Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d6bd2075-b1d7-30da-a3a5-c258460442ad.roa
File:                     d6bd2075-b1d7-30da-a3a5-c258460442ad.roa (raw, json)
Hash identifier:          RkpopD9UEzpS2GcTeun/PjtsWhxb5/KysO2IaGPGxOE=
Subject key identifier:   E4:FC:89:D0:F6:3B:59:82:AA:8E:B0:75:30:3A:20:03:EB:92:F0:12
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F43285849B5DCB2F2040899011C9A1440
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d6bd2075-b1d7-30da-a3a5-c258460442ad.roa
Signing time:             Thu 01 May 2025 16:19:49 +0000
ROA not before:           Thu 01 May 2025 16:19:49 +0000
ROA not after:            Wed 30 Jul 2025 16:19:49 +0000
asID:                     22773
IP address blocks:        24.251.21.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Thu 01 May 2025 21:11:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:dc:b2:f2:04:08:99:01:1c:9a:14:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  1 16:19:49 2025 GMT
            Not After : Jul 30 16:19:49 2025 GMT
        Subject: CN=c3680ffc-d922-41f4-b41a-3e35c1ce4606
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:7d:38:ec:a6:32:be:8d:af:3d:16:90:b9:38:
                    00:72:c8:f5:07:09:e8:00:aa:2d:18:f8:73:cd:cb:
                    93:b9:11:96:2a:f3:31:4a:38:1e:aa:f1:b7:a1:ea:
                    f1:c2:23:2d:3f:b3:58:d4:74:52:79:b9:56:0b:0a:
                    8c:05:8a:c5:9e:71:9b:bf:41:91:5e:6c:1b:18:e7:
                    ea:7c:0d:50:10:d0:2d:72:bd:26:ca:b0:91:80:9e:
                    61:ce:be:64:c7:f4:7b:82:04:61:2f:ee:58:e9:ea:
                    3e:73:98:d4:1d:b6:48:eb:04:f8:02:a7:b8:55:fd:
                    eb:bb:b6:08:ed:6c:b6:13:9a:61:c4:40:e5:be:aa:
                    98:c2:c6:e2:d9:42:ff:60:ea:7f:c0:61:69:d1:da:
                    bb:25:31:c8:22:70:3a:3c:d1:2b:74:d7:01:de:32:
                    db:5e:88:be:71:7d:c0:45:3f:88:41:35:e3:6d:17:
                    2d:11:6c:64:89:5e:2a:58:66:ad:bb:4d:63:84:69:
                    3b:f6:c5:32:37:6d:d1:c2:42:50:3b:b1:4b:0f:d8:
                    0e:23:2e:30:03:69:23:2c:40:2d:b9:e9:f0:54:85:
                    04:58:f8:54:96:fc:99:a1:6c:02:cb:e2:5f:9f:38:
                    7e:68:e0:90:cb:da:e6:a3:86:f9:b9:a6:4c:b2:40:
                    7c:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:FC:89:D0:F6:3B:59:82:AA:8E:B0:75:30:3A:20:03:EB:92:F0:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d6bd2075-b1d7-30da-a3a5-c258460442ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.251.21.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:54:8e:41:71:d4:bb:e9:4b:e5:be:b8:ff:dd:fa:ca:f2:c2:
         81:2c:ee:fe:73:2c:c1:b3:33:2c:1a:43:01:ee:54:e4:2d:92:
         c0:8e:9b:0c:b0:7c:1a:7e:f2:5e:73:dc:a3:7c:9b:a0:1f:a8:
         b4:f6:93:ac:d7:b9:b1:67:b5:ce:59:24:ae:ca:ca:18:79:8a:
         8a:07:7d:0e:e3:24:22:09:67:43:fa:17:06:03:34:95:18:e2:
         46:a7:cc:86:72:ff:15:d8:c9:29:5a:ac:d5:49:74:5f:0d:32:
         8d:c6:c0:f5:72:c1:13:8c:e0:02:fc:3f:13:c7:df:88:b5:e8:
         46:eb:4e:27:4b:70:d8:8a:35:0c:38:be:c8:34:65:84:8e:11:
         1c:4c:93:ce:f4:ce:79:04:ca:c6:62:6f:fe:11:c3:dd:e9:9c:
         68:51:6c:8d:5b:13:bd:3a:43:27:43:f6:07:ad:07:db:f5:5f:
         db:e3:9c:09:67:90:41:35:91:2c:e8:05:7e:54:d1:5f:76:34:
         44:5f:39:8f:a6:e5:d9:7c:9b:6d:9b:b6:f1:df:03:ad:5c:1c:
         cc:16:b4:27:85:ce:95:ea:c9:fc:7e:60:a1:4d:da:8e:bc:f9:
         af:ce:4d:46:aa:75:b8:5a:78:16:b5:0c:a0:18:48:c8:2e:f8:
         4f:ed:34:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 02:03:29 2025 by rpki-client