Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a3d93ce1-f840-3acc-a5ad-432e327cf10a.roa
File:                     a3d93ce1-f840-3acc-a5ad-432e327cf10a.roa (raw, json)
Hash identifier:          fM0iIohmnfWW7icTdlLTRBF0e/HRjd9Ek7KYogD5rQM=
Subject key identifier:   9B:A8:3A:C5:99:6F:0E:D0:97:1A:7B:3D:CD:2F:51:29:F3:56:61:65
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F43285849B5E06539177539DD803D7CF0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a3d93ce1-f840-3acc-a5ad-432e327cf10a.roa
Signing time:             Thu 01 May 2025 16:27:16 +0000
ROA not before:           Thu 01 May 2025 16:27:16 +0000
ROA not after:            Wed 30 Jul 2025 16:27:16 +0000
asID:                     22773
IP address blocks:        72.216.72.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Thu 01 May 2025 21:44:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:e0:65:39:17:75:39:dd:80:3d:7c:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  1 16:27:16 2025 GMT
            Not After : Jul 30 16:27:16 2025 GMT
        Subject: CN=0d58ff27-70e7-49e8-96b6-980e98be4162
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:4b:71:5a:36:2f:a3:e6:f6:f4:51:04:b7:5d:
                    e5:02:5f:84:c7:db:5a:22:55:c0:94:0d:60:71:fe:
                    ec:7c:a9:af:a6:c3:b7:c8:3e:84:2a:91:c8:89:0c:
                    8a:bc:c1:cd:47:e5:bc:ea:45:fb:c8:9d:a3:b5:ea:
                    a6:fc:0d:8d:93:9e:60:42:8c:c3:72:cd:4e:aa:97:
                    b6:2e:00:35:be:97:05:1f:f7:21:d9:1f:26:d2:05:
                    fa:da:4d:0b:15:6d:b7:39:c9:a4:65:28:91:c3:cd:
                    12:b9:1e:79:dc:48:18:f1:b7:01:8c:e3:d2:f4:20:
                    e6:13:83:c3:a2:46:e1:d2:52:99:77:56:84:7a:51:
                    36:9f:02:94:83:3c:8f:1f:8d:59:66:51:23:a0:be:
                    2b:fd:75:f5:d1:8f:f0:c3:da:be:49:83:c7:63:fa:
                    0f:11:9c:51:79:dc:fa:9d:f7:76:13:b0:6d:dc:c6:
                    e2:ab:fa:15:fc:5e:f3:53:b2:a8:9e:05:48:2c:29:
                    0e:a8:42:71:61:d9:73:06:b6:3c:f5:1a:bf:ec:8c:
                    af:51:5c:b6:8e:d3:f4:0a:80:ab:74:0f:dc:41:f6:
                    e3:fe:94:55:12:39:70:3b:e8:9c:27:d4:21:7b:58:
                    8f:ed:c7:9a:ad:8b:91:3a:8d:98:7f:da:51:b3:87:
                    3b:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:A8:3A:C5:99:6F:0E:D0:97:1A:7B:3D:CD:2F:51:29:F3:56:61:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a3d93ce1-f840-3acc-a5ad-432e327cf10a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.216.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:77:7e:ff:35:4d:76:41:04:d8:3e:9e:71:9e:b0:05:14:86:
         c1:63:d8:85:8b:52:75:3a:7b:78:21:68:e9:c4:a6:c4:ec:17:
         62:98:a9:24:29:09:92:b3:91:4c:58:1f:5e:24:72:8a:c6:c2:
         85:c4:04:06:e7:9b:cf:b7:af:8d:6d:5c:ad:39:e3:6d:76:0f:
         e9:23:b5:2a:e5:6b:dd:c8:7c:ff:af:32:f0:6d:ec:f4:5a:a2:
         8d:97:e5:86:88:a5:35:d5:e0:6f:d3:e9:96:25:aa:98:1c:82:
         18:81:33:35:76:e8:5a:59:d2:b9:9b:3d:fd:cb:6f:fb:3a:86:
         f8:11:cf:e5:c8:f8:72:18:b9:bc:d2:f8:59:a5:19:d6:1c:7a:
         a1:39:0d:d4:c7:b4:67:26:98:05:34:ab:d0:9f:9a:57:44:f7:
         5f:ae:ec:3d:ce:c2:61:d3:9a:7f:4d:ab:af:6a:6c:16:fc:cf:
         51:5f:3d:bf:47:08:6d:5b:b5:67:45:37:44:9e:4a:c9:59:a3:
         9c:a6:c0:ab:12:b5:fe:a6:72:07:35:52:ad:52:0e:2d:eb:07:
         96:81:97:ef:bb:4c:1f:e4:cf:70:4f:49:76:1d:5f:78:12:55:
         da:ec:52:9d:04:fa:63:57:e9:7c:ee:52:37:32:ea:e3:8b:d3:
         34:01:c4:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 02:32:25 2025 by rpki-client