Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e278e20d-3113-31b0-8a28-746483f553b3.roa
File:                     e278e20d-3113-31b0-8a28-746483f553b3.roa (raw, json)
Hash identifier:          CtXW+BLgV2gLpqqvdRehNv9XJQu5yjPXic1jNxrcgjg=
Subject key identifier:   F1:34:B4:59:9D:38:F9:BA:16:7A:A4:C1:EA:91:87:B2:B4:37:66:14
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285849F17FA9E757E330ED75BA3BC0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e278e20d-3113-31b0-8a28-746483f553b3.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     401152
IP address blocks:        50.114.45.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Fri 23 May 2025 17:49:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:7f:a9:e7:57:e3:30:ed:75:ba:3b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=d98b40a8-96c7-4e4c-939f-018fdff9676f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d7:83:fd:8e:b9:2a:06:f5:b5:59:c5:24:c7:
                    ca:64:46:ca:d1:e5:2b:27:d3:44:ea:c8:b5:b9:18:
                    91:50:19:39:ff:4c:8c:39:1c:21:9b:b7:5b:46:47:
                    5a:1c:97:09:ab:33:16:94:2b:65:1a:69:fa:77:a5:
                    05:71:5e:4e:fd:1d:8b:22:b3:dc:3d:ba:51:c0:a8:
                    17:20:b6:80:9f:3e:dc:37:16:ab:e3:49:00:90:4c:
                    62:8d:d0:62:87:53:3d:98:0c:d7:f5:3f:32:2f:65:
                    90:0d:36:ec:1e:55:4d:a5:2c:23:51:61:cf:59:b3:
                    5f:f5:4e:0d:4c:69:2d:d8:10:de:9a:19:35:38:f5:
                    92:11:b3:0c:4a:a0:05:78:c9:0e:91:e9:0b:ee:5d:
                    53:0a:33:f9:0f:10:11:e4:0b:92:0d:a7:0a:43:c0:
                    b9:06:66:c7:90:0d:dc:ff:75:c1:88:a8:a9:f1:ea:
                    a3:87:23:86:f9:ae:20:92:51:ba:eb:60:ad:57:3a:
                    26:1f:fe:b8:fd:fb:4d:b6:5b:7d:b1:c6:4a:88:5c:
                    65:9e:60:06:b3:5f:36:45:55:52:54:0c:46:49:62:
                    62:4a:a2:2f:3d:15:4f:65:6b:be:19:65:cc:b6:58:
                    1b:bc:34:92:f5:de:a9:74:cc:e2:97:82:41:77:8a:
                    14:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:34:B4:59:9D:38:F9:BA:16:7A:A4:C1:EA:91:87:B2:B4:37:66:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/e278e20d-3113-31b0-8a28-746483f553b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.114.45.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:ea:1f:e4:2e:f1:ee:df:e2:3a:07:c5:1d:1e:b1:49:f7:d6:
         d4:95:a0:f4:8e:61:e2:6a:ca:ac:c1:a0:d8:a5:07:a0:32:39:
         91:bc:d7:16:69:fb:b6:13:f9:8c:87:a9:65:db:48:ab:b6:3a:
         34:a4:d8:f2:fa:09:49:99:0f:37:30:a2:02:2e:bc:01:67:b3:
         ff:ef:a6:57:da:a5:27:1a:e5:b0:3f:00:a3:b1:31:10:79:2f:
         71:ea:8c:b2:12:e2:64:c9:34:a0:21:9a:11:38:26:b6:e6:80:
         9b:20:9d:5f:47:8a:2e:4f:2a:d3:c6:0f:89:f4:f1:94:ea:16:
         61:3f:7d:d2:2f:05:6b:51:be:1d:79:4e:70:ab:f1:18:f7:30:
         16:2e:d5:cc:b9:1e:d8:30:92:05:fd:da:54:e0:31:e0:f8:83:
         ac:5f:0c:ab:8c:38:5c:af:01:ed:a8:ec:81:47:17:34:bf:dd:
         52:f8:67:b7:0b:c2:51:3e:ab:91:13:2e:99:e7:de:96:34:c7:
         f1:88:02:ba:07:b5:87:41:53:ee:40:a0:2c:50:c6:49:7f:df:
         fe:c5:11:4e:35:55:10:8b:fb:f6:48:a7:93:ed:56:92:6e:f1:
         d5:c6:08:c8:bb:f5:42:2f:d5:86:72:8f:03:e5:77:72:f9:4a:
         43:fa:eb:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 09:57:44 2025 by rpki-client