Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/78cffe40-4d5e-3986-9022-fe1eadd18cd7.roa
File:                     78cffe40-4d5e-3986-9022-fe1eadd18cd7.roa (raw, json)
Hash identifier:          b2w7Ijrcg4uMPcpsDGRotlFZfFz+pa0NOE/bwt601Ig=
Subject key identifier:   45:83:88:D7:57:65:5E:A3:B3:BA:8D:15:0C:39:94:91:0D:09:95:A0
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F43285849B5DD7982DD61059C247F1680
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/78cffe40-4d5e-3986-9022-fe1eadd18cd7.roa
Signing time:             Thu 01 May 2025 16:21:23 +0000
ROA not before:           Thu 01 May 2025 16:21:23 +0000
ROA not after:            Wed 30 Jul 2025 16:21:23 +0000
asID:                     22773
IP address blocks:        68.98.225.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Thu 01 May 2025 21:19:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:dd:79:82:dd:61:05:9c:24:7f:16:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  1 16:21:23 2025 GMT
            Not After : Jul 30 16:21:23 2025 GMT
        Subject: CN=6016e5d6-bd10-4f78-9f41-eb4ec49ddf9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:7a:fe:0d:76:22:0b:3f:db:94:3c:5d:ce:a6:
                    8d:0a:d2:29:45:f3:a2:36:ce:ac:61:6d:d9:49:fc:
                    eb:9f:ba:45:2d:93:b2:11:96:6b:d5:d3:aa:fa:7d:
                    43:76:12:3d:e5:92:e3:ed:c0:cf:3b:ed:99:da:23:
                    fd:3a:59:80:f2:20:9f:01:c7:40:a6:4a:98:6b:b0:
                    1b:c0:41:9e:a1:bf:85:eb:5a:5e:e5:5f:e3:c9:83:
                    d0:46:8f:23:22:64:66:9c:5a:fb:2a:d1:17:de:de:
                    fe:c7:56:0d:57:97:7d:be:a6:7f:c6:2b:ff:3c:eb:
                    87:27:e8:87:08:f4:67:fe:b8:1b:ff:4e:13:e0:be:
                    6e:16:ef:9b:70:39:d8:77:b1:10:3f:92:6f:38:b2:
                    d9:79:24:d5:2c:ca:48:c7:54:51:bd:f4:ff:e4:bb:
                    1a:56:81:11:be:ff:76:e7:8c:e2:8e:5b:f6:40:09:
                    dc:32:82:74:5d:16:e8:4d:14:ea:8a:23:1f:fc:3c:
                    41:ca:dd:2f:a6:06:b9:60:88:a9:30:dc:1c:bf:2e:
                    c9:2b:1a:81:40:dd:81:79:80:d3:2f:80:ef:80:fc:
                    2d:0b:4e:18:93:37:7f:25:c2:9b:44:2a:fa:4a:0a:
                    09:14:28:cf:dc:88:a0:60:93:09:d8:a4:f8:2c:43:
                    b4:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:83:88:D7:57:65:5E:A3:B3:BA:8D:15:0C:39:94:91:0D:09:95:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/78cffe40-4d5e-3986-9022-fe1eadd18cd7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.98.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:17:da:b0:3a:8b:8e:a1:60:87:55:dd:bf:44:a3:c3:6c:1c:
         8b:d1:c3:c1:b1:4b:61:2f:46:6b:bb:76:6c:c6:15:0f:9f:08:
         a1:98:13:a7:de:e2:08:b1:c4:10:a4:15:1a:77:7f:20:6a:dd:
         a9:f8:a0:12:26:f1:a2:93:a1:13:3d:ca:aa:33:bd:62:50:45:
         c6:ba:1c:d0:b6:2a:88:af:bb:3b:bd:61:f1:ec:63:74:5a:51:
         08:5a:82:bb:a7:7a:fd:e0:0a:94:89:9a:33:98:dd:99:f4:d5:
         32:b2:8b:f3:1b:c5:34:5a:54:22:45:a6:19:f3:e9:96:8d:e0:
         8b:c5:21:ee:4e:33:cc:2a:0e:49:0d:25:92:e0:dd:40:4c:b8:
         4d:be:37:f2:ea:85:69:3e:5f:d1:d0:0b:dc:1b:26:c7:f7:1a:
         a9:cc:2e:dd:41:16:23:6b:26:94:b9:69:0b:8a:4f:ef:10:f7:
         d0:87:a3:d2:63:be:6f:5c:ae:71:cb:83:83:a2:36:f6:09:f4:
         e9:d6:2f:92:ab:40:82:16:fc:a0:b7:cd:7a:cc:6b:4c:61:d5:
         d4:40:a4:95:16:7a:0c:f0:73:9b:18:47:fe:fb:e3:72:5f:ea:
         d4:b3:1e:b4:32:bd:ba:5f:55:37:10:75:1d:11:be:4f:80:12:
         c8:81:89:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 02:58:40 2025 by rpki-client