Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d37bb9e0-3657-33cb-80af-0b6ef4c50a76.roa
File:                     d37bb9e0-3657-33cb-80af-0b6ef4c50a76.roa (raw, json)
Hash identifier:          BwhQOM50klqGJwGSCvrnhiQ0csUZrOQ7Mydb8O5FvTk=
Subject key identifier:   44:90:C6:06:88:33:0F:40:3D:79:F8:73:F0:D0:F5:46:CE:7E:C4:B9
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F43285849B5E3BF18019CABEA1C2ED480
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d37bb9e0-3657-33cb-80af-0b6ef4c50a76.roa
Signing time:             Thu 01 May 2025 16:34:01 +0000
ROA not before:           Thu 01 May 2025 16:34:01 +0000
ROA not after:            Wed 30 Jul 2025 16:34:01 +0000
asID:                     22773
IP address blocks:        2600:8800:ae00::/41 maxlen: 41
Validation:               Failed, certificate revoked on Thu 01 May 2025 22:11:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:e3:bf:18:01:9c:ab:ea:1c:2e:d4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  1 16:34:01 2025 GMT
            Not After : Jul 30 16:34:01 2025 GMT
        Subject: CN=f86a8a55-f558-471d-9021-d1ffc977d017
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f0:ef:2f:d3:5c:f8:47:71:ff:5c:4c:1d:66:
                    fb:e8:54:ac:c9:ae:ec:25:32:b5:92:33:78:80:4d:
                    11:c5:9d:27:aa:54:d6:97:fe:22:15:a5:aa:7f:e6:
                    1a:72:ae:f1:1a:0a:61:17:26:ca:53:71:96:50:98:
                    22:68:d3:99:1f:32:4c:c3:e2:22:5a:46:59:b6:8f:
                    2c:b8:91:58:6f:97:fe:50:c9:6b:bc:99:f9:42:ee:
                    cc:7a:3e:01:d6:e4:8e:8c:2c:85:f5:be:f5:99:4b:
                    95:88:75:60:4f:a0:08:31:57:e4:a8:70:ee:e9:d8:
                    21:a2:0c:b0:07:b0:9b:a5:55:ba:f0:b9:b9:c7:88:
                    fc:7a:d0:b4:96:23:21:bd:a4:5f:6e:a8:48:1f:3a:
                    e7:49:28:14:37:70:ba:7b:21:65:17:ed:63:33:0d:
                    3e:40:38:d1:52:df:40:c8:c5:d5:34:74:b8:47:1c:
                    3d:95:c7:bb:58:2e:d8:fa:be:ce:2c:fe:ea:18:4b:
                    5d:f9:aa:d4:64:88:58:00:a3:c0:9d:4e:7b:e4:69:
                    1a:c1:40:13:a4:98:b5:4c:2d:0d:1b:9d:c0:d0:e0:
                    91:7e:41:c3:46:89:76:8b:dc:6c:ba:4d:ae:61:a8:
                    2d:1e:9d:75:64:cb:75:9e:ec:be:a4:07:fc:de:f9:
                    5e:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:90:C6:06:88:33:0F:40:3D:79:F8:73:F0:D0:F5:46:CE:7E:C4:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d37bb9e0-3657-33cb-80af-0b6ef4c50a76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:8800:ae00::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:4d:12:15:d1:e0:e4:dc:b7:1d:7f:5d:a0:0f:46:83:8c:fd:
         38:0f:1d:df:19:35:d0:6a:85:b7:f9:f8:27:f1:8d:e2:3c:fd:
         7a:25:76:87:19:4e:67:45:ed:16:33:8f:3d:7e:ee:66:f3:84:
         06:de:95:11:8b:e4:a2:7a:75:4d:82:92:a2:d1:e5:e8:48:43:
         49:8b:00:eb:ba:40:18:d0:73:bf:59:c7:5c:3c:a1:bd:7b:6f:
         79:c9:d3:a2:79:10:d2:63:bd:aa:73:09:72:0e:7c:33:c3:4c:
         a4:8c:26:dc:88:ed:68:1b:37:37:12:27:54:43:25:30:a6:3c:
         ce:0d:f9:60:57:99:3b:de:bb:d8:3b:56:35:75:11:90:04:87:
         a2:60:19:f9:c8:c1:c2:ed:81:e5:7c:68:ab:d9:7c:37:ae:24:
         1d:8e:dc:dd:a1:63:e0:09:dc:cf:63:1a:10:00:eb:37:6b:8f:
         a0:ff:c0:66:bd:e3:6b:03:1d:35:a4:36:fb:4f:54:35:91:ff:
         ca:0e:3e:bd:71:bb:b6:cd:77:55:c7:6c:42:7f:ab:a4:36:1b:
         93:8e:3d:3a:78:15:33:4f:b6:86:30:0b:69:32:37:4b:33:f4:
         1a:64:68:a9:be:f7:9e:5a:f7:aa:97:37:71:62:22:72:22:be:
         0e:8e:7e:4c
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEm1478YAZyr6hwu1IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MDUwMTE2MzQwMVoXDTI1MDczMDE2MzQwMVowLzEtMCsGA1UEAxMk
Zjg2YThhNTUtZjU1OC00NzFkLTkwMjEtZDFmZmM5NzdkMDE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPDvL9Nc+Edx/1xMHWb76FSsya7sJTK1kjN4
gE0RxZ0nqlTWl/4iFaWqf+Yacq7xGgphFybKU3GWUJgiaNOZHzJMw+IiWkZZto8s
uJFYb5f+UMlrvJn5Qu7Mej4B1uSOjCyF9b71mUuViHVgT6AIMVfkqHDu6dghogyw
B7CbpVW68Lm5x4j8etC0liMhvaRfbqhIHzrnSSgUN3C6eyFlF+1jMw0+QDjRUt9A
yMXVNHS4Rxw9lce7WC7Y+r7OLP7qGEtd+arUZIhYAKPAnU575GkawUATpJi1TC0N
G53A0OCRfkHDRol2i9xsuk2uYagtHp11ZMt1nuy+pAf83vlexQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFESQxgaIMw9APXn4c/DQ9UbOfsS5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZDM3YmI5ZTAtMzY1Ny0z
M2NiLTgwYWYtMGI2ZWY0YzUwYTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgCIAK4A
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAI9NEhXR4OTctx1/XaAPRoOM/TgPHd8ZNdBqhbf5+CfxjeI8/Xol
docZTmdF7RYzjz1+7mbzhAbelRGL5KJ6dU2CkqLR5ehIQ0mLAOu6QBjQc79Zx1w8
ob17b3nJ06J5ENJjvapzCXIOfDPDTKSMJtyI7WgbNzcSJ1RDJTCmPM4N+WBXmTve
u9g7VjV1EZAEh6JgGfnIwcLtgeV8aKvZfDeuJB2O3N2hY+AJ3M9jGhAA6zdrj6D/
wGa942sDHTWkNvtPVDWR/8oOPr1xu7bNd1XHbEJ/q6Q2G5OOPTp4FTNPtoYwC2ky
N0sz9BpkaKm+955a96qXN3FiInIivg6Ofkw=
-----END CERTIFICATE-----
Generated at Thu May 15 08:55:02 2025 by rpki-client