Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0410509c-7d3a-3382-a3aa-fdfbc49cd337.roa
File:                     0410509c-7d3a-3382-a3aa-fdfbc49cd337.roa (raw, json)
Hash identifier:          cH4qWRgOmvz1VCpFpSRA/uSMbbb2/xUOit6wDuw8Qn4=
Subject key identifier:   0A:A2:37:9F:7E:29:CC:A5:DD:60:9F:C4:91:06:06:B4:D0:49:8B:75
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F43285849B5DF332BC20B4E209AD00B10
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0410509c-7d3a-3382-a3aa-fdfbc49cd337.roa
Signing time:             Thu 01 May 2025 16:24:51 +0000
ROA not before:           Thu 01 May 2025 16:24:51 +0000
ROA not after:            Wed 30 Jul 2025 16:24:51 +0000
asID:                     22773
IP address blocks:        70.185.32.0/23 maxlen: 23
Validation:               Failed, certificate revoked on Thu 01 May 2025 21:35:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:df:33:2b:c2:0b:4e:20:9a:d0:0b:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  1 16:24:51 2025 GMT
            Not After : Jul 30 16:24:51 2025 GMT
        Subject: CN=bae18524-cbb5-42c2-b800-4b27ff0ae766
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:14:93:31:79:2c:c5:43:b1:d7:2c:71:b7:07:
                    cc:e7:9b:97:50:0c:e7:8c:ba:56:94:ae:14:5f:5e:
                    56:fb:8d:77:07:17:28:c7:48:41:85:85:8b:f5:3c:
                    d7:8c:f3:ca:77:97:2b:88:bc:61:94:4b:c6:45:2d:
                    8a:86:09:d8:c4:95:de:5f:1a:17:3e:e7:b2:e8:d1:
                    8f:09:c6:9c:e6:70:63:b3:c0:94:ed:71:5b:a5:01:
                    29:cf:88:c6:11:c9:39:0a:97:05:a1:dd:a8:27:fe:
                    59:37:2c:3b:69:b4:2e:95:1d:8e:02:37:fc:ab:9e:
                    50:7f:12:55:14:27:c6:b2:0b:5d:8a:e3:2f:44:96:
                    7f:50:d0:99:d8:5d:01:ef:c6:b5:e3:c9:52:16:8d:
                    17:98:d2:76:6f:74:e9:7f:76:16:70:39:59:71:49:
                    84:14:d8:3c:2f:0d:a0:e6:27:82:94:2d:11:8b:09:
                    93:b9:d0:6e:b2:10:ac:2c:bc:f2:10:40:d4:08:64:
                    cc:17:2f:67:3b:fa:6c:34:13:83:8b:1d:3f:6e:bc:
                    66:15:47:f4:d1:9d:8c:82:f4:f1:33:6e:99:4c:2f:
                    7b:b6:aa:2f:2a:01:df:f1:29:a7:41:df:f5:70:48:
                    8b:5e:29:b1:8a:2f:95:17:eb:c0:76:7c:5c:29:34:
                    db:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:A2:37:9F:7E:29:CC:A5:DD:60:9F:C4:91:06:06:B4:D0:49:8B:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0410509c-7d3a-3382-a3aa-fdfbc49cd337.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.185.32.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:12:35:cd:99:f6:b1:60:d9:5c:b1:67:66:80:46:2b:71:73:
         4d:20:4b:bb:bd:d9:98:94:c7:27:5b:70:d6:b3:29:6e:0f:b1:
         c3:74:b3:23:63:73:ea:e9:f9:9e:7e:7e:2d:2b:88:78:d2:ee:
         b1:2d:5d:a7:a9:9b:e3:31:f9:2e:70:30:fe:42:b9:40:e3:a4:
         ba:20:21:ae:67:d2:4a:bc:88:4c:16:7f:3f:8e:11:c9:14:8a:
         11:c6:fe:05:a6:e5:a4:89:84:ae:78:42:e1:56:11:a4:0a:b1:
         a7:4e:13:bd:71:a5:f1:56:12:e5:fa:3c:5e:ba:41:07:51:1f:
         45:bb:d9:f1:6c:2b:11:9e:43:2f:11:64:8c:ac:7b:1f:42:1e:
         0f:97:48:6b:77:73:92:1f:51:8d:b5:76:9d:88:e1:64:4c:4e:
         11:b1:a1:56:fb:8a:3e:7f:6f:d2:f5:81:ba:d4:26:9b:39:f0:
         93:26:54:31:fc:7f:b3:31:28:0d:2b:79:1f:85:fa:d5:c3:12:
         21:3a:5d:f9:4b:21:89:b1:55:47:49:cd:3d:3d:1e:6c:4d:d1:
         6d:87:c1:28:11:2e:2d:64:7a:9b:8e:e5:fd:78:53:3d:a6:5d:
         7a:8e:5d:bd:88:15:d6:1b:d5:dd:4a:23:4c:bb:d5:d1:ec:28:
         6b:4c:d1:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 18:12:17 2025 by rpki-client