Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c5679e8d-4e2a-3668-bd1c-33131e7961e2.roa
File:                     c5679e8d-4e2a-3668-bd1c-33131e7961e2.roa (raw, json)
Hash identifier:          iTz4C6px+xI6J1Gsae1APspjo+WzIPWRGyUvQN8l+VQ=
Subject key identifier:   55:16:B1:94:4C:73:30:2D:EB:CE:E5:36:B7:D5:2D:C7:F9:2F:C1:D1
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285849EAE7DE863EB6E5DEB56F7580
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c5679e8d-4e2a-3668-bd1c-33131e7961e2.roa
Signing time:             Tue 20 May 2025 16:20:10 +0000
ROA not before:           Tue 20 May 2025 16:20:10 +0000
ROA not after:            Mon 18 Aug 2025 16:20:10 +0000
asID:                     401152
IP address blocks:        50.114.198.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Wed 28 May 2025 17:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ea:e7:de:86:3e:b6:e5:de:b5:6f:75:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 20 16:20:10 2025 GMT
            Not After : Aug 18 16:20:10 2025 GMT
        Subject: CN=20813d50-3f1b-4ce4-afbf-eb5417d267ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:26:e1:88:e2:01:ff:6c:c3:92:f8:0a:9b:8f:
                    49:3e:54:23:51:fd:e9:ed:e0:9e:15:28:77:69:06:
                    8c:a7:24:f2:64:49:1c:1e:a5:ed:eb:b9:65:04:a9:
                    35:03:ee:5f:46:0f:97:db:76:4a:52:c2:91:6c:4b:
                    ae:5a:47:85:7d:ea:fc:07:28:fd:11:e0:37:60:97:
                    9f:c6:5d:11:2e:6a:2e:00:ae:e1:d6:b4:b1:b7:2b:
                    63:9e:14:be:95:a7:6d:55:1d:cd:19:9b:7f:08:ac:
                    d4:02:81:70:ac:1e:59:8a:57:f7:3e:d3:72:ad:05:
                    f6:f4:ec:d7:90:c4:a0:07:c3:3b:6a:aa:92:c0:b7:
                    53:b4:c1:a9:cd:d3:7e:07:21:40:56:48:5c:41:69:
                    76:02:ae:a3:3c:dc:1f:ec:24:1a:37:ce:b1:f5:31:
                    12:9c:2f:04:11:3b:83:93:59:7d:f4:76:c6:f0:a8:
                    b7:d3:58:b6:78:39:a8:cb:8a:f6:81:bd:b9:71:04:
                    9f:8d:2b:73:27:04:49:95:b9:08:0e:a5:b6:3b:1b:
                    e2:cf:8f:be:47:41:0f:65:24:3f:e4:67:ec:15:fa:
                    75:25:63:fd:62:08:b6:7b:08:e5:b9:4f:16:94:5f:
                    9f:4a:81:a3:1d:1e:00:75:22:f9:c6:ae:c0:ec:28:
                    07:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:16:B1:94:4C:73:30:2D:EB:CE:E5:36:B7:D5:2D:C7:F9:2F:C1:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c5679e8d-4e2a-3668-bd1c-33131e7961e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:8f:e7:87:80:ce:1e:80:3d:26:87:ab:ed:0e:f8:2f:0d:c2:
         ba:8c:cd:42:92:b1:29:d6:01:4d:24:99:4c:8a:36:0a:91:0a:
         15:b4:64:d3:a5:29:03:1a:ea:01:a7:d7:ad:e0:3f:f9:09:28:
         df:2b:77:cb:29:6b:cd:ec:a7:4c:50:cc:04:f5:c3:b8:39:57:
         19:1d:94:f2:93:9c:b5:f0:f7:19:c6:50:bc:83:a4:f0:37:84:
         66:27:6e:26:e7:96:bf:ee:56:28:fe:1a:16:9d:a3:ce:48:30:
         66:6b:1e:27:d3:b5:73:7b:f2:65:4d:2a:84:a4:80:b2:5f:55:
         ba:8e:43:d4:70:ce:35:d6:77:02:d0:5c:e2:03:01:cf:1b:0a:
         b5:fc:48:51:79:ec:f3:00:17:b5:28:71:0e:23:54:75:f9:91:
         b5:4c:97:30:aa:f1:d4:69:c6:f8:49:57:73:c8:90:4d:b0:87:
         70:4a:03:36:41:f6:b6:69:b4:48:69:60:0c:ca:1b:19:ea:70:
         3b:ea:7a:ac:8b:23:30:11:28:8e:3e:f3:fe:16:bf:94:d5:77:
         83:e5:bd:09:47:a8:53:d1:a8:fd:fe:b1:6c:20:cd:a3:61:63:
         44:fa:f7:0e:4c:e0:ab:25:f7:d6:e6:7a:46:b6:06:65:69:ac:
         03:bb:61:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:53:35 2025 by rpki-client