Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/dca5fa18-8571-355a-b292-68c58e1b96f1.roa
File:                     dca5fa18-8571-355a-b292-68c58e1b96f1.roa (raw, json)
Hash identifier:          SzeYJ0uIYCEuGVaqJ12EF11MYLIfjuf1iK+1z/VQ/Ls=
Subject key identifier:   8F:D4:17:88:B2:89:45:A9:92:96:80:B5:CA:18:7B:B5:96:52:FF:FF
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F43285849B5E0BCA87270EB171FF2BD80
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/dca5fa18-8571-355a-b292-68c58e1b96f1.roa
Signing time:             Thu 01 May 2025 16:27:57 +0000
ROA not before:           Thu 01 May 2025 16:27:57 +0000
ROA not after:            Wed 30 Jul 2025 16:27:57 +0000
asID:                     22773
IP address blocks:        72.222.208.0/23 maxlen: 23
Validation:               Failed, certificate revoked on Thu 01 May 2025 21:47:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:e0:bc:a8:72:70:eb:17:1f:f2:bd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  1 16:27:57 2025 GMT
            Not After : Jul 30 16:27:57 2025 GMT
        Subject: CN=ced4cf6c-2762-45db-97e2-ec0da249d659
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:0d:93:ff:74:78:55:69:67:68:d3:d3:7d:6a:
                    66:62:03:3c:e4:1f:ae:20:b9:9d:2d:25:3f:2a:18:
                    43:95:a5:71:eb:40:3a:16:5d:73:e6:95:96:31:46:
                    3a:8f:3b:22:c0:e2:1e:63:14:40:f0:4b:c5:46:35:
                    e0:8e:66:66:8f:36:e5:c5:10:bb:ff:9f:01:1d:31:
                    d6:1e:67:44:3b:a3:e1:92:b4:73:bc:33:18:1f:c5:
                    30:e5:80:59:51:0f:19:33:62:92:f1:1a:c9:7b:9e:
                    a7:dd:01:b5:0c:eb:19:3d:0b:6c:a1:49:45:b9:bd:
                    97:0b:54:c9:50:1f:49:59:cf:64:2a:d8:64:2b:a2:
                    b4:5f:e0:8f:e4:e6:a5:85:b1:0d:43:26:f4:7e:28:
                    ed:9f:6d:35:ce:40:ea:3a:5c:f4:9e:48:9c:7a:68:
                    ed:d4:e8:99:3b:4b:49:e9:1b:01:cf:56:71:36:f9:
                    1f:32:48:6d:01:e7:2b:2d:de:6e:8c:c8:ff:66:b6:
                    c6:3f:db:ad:59:7f:bb:ed:26:47:ec:b9:ea:f5:d9:
                    0c:66:a5:28:2c:4c:3d:32:ab:70:e8:cb:ea:c8:6c:
                    e5:9a:9c:8e:26:28:38:72:d1:8d:57:f4:dc:7a:73:
                    ce:bd:28:dc:86:e6:4f:7e:15:c4:31:e9:83:d1:f8:
                    03:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:D4:17:88:B2:89:45:A9:92:96:80:B5:CA:18:7B:B5:96:52:FF:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/dca5fa18-8571-355a-b292-68c58e1b96f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.222.208.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:88:3c:00:70:cd:68:ed:7b:0e:ba:24:e3:fe:9f:da:25:98:
         4c:c0:04:75:2d:c9:6e:14:17:bc:eb:bb:13:d9:99:7e:90:0a:
         74:fd:a1:0f:06:80:88:e4:a9:96:13:5d:f5:0c:12:90:c6:e7:
         b1:63:fe:96:c5:9a:9c:1c:69:07:3f:91:73:ef:e0:4d:b4:1f:
         f8:db:d1:8f:02:a3:c2:1f:7a:14:6f:7c:ab:ea:8f:42:3c:c0:
         20:8a:27:36:b7:80:40:4e:eb:a7:ed:4f:9e:2c:1d:80:73:5d:
         6e:aa:7a:01:10:a2:75:bc:69:a0:5e:1a:b1:d6:7d:b8:e8:0a:
         7d:35:63:ee:5d:d2:b6:79:5d:8d:83:2f:82:3c:5e:ed:b8:d1:
         fe:03:98:c7:4c:19:de:9e:e1:96:af:66:e0:49:62:ac:b5:f3:
         97:83:df:76:e4:3d:cb:78:ae:69:e7:21:80:e6:72:5b:a3:0f:
         66:52:8c:8b:d7:79:a0:17:6e:20:e3:68:74:25:b7:98:10:d5:
         03:ee:73:a9:d7:db:32:c2:4e:78:4a:68:53:61:5d:22:9a:d0:
         8f:fb:48:4f:4c:24:3f:4d:61:c0:18:30:6c:6d:0b:01:4a:ff:
         c1:41:bb:ed:eb:d6:71:4e:cf:a9:0d:b9:ac:b9:1d:20:3f:02:
         5e:a8:1f:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 02:22:00 2025 by rpki-client