Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9c2bfa84-8567-366b-a18d-37c5525dc530.roa
File:                     9c2bfa84-8567-366b-a18d-37c5525dc530.roa (raw, json)
Hash identifier:          XgU0PNs/0lBV3US152aTBAcqrjYUg0N7offe4GaeHq8=
Subject key identifier:   23:11:EC:61:25:12:6A:D1:B8:E7:04:FA:F2:92:1F:09:69:54:E5:3B
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F43285849B5E0D61462399FB7AF709EC0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9c2bfa84-8567-366b-a18d-37c5525dc530.roa
Signing time:             Thu 01 May 2025 16:28:09 +0000
ROA not before:           Thu 01 May 2025 16:28:09 +0000
ROA not after:            Wed 30 Jul 2025 16:28:09 +0000
asID:                     22773
IP address blocks:        72.223.62.0/23 maxlen: 23
Validation:               Failed, certificate revoked on Thu 01 May 2025 21:48:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:e0:d6:14:62:39:9f:b7:af:70:9e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  1 16:28:09 2025 GMT
            Not After : Jul 30 16:28:09 2025 GMT
        Subject: CN=f7d05ef8-479c-4444-ab0e-60a872533e06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:9a:98:25:17:60:8e:32:e5:78:ee:01:93:44:
                    5a:a4:a6:a7:34:ea:8c:d5:d3:2e:9e:ed:89:68:3e:
                    46:c7:76:e2:a4:dc:17:98:a3:17:fa:ab:99:74:fc:
                    89:28:7a:cc:fd:10:46:61:e9:85:0a:19:49:e2:20:
                    1a:eb:49:d2:31:b7:65:76:9b:6e:35:20:d3:68:ac:
                    d0:02:f3:27:19:7e:58:50:64:59:6b:5d:32:f2:58:
                    60:5b:ac:f3:71:fd:58:a6:d9:60:80:9d:8d:33:ed:
                    04:1b:0a:60:13:5f:07:9c:84:d6:44:75:84:87:60:
                    91:b6:a4:33:26:35:71:47:04:01:5b:a6:e9:8f:58:
                    d0:4e:d6:50:7a:b3:ce:2e:a9:e5:d2:f0:df:74:f4:
                    b6:db:b6:93:ee:cd:d6:67:b9:f9:db:dc:e6:f6:98:
                    d4:b8:59:65:f8:98:61:e0:52:83:b9:64:f2:b5:3a:
                    46:43:c3:8d:72:68:d2:ea:eb:07:33:eb:bc:d8:15:
                    c0:2b:b0:d8:b8:d0:a9:95:c7:cf:6b:29:35:71:14:
                    d6:39:7d:58:b3:96:ab:20:2c:8f:71:bb:ec:76:0c:
                    90:47:2d:4f:b2:15:db:78:f9:d2:d5:d2:75:8e:fc:
                    62:a3:ee:30:1b:0f:09:07:9c:96:05:75:a2:d3:b1:
                    53:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:11:EC:61:25:12:6A:D1:B8:E7:04:FA:F2:92:1F:09:69:54:E5:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9c2bfa84-8567-366b-a18d-37c5525dc530.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.223.62.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:cd:38:cc:f3:06:20:56:4f:04:e4:20:2d:5c:e1:ce:74:fd:
         43:78:67:e6:ab:57:e4:5c:20:7d:5a:c5:92:91:bd:77:74:32:
         57:7a:25:d1:94:85:21:f4:05:59:fb:7e:b8:7f:4b:53:7c:fc:
         0b:ad:7d:cc:c4:5d:11:f1:26:79:6c:8a:f7:b9:2b:66:03:5e:
         b3:37:4c:dd:bb:3e:da:48:29:52:78:50:99:8a:ff:a1:cb:e2:
         68:a1:53:51:cb:21:a6:b3:6c:b5:d6:cd:23:11:92:8b:30:b7:
         cf:93:39:07:82:c3:42:a8:bf:f3:33:95:4b:1e:81:ca:2b:9d:
         fe:5e:39:aa:97:06:d4:d1:25:b9:dc:ae:71:d8:19:a2:75:1a:
         63:c4:04:ef:e0:bc:3c:e2:62:38:47:7c:55:04:dd:4c:79:85:
         5f:60:95:82:4d:03:9f:c0:fb:41:a1:ee:36:48:4c:ce:2a:a1:
         c6:5e:d4:fd:cb:60:e5:28:11:70:20:05:49:8e:7b:56:f5:17:
         ca:00:aa:c9:03:59:ee:0c:dd:cc:e0:91:b1:8e:0d:f5:87:32:
         65:7f:df:84:25:2a:82:d8:7b:00:ff:66:e7:0a:72:da:f6:ec:
         75:33:15:69:01:f4:30:a4:8b:fd:0c:2e:a2:42:da:2e:a8:52:
         31:8d:5b:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 02:23:03 2025 by rpki-client