Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b945e14c-a44d-39c7-bb8a-0d2daff6dea3.roa
File:                     b945e14c-a44d-39c7-bb8a-0d2daff6dea3.roa (raw, json)
Hash identifier:          p8WfotEJOfrPxJ0OlFQdrzR1xBs8/i1h9m30+WzVMic=
Subject key identifier:   96:BC:DD:52:3F:16:E4:CD:2F:68:45:3A:46:AF:B0:8C:E0:37:95:9A
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F43285849B5FA4FAAFE9FE6EA8926AB00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b945e14c-a44d-39c7-bb8a-0d2daff6dea3.roa
Signing time:             Thu 01 May 2025 17:19:29 +0000
ROA not before:           Thu 01 May 2025 17:19:29 +0000
ROA not after:            Wed 30 Jul 2025 17:19:29 +0000
asID:                     22773
IP address blocks:        70.173.24.0/23 maxlen: 23
Validation:               Failed, certificate revoked on Thu 01 May 2025 22:22:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:fa:4f:aa:fe:9f:e6:ea:89:26:ab:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  1 17:19:29 2025 GMT
            Not After : Jul 30 17:19:29 2025 GMT
        Subject: CN=e737e822-50f6-429b-884d-9e0bfd057e7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:58:ea:c6:cb:1b:0c:6d:56:a8:b1:c5:9f:fb:
                    f1:bc:10:a4:fb:6b:5e:87:04:1d:24:01:d7:71:c6:
                    70:ef:4b:ce:24:06:d7:f6:05:83:b1:e7:66:54:fb:
                    ee:f1:e3:4d:84:0f:38:a0:9a:55:f8:56:e1:16:67:
                    c3:ef:04:67:f1:dd:e2:7f:90:7b:44:58:d0:43:06:
                    f5:6f:59:db:75:04:a7:5f:ec:b3:97:63:c5:0f:95:
                    6f:9f:d0:a4:77:fa:3f:56:4a:ad:20:c9:9f:97:a7:
                    99:f2:54:d8:59:d2:a6:96:47:e5:b0:b6:22:31:f7:
                    7e:da:a8:5e:b5:e9:74:e7:d8:bd:3c:15:0b:75:9e:
                    0b:36:c3:14:a9:54:18:5d:e2:44:1a:78:f7:88:13:
                    57:ba:24:c4:c4:a0:2b:f5:09:1b:a8:89:11:d9:00:
                    8b:c4:73:e3:ab:89:b4:b6:a2:a0:bd:a7:3c:4e:43:
                    aa:0b:9a:74:28:b4:ea:a0:63:5b:fd:6f:90:f1:ba:
                    08:98:3f:58:a8:71:7d:dc:29:0d:a4:82:18:9d:17:
                    d1:31:f0:67:fa:81:98:53:f4:44:53:4f:d0:3d:39:
                    2f:06:05:ea:be:93:b5:5b:f5:7c:a0:e6:ed:bb:ce:
                    d0:b5:63:4a:28:72:ea:6b:74:63:ef:e2:3c:ef:e8:
                    c8:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:BC:DD:52:3F:16:E4:CD:2F:68:45:3A:46:AF:B0:8C:E0:37:95:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b945e14c-a44d-39c7-bb8a-0d2daff6dea3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.173.24.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:64:f8:5e:8f:53:47:99:3b:19:b9:42:1c:d6:65:ba:88:72:
         be:ef:aa:c6:be:e2:aa:71:f9:d4:3b:f0:b6:dc:f1:d2:1f:8a:
         15:c5:53:26:11:5d:1b:70:11:e1:70:84:a4:25:34:1e:ba:8e:
         13:f9:9c:43:0f:eb:bd:3b:74:ac:4f:5e:f1:0e:12:fb:3c:99:
         3e:d3:2f:ef:b6:39:46:29:bd:9c:b0:76:17:13:cf:42:7b:d2:
         ea:59:d0:e8:f3:f7:e8:64:dd:82:61:63:c1:01:89:19:61:39:
         ca:6b:62:1e:7d:a2:0d:2b:7a:1b:ca:5d:1e:3d:a1:a6:c2:df:
         fc:25:62:0a:93:28:df:7c:0c:ce:69:3c:d2:79:0e:60:36:0d:
         50:a2:23:3e:f2:dd:87:34:ca:57:b3:97:56:8a:71:2c:08:38:
         b0:d0:49:82:5e:c2:77:33:61:46:ef:d7:ce:95:8e:aa:86:2f:
         de:ba:eb:49:eb:6d:b1:4b:d3:32:0b:e3:09:49:cb:59:69:36:
         92:6d:9a:c7:91:ab:24:60:b7:c7:0f:60:dc:99:c1:c5:2c:fc:
         d4:f6:07:fa:eb:a2:81:d4:45:2d:b3:b8:d4:3e:cb:eb:70:64:
         05:7d:b3:5a:dd:23:36:d8:d4:cb:ce:b1:14:88:36:c2:c6:32:
         52:6e:b5:53
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1+k+q/p/m6okmqwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MDUwMTE3MTkyOVoXDTI1MDczMDE3MTkyOVowLzEtMCsGA1UEAxMk
ZTczN2U4MjItNTBmNi00MjliLTg4NGQtOWUwYmZkMDU3ZTdjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0VjqxssbDG1WqLHFn/vxvBCk+2tehwQdJAHX
ccZw70vOJAbX9gWDsedmVPvu8eNNhA84oJpV+FbhFmfD7wRn8d3if5B7RFjQQwb1
b1nbdQSnX+yzl2PFD5Vvn9Ckd/o/VkqtIMmfl6eZ8lTYWdKmlkflsLYiMfd+2qhe
tel059i9PBULdZ4LNsMUqVQYXeJEGnj3iBNXuiTExKAr9QkbqIkR2QCLxHPjq4m0
tqKgvac8TkOqC5p0KLTqoGNb/W+Q8boImD9YqHF93CkNpIIYnRfRMfBn+oGYU/RE
U0/QPTkvBgXqvpO1W/V8oObtu87QtWNKKHLqa3Rj7+I87+jIOwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJa83VI/FuTNL2hFOkavsIzgN5WaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYjk0NWUxNGMtYTQ0ZC0z
OWM3LWJiOGEtMGQyZGFmZjZkZWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRq0YMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADNk+F6PU0eZOxm5QhzWZbqIcr7vqsa+4qpx+dQ78Lbc8dIfihXFUyYR
XRtwEeFwhKQlNB66jhP5nEMP6707dKxPXvEOEvs8mT7TL++2OUYpvZywdhcTz0J7
0upZ0Ojz9+hk3YJhY8EBiRlhOcprYh59og0rehvKXR49oabC3/wlYgqTKN98DM5p
PNJ5DmA2DVCiIz7y3Yc0ylezl1aKcSwIOLDQSYJewnczYUbv186VjqqGL96660nr
bbFL0zIL4wlJy1lpNpJtmseRqyRgt8cPYNyZwcUs/NT2B/rrooHURS2zuNQ+y+tw
ZAV9s1rdIzbY1MvOsRSINsLGMlJutVM=
-----END CERTIFICATE-----
Generated at Thu May 15 07:29:46 2025 by rpki-client