Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8b736a00-bc28-3a55-b61c-f609d069901b.roa
File:                     8b736a00-bc28-3a55-b61c-f609d069901b.roa (raw, json)
Hash identifier:          zx1Jo9H33q19geA4VLtKheqORa0wva6VhlkCln94yyY=
Subject key identifier:   FC:4C:B3:28:20:21:1D:AB:52:4E:AE:35:BD:AA:8E:7F:11:4D:69:81
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F43285849B5DD6D235B936100AEDE6700
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8b736a00-bc28-3a55-b61c-f609d069901b.roa
Signing time:             Thu 01 May 2025 16:21:17 +0000
ROA not before:           Thu 01 May 2025 16:21:17 +0000
ROA not after:            Wed 30 Jul 2025 16:21:17 +0000
asID:                     22773
IP address blocks:        68.98.68.0/23 maxlen: 23
Validation:               Failed, certificate revoked on Thu 01 May 2025 21:18:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:dd:6d:23:5b:93:61:00:ae:de:67:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  1 16:21:17 2025 GMT
            Not After : Jul 30 16:21:17 2025 GMT
        Subject: CN=dd85b7a6-d642-4bf5-a516-c49ac57760bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:50:c6:dc:6e:b8:6d:5a:9b:8f:cd:3c:ee:f0:
                    d1:83:ce:17:6f:80:af:f6:94:3b:31:57:fa:d7:00:
                    6f:07:34:74:c2:38:d0:70:b5:e2:95:53:d2:c7:87:
                    51:c0:61:23:b5:d2:20:88:1a:86:01:c6:4c:e0:14:
                    e8:40:e9:40:0c:2d:5d:a9:c5:38:a9:32:f5:4b:e6:
                    46:29:0a:3d:8b:7f:97:f8:8d:42:73:d8:0c:91:a8:
                    72:c1:89:14:b0:dc:bf:0b:96:2b:d1:d6:1d:e0:df:
                    26:44:d2:d4:92:42:e4:03:78:82:10:64:fe:40:55:
                    ce:81:d3:1c:43:a8:ee:c2:c6:8f:c9:b7:01:50:ac:
                    42:1a:a6:07:b8:72:87:26:76:ba:42:a9:f3:e5:eb:
                    fa:09:8c:7d:d0:21:fb:07:d9:25:85:31:12:c5:8a:
                    03:a7:46:78:67:b5:bb:c9:b6:26:fe:25:b7:00:d6:
                    e5:bd:ca:13:d2:ee:49:b9:6a:a9:e7:2a:1c:65:47:
                    16:cc:27:c6:81:21:84:3c:2b:1a:8d:e2:fb:55:6a:
                    40:6f:32:99:d5:75:a1:06:e6:20:aa:85:43:ae:12:
                    94:72:8e:5e:29:99:5a:7a:8f:47:ab:bf:3b:e9:ea:
                    94:9b:d5:83:77:16:8c:54:f5:c2:9c:52:21:0d:f3:
                    d5:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:4C:B3:28:20:21:1D:AB:52:4E:AE:35:BD:AA:8E:7F:11:4D:69:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8b736a00-bc28-3a55-b61c-f609d069901b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.98.68.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:a8:5e:c4:3e:df:f4:92:ae:7f:01:05:f7:c9:3a:67:0c:7e:
         7a:25:5d:93:3c:00:c3:03:0d:ae:f0:ec:c4:be:47:75:23:6d:
         52:5c:e5:f4:98:da:1d:df:2b:53:b9:a1:14:98:c4:92:68:46:
         c7:85:1f:4c:5a:c2:0b:01:7a:ed:d5:c5:ff:00:38:73:b9:44:
         4a:57:36:84:7c:c2:45:17:85:a3:27:59:06:ee:2a:d9:6c:1a:
         d1:12:b1:70:65:ed:95:0a:7a:bc:62:ca:30:2d:4b:f1:e6:2b:
         51:1c:70:84:ee:c0:ab:a1:65:ab:ee:c5:a1:df:72:00:46:13:
         67:50:55:46:44:82:5b:3f:bb:59:10:27:0d:b2:b6:8e:65:f6:
         f0:51:e4:e8:c3:a1:b0:cb:2a:96:bc:a5:3b:1e:41:2f:7b:99:
         45:6b:3b:45:27:75:71:5d:ca:f2:b5:cc:f0:0f:74:11:d8:57:
         fe:46:cb:13:ea:9c:60:38:61:33:a0:b4:90:da:23:e4:9e:a8:
         92:c9:67:10:d7:52:e0:d1:ad:57:e0:ef:8d:86:57:09:54:68:
         27:fd:76:1b:eb:81:5c:cc:4e:17:8e:a1:05:00:76:7a:26:86:
         e4:ea:19:40:09:c0:19:c5:e3:b2:c0:39:53:b1:b2:f3:98:b8:
         35:5d:09:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 01:30:26 2025 by rpki-client