Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e89971aa-3eea-36b1-96cd-4a25467c7817.roa
File:                     e89971aa-3eea-36b1-96cd-4a25467c7817.roa (raw, json)
Hash identifier:          fVD+5wX6B8g8AWXGfOGqjEklWqpzLy5gk1PW7l/d1qs=
Subject key identifier:   C6:5E:C5:4C:68:0E:1F:2D:CF:E3:19:36:F5:BD:E7:92:9E:06:0E:2C
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F43285849B5DE66C353BDFCE93A826100
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e89971aa-3eea-36b1-96cd-4a25467c7817.roa
Signing time:             Thu 01 May 2025 16:23:15 +0000
ROA not before:           Thu 01 May 2025 16:23:15 +0000
ROA not after:            Wed 30 Jul 2025 16:23:15 +0000
asID:                     22773
IP address blocks:        70.162.52.0/23 maxlen: 23
Validation:               Failed, certificate revoked on Thu 01 May 2025 21:28:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:de:66:c3:53:bd:fc:e9:3a:82:61:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  1 16:23:15 2025 GMT
            Not After : Jul 30 16:23:15 2025 GMT
        Subject: CN=7c83ff67-0a11-4afa-99b2-ee28d06e2c94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:6a:bb:76:3c:d8:78:3d:4c:bc:14:bd:0b:43:
                    59:3b:7f:33:40:cd:39:e9:db:b9:18:08:65:5d:1c:
                    db:fe:df:8c:07:9c:6a:1d:32:df:e9:21:8a:39:c7:
                    37:c0:66:37:a1:34:ed:05:9c:e0:c2:eb:a3:9e:72:
                    54:14:ef:9a:1d:4b:25:75:24:62:1b:28:93:3b:0c:
                    a2:52:92:41:a8:da:f3:5f:b1:de:00:62:c1:0b:f3:
                    5a:a2:10:e5:4a:4e:1b:98:5a:92:cd:a0:58:c7:d7:
                    de:43:0a:2b:cf:47:b7:39:55:1f:0e:18:1b:35:3b:
                    bb:0d:31:65:42:65:f0:68:19:0d:14:a3:2b:c5:30:
                    76:bd:d1:57:43:0e:94:b7:dd:66:44:6b:40:d8:d2:
                    8c:64:1e:1c:b5:d5:69:8a:3f:7f:8c:ee:72:fc:d4:
                    a0:9f:59:7e:cb:2d:b7:10:eb:8c:ba:2c:64:78:c1:
                    88:d8:06:b0:b3:13:74:55:e2:9d:aa:a6:15:e1:fb:
                    01:78:07:ef:1a:ee:bd:6d:61:f9:90:99:ab:18:55:
                    7a:20:05:68:dc:60:08:aa:bd:36:3f:38:06:c4:00:
                    34:30:04:f2:b8:6c:48:91:2f:14:f3:00:1f:40:c3:
                    72:65:7e:22:3d:36:29:9f:95:bf:45:3e:c2:ca:7e:
                    60:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:5E:C5:4C:68:0E:1F:2D:CF:E3:19:36:F5:BD:E7:92:9E:06:0E:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e89971aa-3eea-36b1-96cd-4a25467c7817.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.162.52.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:bb:84:50:bd:93:37:16:65:ed:78:d7:ef:0d:3e:bb:3e:06:
         cc:4d:54:7a:34:1c:19:bf:2f:bc:a5:85:e9:6a:e3:0b:84:7d:
         8b:d2:5e:00:28:69:48:1e:90:96:b2:a7:31:d9:7b:0c:ef:87:
         1a:54:44:35:20:25:a5:bd:44:8e:e5:e3:4d:ba:ba:5c:43:e1:
         7c:f7:dd:01:0d:21:5c:80:bb:a8:0f:59:85:0e:da:b8:86:dc:
         94:70:6b:85:65:e4:eb:dd:6a:c8:d8:30:78:83:03:0b:e0:d2:
         65:83:64:0d:6b:a2:65:8f:1a:7b:81:16:9b:ab:01:5a:57:0d:
         96:5e:06:e5:77:f8:d7:83:78:24:f7:d6:85:68:b7:36:f2:4b:
         35:07:d9:ac:a6:a3:a7:38:ee:64:33:85:20:76:42:f3:f4:b6:
         84:33:1b:60:35:4c:f7:bb:6f:bd:6d:ca:5d:4c:c1:72:05:af:
         90:59:1b:ba:29:de:40:b8:0b:d9:b3:95:54:49:46:83:39:88:
         09:0e:9d:4f:1e:ff:c8:aa:98:ea:04:f9:fb:3a:61:df:9f:2f:
         6f:98:c6:52:9d:69:42:bc:02:b6:98:02:04:a1:e6:47:f5:12:
         de:1a:ab:d7:66:cc:92:c6:54:d1:bc:3b:9b:45:7d:59:a1:28:
         90:91:20:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 02:32:38 2025 by rpki-client