Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/edee3072-ecd0-38ea-8821-f4595393997f.roa
File:                     edee3072-ecd0-38ea-8821-f4595393997f.roa (raw, json)
Hash identifier:          CV3bPwZ3gB2zsZidr87uoC+VFuft7ZuGHbTHeGau+2k=
Subject key identifier:   0B:16:85:3C:D8:01:70:A9:73:EA:E3:AB:43:3E:DC:4A:66:CB:28:C8
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584953C41939F422488D72B5DD80
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/edee3072-ecd0-38ea-8821-f4595393997f.roa
Signing time:             Thu 27 Mar 2025 13:00:52 +0000
ROA not before:           Thu 27 Mar 2025 13:00:52 +0000
ROA not after:            Wed 25 Jun 2025 13:00:52 +0000
asID:                     32159
IP address blocks:        216.122.169.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Tue 01 Apr 2025 03:04:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:53:c4:19:39:f4:22:48:8d:72:b5:dd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Mar 27 13:00:52 2025 GMT
            Not After : Jun 25 13:00:52 2025 GMT
        Subject: CN=62c3109a-8f4e-414a-a9bb-fc30f6f3c09f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:9b:76:a4:62:38:77:72:65:32:79:f5:3b:84:
                    b8:e7:ae:4c:9f:06:3b:8a:e6:cf:2e:d4:7b:2a:23:
                    ea:55:67:43:4d:32:12:86:38:72:61:29:1e:76:18:
                    1e:47:b1:3b:c4:8c:75:67:24:a6:34:26:4e:d1:50:
                    de:23:a9:62:47:df:71:c7:b0:b7:39:2f:7b:54:1c:
                    95:4d:81:04:d4:cd:2e:29:08:af:be:37:73:ef:0f:
                    98:00:1a:75:77:7e:88:85:74:61:b3:8b:50:a0:3f:
                    14:b0:7c:b0:cb:d0:b0:6e:ae:3c:ef:20:ac:25:a1:
                    aa:53:6c:4c:0a:9e:6d:d3:c9:54:c3:bd:66:55:c0:
                    06:37:41:e2:01:a7:d7:0c:cc:4d:5d:2d:bb:9e:8d:
                    1e:39:91:54:ce:c1:8e:d0:2a:e9:8f:27:f1:d2:21:
                    92:b2:29:f0:dd:69:3c:5b:fa:5a:5d:8e:ae:0e:e0:
                    2d:85:20:1f:e7:49:24:46:12:0e:4d:4e:55:94:33:
                    7a:67:09:26:b9:74:97:aa:e8:d8:32:45:6b:50:16:
                    3e:c9:c4:5c:dd:9a:a7:9c:26:c5:a7:bd:ab:bb:48:
                    bc:4d:7a:01:f4:53:07:72:55:88:0b:b0:2f:d7:75:
                    9e:f1:b2:95:30:22:fa:15:d2:a5:87:b8:95:0d:77:
                    6f:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:16:85:3C:D8:01:70:A9:73:EA:E3:AB:43:3E:DC:4A:66:CB:28:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/edee3072-ecd0-38ea-8821-f4595393997f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.169.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:9f:03:cb:84:6c:1c:e3:37:1f:70:63:83:b0:5a:0b:75:cc:
         9b:6d:78:0e:c0:ae:20:b2:77:c2:8f:89:f3:fc:14:08:16:98:
         2a:9e:73:52:49:3c:65:b3:94:b6:25:5f:a5:c9:b8:8c:45:63:
         e1:e8:9b:36:21:32:60:70:84:e6:8c:dd:ed:aa:c0:c5:66:fd:
         56:0b:22:b5:0f:99:fa:08:30:78:14:95:2e:c1:4b:32:9f:cc:
         b4:1c:dd:a1:de:8c:ec:27:5d:b1:de:62:58:19:c3:b2:5e:d7:
         74:77:f7:d9:ca:d2:79:7d:cc:28:1e:5e:16:aa:b1:5e:f7:99:
         7c:1d:c1:f7:07:4a:c3:52:0a:51:6b:63:cf:e1:df:6c:f0:fa:
         7f:f4:6d:93:64:93:07:82:8f:6c:5b:44:40:71:aa:2f:d0:a2:
         6d:4b:56:63:16:1a:78:bf:fc:dc:53:f0:df:64:0a:51:68:eb:
         07:22:0a:a1:f7:97:7f:83:a2:5f:12:3d:de:ae:f6:1f:16:f3:
         5c:e4:67:4f:0b:02:70:75:d0:9f:54:0c:68:85:56:85:3c:a1:
         27:8d:f6:3c:45:a9:ac:9f:5a:31:82:af:45:b9:ca:f4:7c:61:
         05:a5:75:8e:f6:82:65:85:5d:55:ff:f6:cd:71:7b:c4:bc:06:
         3b:fe:46:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 05:23:07 2025 by rpki-client