Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0113f3a9-36b0-4afd-81ec-5d581325b016/374aa05f-7f19-3b4c-979b-c30575d07d45.roa
File:                     374aa05f-7f19-3b4c-979b-c30575d07d45.roa (raw, json)
Hash identifier:          DZ55+u9zimkkwg/jR1BwLRRHPKAR9gbYun19qlQ2p5U=
Subject key identifier:   E3:F3:B0:2C:2C:8D:3F:F3:3B:94:6E:8B:98:40:4C:81:3A:72:29:F7
Certificate issuer:       /CN=0113f3a9-36b0-4afd-81ec-5d581325b016
Certificate serial:       010D0C9F432858498B99D1C0A2DAECB77C922A40
Authority key identifier: 26:F2:8C:9D:C1:B0:BE:69:2B:6C:B0:EE:7E:F5:4E:0D:57:9A:5D:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0113f3a9-36b0-4afd-81ec-5d581325b016.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0113f3a9-36b0-4afd-81ec-5d581325b016/374aa05f-7f19-3b4c-979b-c30575d07d45.roa
Signing time:             Wed 16 Apr 2025 13:01:01 +0000
ROA not before:           Wed 16 Apr 2025 13:01:01 +0000
ROA not after:            Tue 15 Jul 2025 13:01:01 +0000
asID:                     394496
IP address blocks:        23.169.232.0/24 maxlen: 24
                          2620:c3:a000::/48 maxlen: 48
Validation:               Failed, certificate revoked on Tue 29 Apr 2025 16:32:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8b:99:d1:c0:a2:da:ec:b7:7c:92:2a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0113f3a9-36b0-4afd-81ec-5d581325b016
        Validity
            Not Before: Apr 16 13:01:01 2025 GMT
            Not After : Jul 15 13:01:01 2025 GMT
        Subject: CN=39a887e2-c68f-4d18-ad5a-3f8a61c3c79d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:80:b9:08:39:7a:03:db:44:4d:b9:53:fe:e2:
                    65:5c:1d:5d:49:21:60:c5:6f:33:27:25:06:a3:fa:
                    de:66:0b:a8:86:71:3d:06:ae:0f:7f:f1:d2:a3:ab:
                    7e:8a:63:fb:b1:82:a1:ff:51:8c:8f:be:7d:95:b5:
                    62:d1:ca:e9:b0:ea:93:e2:69:8c:4b:a6:4f:8d:a8:
                    e3:63:14:f2:e2:5c:d1:32:5d:59:ad:a4:31:ce:35:
                    e0:a0:1b:8f:d1:23:80:4c:1a:41:8d:47:eb:2d:ca:
                    62:36:cd:b8:20:4c:a1:ef:5f:37:66:f3:5a:d0:a5:
                    a0:d0:e7:03:bc:94:8f:ea:45:06:ff:9d:87:21:58:
                    ef:f7:49:5f:f5:6f:07:51:6d:e5:7e:55:3f:b7:39:
                    2c:a0:6d:5b:3e:17:63:6b:8b:3f:99:44:eb:71:3e:
                    47:32:fa:3c:4b:c3:87:44:5b:ea:f1:dc:54:5a:42:
                    cb:6b:fc:ee:f1:3f:fb:dd:3a:ff:54:48:41:e7:67:
                    e5:31:5e:45:88:63:bc:51:2e:dc:0f:fe:7f:4f:05:
                    16:94:0b:9a:d3:6a:12:60:b0:15:55:dd:70:84:46:
                    ec:cb:91:ca:ae:9e:fa:03:dd:31:91:af:b2:4e:33:
                    6c:d6:5d:d7:29:4d:d9:ab:32:fe:a7:88:b5:4f:3d:
                    7c:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:F3:B0:2C:2C:8D:3F:F3:3B:94:6E:8B:98:40:4C:81:3A:72:29:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0113f3a9-36b0-4afd-81ec-5d581325b016/374aa05f-7f19-3b4c-979b-c30575d07d45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0113f3a9-36b0-4afd-81ec-5d581325b016/0113f3a9-36b0-4afd-81ec-5d581325b016.crl

            X509v3 Authority Key Identifier:
                keyid:26:F2:8C:9D:C1:B0:BE:69:2B:6C:B0:EE:7E:F5:4E:0D:57:9A:5D:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0113f3a9-36b0-4afd-81ec-5d581325b016.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.169.232.0/24
                IPv6:
                  2620:c3:a000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:85:d6:a9:41:3b:87:a9:fd:be:eb:ed:10:99:5b:0b:69:e5:
         33:fb:3a:92:13:33:a3:99:76:c4:70:30:f1:1a:19:65:04:ec:
         23:03:39:c8:b6:8e:cf:82:94:79:7d:8b:f1:3c:49:3c:5e:95:
         c5:5d:84:41:f2:62:41:49:a8:9b:16:7a:f1:6c:c8:ec:f1:60:
         a5:7b:e1:76:b9:07:0a:91:a7:94:2f:d9:6f:f9:2e:78:df:bc:
         4b:b6:92:0d:04:c0:29:a7:55:b9:50:24:6c:03:f8:c5:be:37:
         7e:43:4c:b1:ab:8a:8f:49:da:94:a4:31:db:8b:d9:3c:41:1b:
         c8:34:2e:d6:53:a2:e8:14:8f:fd:0a:e0:5a:d3:bd:b2:73:e0:
         6c:cb:9f:63:cb:24:39:24:90:80:08:09:bd:01:0a:86:6a:80:
         9b:bc:57:17:d4:5f:6d:87:e4:b2:a3:eb:3a:86:84:78:0b:30:
         a7:21:3e:e6:49:e7:4c:e8:83:fe:9e:3a:6e:2d:1d:3f:f8:6b:
         d2:95:3d:86:90:2d:be:96:53:48:6d:f0:75:79:16:1c:0b:5b:
         88:07:7a:c6:7e:e7:05:61:79:f4:76:6d:86:25:bf:bf:c8:f2:
         fe:6a:fc:22:9d:f7:13:b4:56:f6:ad:48:7f:d1:b5:50:3d:73:
         26:d4:e5:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 15:40:18 2025 by rpki-client