:4b:
                    ee:de:44:41:12:4c:9c:84:0c:cd:9d:17:10:ad:09:
                    40:8f:84:db:2f:ac:20:74:dd:19:83:3e:6f:5e:d4:
                    b4:3b:78:02:71:81:1e:2e:72:16:ba:8c:21:67:4b:
                    77:3f:9d:26:01:ae:04:7b:58:9b:e1:5b:33:a6:7b:
                    44:39:82:fc:0f:4c:63:20:6f:d5:94:27:84:27:fb:
                    86:dc:de:e9:6d:ae:ee:8b:c1:7c:28:2b:2a:6c:55:
                    9b:42:55:e3:97:89:cf:92:98:96:53:28:69:f5:90:
                    d3:36:68:0e:12:96:75:6d:1f:8e:63:32:01:c4:3b:
                    1e:af:97:5a:7e:83:1e:8f:39:db:07:6f:77:d9:ea:
                    ff:67:11:68:b9:ee:e7:07:6b:48:01:b3:5c:53:f8:
                    40:71:03:5e:a8:21:3f:b1:c1:cb:cf:0a:33:ac:ba:
                    12:26:55:04:ee:99:d5:16:c6:b4:30:d2:16:37:78:
                    ce:21:3f:1d:28:3d:42:36:59:2c:9b:f2:52:a8:96:
                    0f:12:55:3c:96:a0:13:73:2e:cc:a8:9b:4d:02:f4:
                    be:ab:bb:b0:45:6e:15:c3:75:f2:86:eb:ff:51:1b:
                    bb:a5:f9:b3:3f:ce:80:5c:18:9a:e2:6f:68:d7:0f:
                    b5:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:AB:76:BE:AE:EE:7F:50:6E:40:FD:CB:2F:46:BF:EA:D6:A0:22:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6ad1606d-bce0-3ca3-a323-a1fcba6682a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.3.164.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:53:85:07:ca:12:97:ae:2c:2a:1c:1d:3a:0f:4d:f2:4f:53:
         bf:47:61:37:48:eb:10:fe:8d:91:70:27:dc:bf:5c:7b:c6:3a:
         4a:e3:f3:d5:f9:0d:2d:69:16:51:74:9c:1a:70:b4:76:09:35:
         7d:56:9d:a2:69:bc:9d:e8:29:58:a6:42:eb:99:40:85:d0:21:
         e7:9f:cd:20:27:56:a9:71:db:79:3f:73:83:25:82:25:06:d3:
         4b:67:05:b6:7b:d9:6f:46:ce:f7:d7:41:6e:2f:40:57:3b:f5:
         5f:1e:79:ce:36:b1:ec:14:82:aa:af:87:74:3c:5e:e0:e7:16:
         a0:8b:d4:ae:9b:2d:e3:8a:3c:45:6d:87:3b:6e:d0:42:24:08:
         7f:45:ef:b2:9c:f7:ab:1e:69:e9:cf:44:96:96:7b:b7:09:ab:
         86:69:6e:ee:9b:20:01:30:8c:21:1f:5d:db:61:72:72:d3:34:
         d1:9d:9b:26:a9:d8:f4:de:43:f5:23:a2:8a:95:c3:9e:8a:26:
         ca:86:3e:24:03:f4:11:78:e0:f8:78:b2:3d:9d:93:2f:56:55:
         b6:70:3e:ad:c8:14:ae:94:c5:b0:b8:3b:f1:28:a7:16:3a:0f:
         05:4e:dd:0d:3b:5a:66:dd:1a:96:6a:1c:9c:49:b6:db:39:c5:
         d8:5d:e6:f8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm13U3vg66lE0HJ4IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MDUwMTE2MjEwMloXDTI1MDczMDE2MjEwMlowLzEtMCsGA1UEAxMk
NWY3ZGQyM2YtOTU5YS00NTViLTlhNDMtMGYwZDJjNjc5M2Y2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn47ODdL9fOB+StCaMEvu3kRBEkychAzNnRcQ
rQlAj4TbL6wgdN0Zgz5vXtS0O3gCcYEeLnIWuowhZ0t3P50mAa4Ee1ib4VszpntE
OYL8D0xjIG/VlCeEJ/uG3N7pba7ui8F8KCsqbFWbQlXjl4nPkpiWUyhp9ZDTNmgO
EpZ1bR+OYzIBxDser5dafoMejznbB2932er/ZxFoue7nB2tIAbNcU/hAcQNeqCE/
scHLzwozrLoSJlUE7pnVFsa0MNIWN3jOIT8dKD1CNlksm/JSqJYPElU8lqATcy7M
qJtNAvS+q7uwRW4Vw3Xyhuv/URu7pfmzP86AXBia4m9o1w+1iwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG2rdr6u7n9QbkD9yy9Gv+rWoCLgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNmFkMTYwNmQtYmNlMC0z
Y2EzLWEzMjMtYTFmY2JhNjY4MmExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRAOkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGhThQfKEpeuLCocHToPTfJPU79HYTdI6xD+jZFwJ9y/XHvGOkrj89X5
DS1pFlF0nBpwtHYJNX1WnaJpvJ3oKVimQuuZQIXQIeefzSAnVqlx23k/c4MlgiUG
00tnBbZ72W9GzvfXQW4vQFc79V8eec42sewUgqqvh3Q8XuDnFqCL1K6bLeOKPEVt
hztu0EIkCH9F77Kc96seaenPRJaWe7cJq4Zpbu6bIAEwjCEfXdthcnLTNNGdmyap
2PTeQ/UjooqVw56KJsqGPiQD9BF44Ph4sj2dky9WVbZwPq3IFK6UxbC4O/EopxY6
DwVO3Q07WmbdGpZqHJxJtts5xdhd5vg=
-----END CERTIFICATE-----
Generated at Thu May 15 02:22:53 2025 by rpki-client