Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c57ce38b-ee12-3d12-b094-febce24e042c.roa
File:                     c57ce38b-ee12-3d12-b094-febce24e042c.roa (raw, json)
Hash identifier:          feH59thBqJ2tib7xMqwTbOfc39QY1IE8V8D+KXcGy3A=
Subject key identifier:   B7:E4:7D:AE:ED:C0:F1:E9:B3:0A:EB:B4:C4:4F:D0:B5:23:C4:DE:12
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F43285849B5DFAC4231F27D28BA86FB60
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c57ce38b-ee12-3d12-b094-febce24e042c.roa
Signing time:             Thu 01 May 2025 16:25:49 +0000
ROA not before:           Thu 01 May 2025 16:25:49 +0000
ROA not after:            Wed 30 Jul 2025 16:25:49 +0000
asID:                     22773
IP address blocks:        72.201.48.0/22 maxlen: 22
Validation:               Failed, certificate revoked on Thu 01 May 2025 21:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:df:ac:42:31:f2:7d:28:ba:86:fb:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  1 16:25:49 2025 GMT
            Not After : Jul 30 16:25:49 2025 GMT
        Subject: CN=970f015e-1a4e-47ad-8e1b-fed8735271d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:34:74:5b:96:98:1b:14:95:86:53:42:b3:18:
                    2e:45:7e:b5:06:40:10:46:73:98:6a:e9:ee:77:b0:
                    c3:b8:13:f6:c7:bd:31:16:2e:51:21:9e:b9:70:7b:
                    3f:ea:6b:a2:b4:9d:ed:f2:9a:99:db:6a:5b:c5:63:
                    19:2d:cb:e9:04:5a:99:74:56:56:87:59:70:dc:b4:
                    79:a5:83:d7:66:72:b3:03:46:75:d6:cf:10:a5:df:
                    d6:cd:a2:46:ce:92:1a:1d:68:c1:5f:5c:92:7f:17:
                    6f:c8:3b:ac:37:62:94:8e:ae:e4:41:4d:8a:85:09:
                    32:6e:6e:2e:bf:8c:cd:b6:11:63:fa:14:78:da:94:
                    db:57:49:2d:7e:17:af:bf:65:65:b0:c9:6b:06:7e:
                    38:80:95:d4:6d:08:f8:c6:fe:e3:a0:0e:57:ea:8a:
                    89:10:58:bc:aa:09:51:f9:83:28:75:c6:60:34:7e:
                    22:1f:b7:15:79:66:cc:c1:a8:c7:d5:17:50:74:8f:
                    d3:23:b5:ef:f0:71:e6:3b:9e:e7:bf:12:d3:13:0b:
                    65:79:66:86:d7:0f:81:6a:0a:3a:91:c1:fd:4a:70:
                    ad:51:37:a2:19:f5:df:5a:a7:88:ee:ef:ac:16:64:
                    a5:36:98:f3:b4:60:66:20:5d:be:da:c6:9b:5e:dd:
                    45:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:E4:7D:AE:ED:C0:F1:E9:B3:0A:EB:B4:C4:4F:D0:B5:23:C4:DE:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c57ce38b-ee12-3d12-b094-febce24e042c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.201.48.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:03:9b:82:03:a2:6f:b9:97:cd:d7:98:1d:7a:39:c2:aa:83:
         f9:19:2c:07:3f:37:72:93:56:6c:cd:e5:da:8e:96:e6:89:a0:
         08:d1:75:9f:f6:34:f2:0c:b3:94:cb:27:f7:82:9d:c7:dc:ac:
         f2:06:10:91:dc:58:6a:2e:24:38:87:23:fb:ff:22:5e:a2:ef:
         1e:05:48:af:d4:4c:3b:14:32:b8:fc:6c:07:e8:7a:46:78:60:
         f1:a0:82:d9:d4:80:ea:33:15:95:be:25:69:8a:0e:fd:2a:6a:
         87:d8:44:c1:1a:49:5e:49:a6:76:71:f9:e4:1e:45:3e:0b:5c:
         7e:6e:ad:06:85:a8:29:16:f3:e8:dd:37:1c:e9:0b:a0:bd:98:
         3e:a5:58:85:46:15:d2:42:4d:13:be:5b:4e:aa:77:b5:9e:fc:
         21:7d:f4:53:f7:7e:2a:f5:3f:28:76:67:e0:c6:a9:97:ac:b5:
         58:01:2e:1a:13:95:71:f7:30:08:48:2c:a4:a5:35:60:92:22:
         29:01:15:55:13:82:93:b5:21:6b:2a:49:6b:be:e7:53:a2:60:
         7b:0f:75:7a:57:c6:09:8e:05:01:31:15:d2:6d:36:19:e1:cf:
         ff:1e:6b:4b:48:f0:71:28:25:5f:0b:03:cb:70:c2:52:14:82:
         97:d4:25:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 01:12:14 2025 by rpki-client