Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/afe50268-2c83-3c19-9b10-d6049064e8b3.roa
File:                     afe50268-2c83-3c19-9b10-d6049064e8b3.roa (raw, json)
Hash identifier:          8wisqVTKwZ5Shk5pXWK6qg5RwlizSDSi+6tFRwGHiU0=
Subject key identifier:   33:AF:7F:2F:3A:8E:88:FC:75:88:7B:13:15:FF:5C:87:6A:A8:FD:C6
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F43285849B5DF36878BAE40DA70E08500
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/afe50268-2c83-3c19-9b10-d6049064e8b3.roa
Signing time:             Thu 01 May 2025 16:24:53 +0000
ROA not before:           Thu 01 May 2025 16:24:53 +0000
ROA not after:            Wed 30 Jul 2025 16:24:53 +0000
asID:                     22773
IP address blocks:        70.185.42.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Thu 01 May 2025 21:35:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:df:36:87:8b:ae:40:da:70:e0:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  1 16:24:53 2025 GMT
            Not After : Jul 30 16:24:53 2025 GMT
        Subject: CN=30cf6844-2810-406e-b288-54e6b041fb72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:be:a1:b0:16:c7:3c:fb:7f:ab:16:48:f7:d8:
                    a5:70:7e:f5:ea:4a:8a:a0:c7:38:49:d3:19:ed:6f:
                    05:d8:2b:7f:a9:7a:1f:ab:9b:76:6d:f5:5f:9f:e5:
                    d5:49:68:10:d0:8f:73:15:57:b0:3d:c6:c0:cb:3f:
                    8b:96:74:a4:ee:1a:6e:ef:15:72:51:9c:c3:a5:2f:
                    a2:a2:ca:90:f5:38:af:ef:8c:d0:d2:bc:5b:4f:d1:
                    88:44:97:f7:b3:9e:da:80:a1:76:c6:aa:94:94:a7:
                    2c:10:bd:1b:dc:31:09:59:28:f5:84:d0:65:a3:82:
                    43:0b:be:c8:c5:e0:15:10:ca:8b:28:98:d0:ce:e1:
                    c5:fc:44:e1:33:1c:e9:6b:15:d9:40:be:5a:fe:de:
                    52:4e:c0:8d:79:4b:08:14:3f:a6:a1:6c:4c:ad:2f:
                    a2:83:de:4c:3c:2a:fe:b7:78:00:3a:5e:78:7b:ee:
                    c5:f9:57:74:49:68:8d:db:7d:97:3a:59:51:56:e9:
                    ac:23:c7:35:53:66:5d:02:88:f0:b0:f1:1d:c4:e5:
                    08:3d:7e:80:16:ed:ce:f1:16:91:6d:81:15:d0:8b:
                    22:e2:ef:5d:8b:2a:9b:13:1a:02:88:1c:7d:cf:40:
                    55:c7:42:13:be:e6:26:8d:dd:db:2d:af:79:e1:1a:
                    70:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:AF:7F:2F:3A:8E:88:FC:75:88:7B:13:15:FF:5C:87:6A:A8:FD:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/afe50268-2c83-3c19-9b10-d6049064e8b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.185.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:fd:f4:da:c0:6b:36:6a:89:b5:a4:58:2c:b8:10:52:6e:a9:
         36:b0:cb:70:f9:1f:52:fa:1d:9a:ce:84:db:21:59:8d:b6:60:
         67:07:e7:4b:50:cb:a3:35:78:ef:79:6e:a2:d3:b9:93:d1:56:
         21:fb:b0:2c:24:61:4a:3a:a2:65:b4:c8:8a:f4:28:67:6a:c5:
         b4:5a:0a:85:e3:19:b1:77:5a:40:97:2b:76:52:93:9e:d0:ac:
         6f:6a:2f:26:1e:cf:ed:9d:9d:f3:eb:ce:1a:9b:30:06:62:cc:
         17:d3:8b:59:3a:6e:5e:1d:ec:a6:11:eb:30:1f:3a:f9:46:a5:
         15:71:ad:f8:27:d3:73:6f:2d:30:96:36:c0:a5:ac:6c:c6:15:
         72:c0:fb:77:83:17:8b:ed:4a:9d:66:45:46:f1:d2:ac:55:e8:
         8d:11:64:94:3c:39:e0:85:5b:68:1b:70:54:77:f1:9e:a9:1c:
         c1:b5:3f:ed:01:eb:e2:c8:8f:66:2d:dc:63:35:3d:59:ef:bb:
         69:4a:d9:51:13:c3:60:ff:30:b5:31:2a:54:18:9d:53:00:2f:
         08:86:14:2a:67:f4:e5:8e:77:c9:da:b6:19:1c:9d:14:1e:ba:
         40:86:fc:a6:9e:3e:14:d0:4f:e4:cd:3b:b6:58:e0:80:50:d4:
         04:b8:83:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 08:12:16 2025 by rpki-client