Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c9e08f4a-9b5d-3868-9785-66bfacdf4633.roa
File:                     c9e08f4a-9b5d-3868-9785-66bfacdf4633.roa (raw, json)
Hash identifier:          U+bn4DyiOtFYBkfPMUvIa//FKnobJtRznuBIiVF6XfQ=
Subject key identifier:   8E:9F:A9:06:75:F8:7F:5B:8B:58:EB:69:24:E6:92:F9:11:FB:A0:3D
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F43285849B5E0523511A57E37CA93E000
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c9e08f4a-9b5d-3868-9785-66bfacdf4633.roa
Signing time:             Thu 01 May 2025 16:27:07 +0000
ROA not before:           Thu 01 May 2025 16:27:07 +0000
ROA not after:            Wed 30 Jul 2025 16:27:07 +0000
asID:                     22773
IP address blocks:        72.212.18.0/23 maxlen: 23
Validation:               Failed, certificate revoked on Thu 01 May 2025 21:44:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:e0:52:35:11:a5:7e:37:ca:93:e0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  1 16:27:07 2025 GMT
            Not After : Jul 30 16:27:07 2025 GMT
        Subject: CN=c524bbaf-afb7-494e-a4fc-c86b436f23ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:da:c8:dd:57:e4:b2:21:77:9a:5e:ff:20:5b:
                    b5:15:0e:d7:94:d2:51:14:6d:b2:bb:99:12:37:dc:
                    3d:88:85:92:c3:51:e1:f1:90:0f:82:d3:c0:f5:51:
                    8c:6c:6f:22:ca:fb:d2:f3:4d:a9:05:1a:65:a2:79:
                    cd:b2:3a:86:53:11:e5:c1:91:db:88:b0:37:5d:36:
                    2f:d0:67:49:31:91:b3:fa:3b:db:f4:d3:3f:e2:ca:
                    9a:d0:ec:ee:8a:07:30:e0:08:39:51:58:e4:28:9c:
                    05:d4:91:f1:50:f7:6c:6f:22:ec:de:eb:4c:4b:14:
                    e7:74:af:7b:19:99:53:87:6b:e5:ce:b7:8b:97:0b:
                    fa:e0:ac:e5:f9:17:af:b8:14:85:2a:e3:a4:99:19:
                    b6:ea:4f:f9:6e:94:d8:1b:b8:72:b1:47:2c:88:ac:
                    8f:b8:96:73:17:51:21:c5:36:92:90:29:53:66:d7:
                    36:c0:84:d1:0a:19:f6:ec:64:41:04:5b:21:ec:fd:
                    40:8a:90:4c:31:94:8d:aa:13:a0:0a:11:e6:d8:8c:
                    57:c7:1d:27:15:27:c0:50:af:79:c9:f1:0d:fb:5b:
                    0f:4b:5e:f0:81:39:7a:89:6e:e8:2b:be:e4:0f:9f:
                    63:1e:c7:b4:3a:21:2a:1d:ea:38:3f:f7:70:87:12:
                    d2:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:9F:A9:06:75:F8:7F:5B:8B:58:EB:69:24:E6:92:F9:11:FB:A0:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c9e08f4a-9b5d-3868-9785-66bfacdf4633.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.212.18.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:86:88:e1:15:bc:91:0d:26:ab:0f:87:7a:9d:95:53:05:1b:
         8c:db:b9:f7:db:80:ee:f9:d9:25:ec:8e:98:36:93:1f:66:25:
         8e:92:7b:03:91:7b:df:ea:52:6f:f0:7b:0f:66:a0:2b:0b:25:
         82:32:96:8e:ba:62:5e:fa:01:42:5b:41:51:2a:84:0d:3a:f2:
         a0:07:0e:47:11:51:03:f1:8b:4c:da:de:64:b6:3e:b3:48:b0:
         97:76:54:74:9a:62:8c:d9:a7:90:52:3e:a2:24:20:62:0a:2d:
         bd:5f:15:f7:c6:0c:56:e3:b8:97:5d:0c:0a:07:69:f9:02:c6:
         9a:e2:6d:e0:ae:92:37:65:75:61:c7:40:d0:41:45:41:bc:c4:
         62:b7:41:14:de:a0:12:ee:26:a5:fa:91:f2:8d:12:a3:63:82:
         74:b9:14:1e:89:05:6d:31:da:72:96:a3:0c:bb:04:b1:08:70:
         47:63:f3:1e:c5:1e:1b:58:37:72:04:05:33:c5:0f:b6:4c:d3:
         63:88:72:94:3b:4d:0e:1f:48:34:fe:ca:c7:62:7f:60:61:de:
         f5:66:a1:fd:a9:30:88:6c:08:98:49:48:01:dd:86:f2:59:f8:
         b7:f9:20:bc:f5:e8:0e:88:6d:b8:ba:12:43:e4:ef:4c:bd:f5:
         b2:77:bb:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 02:16:47 2025 by rpki-client