Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cee93a4b-2e23-3832-bbe0-e8eab652d3da.roa
File:                     cee93a4b-2e23-3832-bbe0-e8eab652d3da.roa (raw, json)
Hash identifier:          ukYNDiK72m1i524Ja/hHfP6LYoo/9KcacNA2vyfDJRg=
Subject key identifier:   0E:64:63:F9:0A:E5:C8:3C:D2:D3:82:D2:F0:7C:E2:E5:9D:F9:01:D8
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F43285849B5DE4D2C8E4786F724DF8080
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cee93a4b-2e23-3832-bbe0-e8eab652d3da.roa
Signing time:             Thu 01 May 2025 16:23:03 +0000
ROA not before:           Thu 01 May 2025 16:23:03 +0000
ROA not after:            Wed 30 Jul 2025 16:23:03 +0000
asID:                     22773
IP address blocks:        68.231.116.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Thu 01 May 2025 21:28:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:de:4d:2c:8e:47:86:f7:24:df:80:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  1 16:23:03 2025 GMT
            Not After : Jul 30 16:23:03 2025 GMT
        Subject: CN=9d204117-094a-4a94-8bc2-33964f439935
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ff:bf:d1:70:39:9b:0a:eb:0c:e6:c5:87:cc:
                    64:56:fe:4f:37:53:e7:1a:a5:52:fa:12:5b:46:9b:
                    ed:94:17:03:75:71:94:f2:a1:a0:0b:e3:68:d3:cb:
                    c6:2c:4a:e9:22:b4:4b:79:4b:6f:d5:c9:dc:61:12:
                    7c:46:77:b1:59:8d:e8:ab:a6:05:c5:c5:c9:c7:29:
                    70:f2:83:84:46:f6:ac:93:b3:5f:01:a6:06:26:9b:
                    f9:27:cd:e5:0e:31:c2:71:bf:07:da:4a:f3:2c:a6:
                    16:4b:18:31:28:b1:9b:a9:a1:c6:9d:6f:0e:35:64:
                    2f:f0:6d:dd:e4:70:96:34:96:d1:16:bf:b3:f7:19:
                    1c:52:ed:de:9c:3f:9e:3e:0e:f4:1a:82:8a:14:6f:
                    ff:b5:91:07:98:88:b0:a8:3d:56:d2:9f:87:69:11:
                    7c:11:6f:67:ee:5e:89:93:21:e9:87:76:28:47:9a:
                    24:ba:97:d4:7f:61:69:51:2f:ed:e0:f0:10:1e:5e:
                    7a:72:77:e3:63:9c:8d:f8:75:60:81:f4:89:0d:bb:
                    05:34:6b:a1:4d:c5:e7:58:d6:f2:06:ed:1a:92:20:
                    47:da:4c:4d:a4:e2:66:30:d4:e1:f7:30:f7:c6:d5:
                    c9:9b:87:0c:78:a5:1c:60:df:ea:f0:ea:b6:d7:69:
                    7c:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:64:63:F9:0A:E5:C8:3C:D2:D3:82:D2:F0:7C:E2:E5:9D:F9:01:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cee93a4b-2e23-3832-bbe0-e8eab652d3da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.231.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:46:b3:9c:e0:07:f4:24:8c:6a:97:77:0a:ea:dd:c6:c0:e0:
         fa:c6:9c:dd:7f:82:75:3b:22:18:63:af:e4:e3:f6:64:0f:22:
         8e:48:45:cf:a0:31:e1:f4:62:d6:3b:d2:af:34:44:66:0a:fa:
         54:01:ce:60:b9:c1:76:ee:bc:3c:75:c6:09:62:b8:e1:6b:72:
         dc:2d:6d:0d:25:f6:12:43:d3:a0:2a:77:d7:56:e5:8b:0a:c8:
         04:a1:fe:b3:11:54:60:f5:b9:98:1f:ce:74:50:d0:0e:4c:2f:
         97:88:64:52:16:a1:25:ee:cd:68:64:16:70:1d:0b:77:1a:9e:
         d2:79:23:60:ab:24:e0:8f:b5:bb:26:48:fa:a6:18:ad:5e:48:
         69:4a:0d:4e:4a:10:d9:33:0c:77:db:40:2b:2d:c4:d5:f7:44:
         c7:46:3e:5b:b7:9d:c4:6c:38:b6:91:f4:79:fa:ca:ca:49:66:
         f5:fd:f7:ab:8e:62:f4:a2:66:73:1d:d1:e3:c5:a6:82:9c:b3:
         64:fc:ec:db:d3:b3:64:ca:37:ad:00:b5:f5:86:5b:b0:44:db:
         fa:7b:71:03:ba:68:f3:75:8e:25:ab:70:9a:f4:2f:0e:3f:d1:
         16:fd:af:03:8b:1b:5d:58:6e:0f:f7:e3:0f:4a:8f:fb:8a:24:
         cb:c4:e7:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 01:19:44 2025 by rpki-client