Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9d1e3e39-ec51-3900-aec8-29133e63fa3d.roa
File:                     9d1e3e39-ec51-3900-aec8-29133e63fa3d.roa (raw, json)
Hash identifier:          c4VpRIUgGjEtFQ2F1Z5LFXVCrDUDSf75L1GJ4BKXDuc=
Subject key identifier:   A9:70:6C:6B:11:BC:42:2C:AD:40:A1:A5:83:50:C2:A3:84:6D:9D:C3
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F43285849B5E2F61DC0A1673EDC93DC80
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9d1e3e39-ec51-3900-aec8-29133e63fa3d.roa
Signing time:             Thu 01 May 2025 16:32:26 +0000
ROA not before:           Thu 01 May 2025 16:32:26 +0000
ROA not after:            Wed 30 Jul 2025 16:32:26 +0000
asID:                     22773
IP address blocks:        2600:8800:5404::/47 maxlen: 47
Validation:               Failed, certificate revoked on Thu 01 May 2025 22:07:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:e2:f6:1d:c0:a1:67:3e:dc:93:dc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  1 16:32:26 2025 GMT
            Not After : Jul 30 16:32:26 2025 GMT
        Subject: CN=7273d2c5-f090-474a-a0cd-e529d1ce6332
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:20:ee:74:cd:32:95:20:37:3d:99:2d:2c:4e:
                    4a:e9:18:97:63:b0:f4:e9:b5:f1:29:2c:54:fb:2c:
                    00:c6:05:d7:0c:f1:41:89:41:a0:c3:72:33:c2:b5:
                    2f:be:a6:1d:80:8a:13:4e:0f:73:15:5f:a2:36:67:
                    e8:fe:1e:f2:0e:6f:af:1a:91:14:c6:0b:6a:f2:73:
                    39:ce:67:c0:77:3c:9b:f1:10:f2:57:41:86:e9:44:
                    db:27:34:57:94:c6:89:40:3f:bd:b6:64:81:bd:69:
                    d0:b1:88:2e:4f:a1:b6:29:af:4d:b7:ae:b8:09:fa:
                    2d:72:72:a3:f6:e6:92:67:8e:4b:f8:11:69:0c:d7:
                    44:52:aa:ff:57:d3:1b:84:a6:cc:76:e3:9c:39:a9:
                    90:10:07:c4:5c:b5:e0:1a:7f:7f:be:d2:7b:5f:f3:
                    c8:4c:73:0e:1e:f5:d3:0b:45:28:65:e7:05:95:ff:
                    ad:26:84:5b:68:d1:1a:92:a7:34:d1:c0:bf:f2:cf:
                    36:3b:fd:4e:b0:8b:b8:44:76:9a:ea:f1:0a:6f:65:
                    bf:fe:91:ad:84:f1:6e:f0:49:a7:35:bd:d4:59:67:
                    71:7a:0a:93:7e:53:7a:86:70:70:77:7c:c2:89:86:
                    0b:02:dc:c8:23:89:d4:6f:e3:45:fd:0f:ab:b3:a0:
                    3b:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:70:6C:6B:11:BC:42:2C:AD:40:A1:A5:83:50:C2:A3:84:6D:9D:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9d1e3e39-ec51-3900-aec8-29133e63fa3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:8800:5404::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:99:75:f6:da:c2:15:90:95:d4:bf:30:b3:c2:d5:83:8b:f0:
         03:18:c1:dc:03:ad:7e:ab:5d:28:1c:99:c3:eb:ab:c9:31:9f:
         b4:06:d5:e2:f1:08:d6:2c:1a:79:55:bb:26:48:d7:05:9b:c9:
         d6:0b:30:db:6c:bb:d9:15:cc:17:77:ef:f3:72:36:b2:15:4e:
         0a:79:97:74:7e:0a:2c:4d:1a:b3:da:5e:11:34:4b:2a:86:f7:
         b7:a1:eb:73:56:36:0a:71:8a:fd:74:1a:e3:de:c6:12:78:9c:
         86:11:df:91:44:d1:f0:3f:db:db:34:06:1e:02:ce:07:f4:4a:
         b9:e5:40:da:e1:b5:ad:a1:12:29:62:c1:eb:6a:92:77:56:bd:
         a9:9f:5d:bc:ba:f6:25:a6:81:b4:e9:54:8d:47:22:27:8d:3b:
         fc:56:98:e5:e8:21:fe:91:f6:0b:84:34:b9:68:e2:c9:f4:eb:
         5f:91:6a:5c:84:0a:71:f7:3d:7c:af:5b:c4:f2:24:1a:eb:55:
         47:d0:48:ff:f6:e8:8c:f5:4f:52:91:26:76:1a:b9:66:43:c0:
         c4:0e:42:f2:ee:fb:44:9c:16:ad:36:76:d5:16:5b:d1:d7:f3:
         46:54:ae:3a:2e:7a:28:1f:57:09:fb:64:84:2d:32:03:3d:3b:
         d7:a4:f8:12
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEm14vYdwKFnPtyT3IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MDUwMTE2MzIyNloXDTI1MDczMDE2MzIyNlowLzEtMCsGA1UEAxMk
NzI3M2QyYzUtZjA5MC00NzRhLWEwY2QtZTUyOWQxY2U2MzMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCDudM0ylSA3PZktLE5K6RiXY7D06bXxKSxU
+ywAxgXXDPFBiUGgw3IzwrUvvqYdgIoTTg9zFV+iNmfo/h7yDm+vGpEUxgtq8nM5
zmfAdzyb8RDyV0GG6UTbJzRXlMaJQD+9tmSBvWnQsYguT6G2Ka9Nt664CfotcnKj
9uaSZ45L+BFpDNdEUqr/V9MbhKbMduOcOamQEAfEXLXgGn9/vtJ7X/PITHMOHvXT
C0UoZecFlf+tJoRbaNEakqc00cC/8s82O/1OsIu4RHaa6vEKb2W//pGthPFu8Emn
Nb3UWWdxegqTflN6hnBwd3zCiYYLAtzII4nUb+NF/Q+rs6A7yQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFKlwbGsRvEIsrUChpYNQwqOEbZ3DMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOWQxZTNlMzktZWM1MS0z
OTAwLWFlYzgtMjkxMzNlNjNmYTNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgCIAFQE
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGqZdfbawhWQldS/MLPC1YOL8AMYwdwDrX6rXSgcmcPrq8kxn7QG
1eLxCNYsGnlVuyZI1wWbydYLMNtsu9kVzBd37/NyNrIVTgp5l3R+CixNGrPaXhE0
SyqG97eh63NWNgpxiv10GuPexhJ4nIYR35FE0fA/29s0Bh4Czgf0SrnlQNrhta2h
EiliwetqkndWvamfXby69iWmgbTpVI1HIieNO/xWmOXoIf6R9guENLlo4sn061+R
alyECnH3PXyvW8TyJBrrVUfQSP/26Iz1T1KRJnYauWZDwMQOQvLu+0ScFq02dtUW
W9HX80ZUrjoueigfVwn7ZIQtMgM9O9ek+BI=
-----END CERTIFICATE-----
Generated at Thu May 15 05:22:37 2025 by rpki-client