Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d9de6f51-2a80-3a51-aecf-425725811f5f.roa
File:                     d9de6f51-2a80-3a51-aecf-425725811f5f.roa (raw, json)
Hash identifier:          C+WYoDw44d0E3CH5j4azkpcyG7+Xw8hokxTsfyVicH0=
Subject key identifier:   EF:FB:2A:D7:1E:97:82:19:63:85:CD:2C:FC:3D:BA:CA:92:B9:1D:5D
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F43285849B5DDA2016F8787696991E640
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d9de6f51-2a80-3a51-aecf-425725811f5f.roa
Signing time:             Thu 01 May 2025 16:21:42 +0000
ROA not before:           Thu 01 May 2025 16:21:42 +0000
ROA not after:            Wed 30 Jul 2025 16:21:42 +0000
asID:                     22773
IP address blocks:        68.104.202.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Thu 01 May 2025 21:20:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:dd:a2:01:6f:87:87:69:69:91:e6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  1 16:21:42 2025 GMT
            Not After : Jul 30 16:21:42 2025 GMT
        Subject: CN=927e865d-54ed-41f4-a013-f48a1cd83f3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0e:f0:ae:18:73:74:98:f1:4c:52:3b:72:0a:
                    44:5c:d0:a9:b1:3a:54:c0:86:7c:54:2d:e5:20:04:
                    98:2f:8b:72:fe:86:64:e5:a0:d0:02:9c:9b:5b:dc:
                    c8:4b:ae:44:16:3e:bb:2d:ab:4d:53:be:aa:66:63:
                    7f:0d:56:85:11:8f:9f:53:a5:2a:c4:c1:36:92:21:
                    af:01:ea:bf:d5:ad:ab:ba:07:a3:d6:30:88:44:42:
                    06:32:72:16:c3:75:84:af:65:67:21:9e:09:7d:19:
                    c3:69:8a:f1:ab:d4:a1:e5:99:f4:b9:5d:4a:2e:8b:
                    92:2e:bc:b9:36:ab:91:c2:55:e1:75:f3:8d:49:50:
                    f9:ab:11:67:6c:0c:3a:14:ac:ae:62:34:da:43:5e:
                    15:ed:4c:69:65:98:51:48:bf:82:4f:06:de:cb:dc:
                    40:3f:70:f7:41:ac:03:8e:de:12:3a:f0:6d:8a:1f:
                    a0:68:e9:9f:7d:11:26:08:a8:a0:17:64:c7:99:6b:
                    33:44:c2:ed:f8:53:d8:70:af:65:49:73:c1:b5:c3:
                    ea:0c:ac:91:b5:55:fa:a4:a2:74:ee:4a:e6:dc:d3:
                    94:da:88:76:3b:64:69:10:aa:41:39:a0:6e:09:34:
                    f5:60:d0:3d:22:47:ca:4b:48:90:c0:af:c2:c7:c2:
                    cd:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:FB:2A:D7:1E:97:82:19:63:85:CD:2C:FC:3D:BA:CA:92:B9:1D:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d9de6f51-2a80-3a51-aecf-425725811f5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.104.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:3d:4c:e3:13:de:63:bd:81:53:5e:63:bc:ba:3d:e6:1a:de:
         8e:05:66:31:e2:90:8d:04:b8:53:5c:6c:7a:81:ed:52:b6:dc:
         a6:4e:fd:15:ef:a9:ef:a2:ed:56:4b:8d:0a:d4:73:b7:bd:19:
         09:d8:ab:5e:fc:41:cb:1c:b8:a8:0e:00:8b:ec:97:54:0c:2e:
         09:54:5b:3f:ca:85:fe:e4:f3:83:f0:ed:fd:5d:03:8a:ec:be:
         77:4b:b2:14:09:6e:8b:46:1f:0d:83:8d:a8:92:79:7c:29:7c:
         d0:f9:4a:ae:76:10:aa:50:b3:a8:84:03:16:3b:8d:59:96:21:
         3d:83:ea:f3:bd:69:14:68:ee:a1:69:47:44:81:9d:ec:fa:bb:
         23:c5:14:59:aa:af:4c:76:b8:6e:8f:15:8e:c4:02:25:b8:f4:
         a6:3d:c3:97:14:da:d7:a1:8e:25:1f:b1:ad:cb:e6:62:80:b8:
         6b:ac:76:5e:2f:68:cd:91:91:c5:1c:8b:23:4d:38:99:48:a1:
         ed:0c:76:22:cc:31:50:17:74:fc:3d:f8:fa:2e:97:b7:0a:68:
         dd:36:40:28:20:28:e5:5d:c0:49:42:10:da:37:56:30:64:2f:
         4f:57:0d:bc:69:28:2e:a3:b1:ab:c3:a2:68:90:27:3b:3a:ba:
         f0:53:b3:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 04:59:53 2025 by rpki-client