Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/97c0a7dc-0421-34e9-ae1a-8d19a5dd85cb.roa
File:                     97c0a7dc-0421-34e9-ae1a-8d19a5dd85cb.roa (raw, json)
Hash identifier:          vL4ZEm16vHDhSPAkfRgkj+PZVBbYTZHqTbuNLh4/hk4=
Subject key identifier:   A1:E5:0F:55:CA:6F:88:D8:75:DE:BC:5E:33:29:92:68:7D:68:60:F5
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F43285849B5F9936BCF56E3A81505EF98
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/97c0a7dc-0421-34e9-ae1a-8d19a5dd85cb.roa
Signing time:             Thu 01 May 2025 17:18:00 +0000
ROA not before:           Thu 01 May 2025 17:18:00 +0000
ROA not after:            Wed 30 Jul 2025 17:18:00 +0000
asID:                     22773
IP address blocks:        68.96.164.0/23 maxlen: 23
Validation:               Failed, certificate revoked on Thu 01 May 2025 22:16:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:f9:93:6b:cf:56:e3:a8:15:05:ef:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  1 17:18:00 2025 GMT
            Not After : Jul 30 17:18:00 2025 GMT
        Subject: CN=7139ba63-5f6d-4dce-b6d1-b2dd7ea914ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:51:27:97:03:10:61:1b:66:f5:f0:bb:3b:13:
                    55:4c:74:ab:7b:36:37:3b:56:e4:2e:90:ad:04:19:
                    5e:24:e6:58:c4:b2:82:af:0d:0f:1d:b0:63:2c:0e:
                    83:36:b9:3d:98:6f:5b:d8:cd:06:ab:2f:14:d4:7a:
                    b9:67:7c:c2:c2:12:74:87:03:d2:9a:04:92:1b:b1:
                    56:a0:21:35:e6:8f:ab:57:c0:6d:ba:da:20:59:8a:
                    72:93:26:f5:48:4c:72:00:73:df:62:74:1a:d1:48:
                    aa:db:c7:ea:06:ed:bf:6e:6f:fe:40:e2:dc:c2:87:
                    da:e9:5d:77:54:2d:b9:e3:a6:86:40:91:c6:fe:6d:
                    69:8f:b6:ea:4f:ab:9e:1c:38:46:83:e5:46:51:26:
                    f6:b7:03:36:26:90:06:48:bb:f9:5d:41:d3:92:81:
                    70:c8:a0:58:25:5a:5c:0c:8a:6f:7b:19:0f:56:e8:
                    d5:cb:45:a6:56:1c:a2:42:34:16:b0:77:d9:75:28:
                    25:ab:a3:a8:f3:c5:e8:84:ca:74:53:1c:cf:97:fd:
                    18:fc:a3:75:b7:97:d1:49:a8:62:18:c3:fb:2e:19:
                    52:ea:79:03:a8:b8:5c:37:b1:6f:ec:1a:64:2f:8f:
                    cb:8f:f9:24:e0:e6:4c:a0:1f:2d:8d:4f:3e:eb:7f:
                    e0:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:E5:0F:55:CA:6F:88:D8:75:DE:BC:5E:33:29:92:68:7D:68:60:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/97c0a7dc-0421-34e9-ae1a-8d19a5dd85cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.96.164.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:27:68:02:f9:0d:cf:0c:58:7e:dc:f2:4d:8b:ef:01:3c:40:
         38:f8:30:75:78:e7:64:67:6d:c2:ab:41:10:a1:ec:2d:14:7f:
         36:44:e9:f7:93:a2:b8:15:9a:7a:74:57:92:a1:b6:e4:23:7a:
         ce:26:83:45:4b:a0:96:7d:46:5b:85:97:60:5e:2c:17:9d:89:
         d1:e4:0c:ab:b3:29:a4:9b:d8:58:d8:06:91:7f:ba:b2:54:a4:
         c8:5b:a5:1d:6b:cc:61:80:3f:e5:37:1f:82:ab:50:40:c3:46:
         99:8c:ba:46:81:b8:9b:c1:3a:c0:99:27:09:89:e3:36:53:6b:
         b1:6a:a3:92:a7:f3:6f:63:ab:15:a1:db:56:f2:99:7b:19:4f:
         e8:7c:51:cb:57:4f:5b:a8:e5:6b:98:5d:e9:1e:26:a9:4b:c2:
         50:42:2a:68:73:a2:03:59:74:15:17:e4:2b:cc:6c:2e:2f:55:
         e8:77:1e:50:d1:c7:4c:06:4b:a5:28:69:13:2e:8a:8a:1b:28:
         d0:3b:76:aa:49:9f:99:12:38:da:6e:cb:06:85:c4:61:fb:d1:
         6a:1e:21:88:67:e7:05:7a:66:32:1e:b9:2a:61:46:c0:fc:67:
         4a:c6:5f:de:e7:de:5e:d1:53:ef:ed:96:bf:0e:fd:2e:78:46:
         fc:b5:3f:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 18:02:55 2025 by rpki-client