Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc019755-a466-4511-8e5f-83781d1aca46/79cac4ae-68fe-34f6-9936-ee747624ed13.roa
File:                     79cac4ae-68fe-34f6-9936-ee747624ed13.roa (raw, json)
Hash identifier:          rCaPENpQ3yb8tgX+qwCZFzZgW99hgG7EHB0dwLUd4Z0=
Subject key identifier:   3E:7C:02:C7:C9:E5:02:1D:AA:C7:7E:D6:91:13:72:C7:B3:82:8D:0E
Certificate issuer:       /CN=fc019755-a466-4511-8e5f-83781d1aca46
Certificate serial:       010D0C9F43285849FB570E902A8CB4260D614E00
Authority key identifier: 84:FA:EE:9A:A7:8E:05:3C:78:94:E0:09:1F:04:47:CA:FD:2D:B9:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc019755-a466-4511-8e5f-83781d1aca46.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc019755-a466-4511-8e5f-83781d1aca46/79cac4ae-68fe-34f6-9936-ee747624ed13.roa
Signing time:             Mon 26 May 2025 13:37:08 +0000
ROA not before:           Mon 26 May 2025 13:37:08 +0000
ROA not after:            Sun 24 Aug 2025 13:37:08 +0000
asID:                     3257
IP address blocks:        23.170.184.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Sun 01 Jun 2025 17:30:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fb:57:0e:90:2a:8c:b4:26:0d:61:4e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc019755-a466-4511-8e5f-83781d1aca46
        Validity
            Not Before: May 26 13:37:08 2025 GMT
            Not After : Aug 24 13:37:08 2025 GMT
        Subject: CN=ddc9a529-3e63-4978-ae31-0e5335ba2d5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:a1:b7:f0:fc:c7:95:52:d6:e0:c6:d3:08:ba:
                    15:5a:6d:e1:0f:a7:54:12:3a:69:e3:13:5f:b0:1d:
                    10:c1:6d:31:53:05:c5:c4:d8:0c:ea:49:b0:79:8c:
                    fe:fc:5f:c1:10:ce:33:a5:16:c6:64:2f:84:bb:ed:
                    d8:85:74:fe:e9:3d:07:88:d9:c6:20:c7:6b:47:3d:
                    c7:5b:2b:31:6f:b6:bc:7c:e1:dd:9a:a5:07:e8:d5:
                    2a:c7:a7:5a:e4:90:7e:c9:33:85:c1:66:1e:e3:1a:
                    cc:4c:53:17:fb:45:42:8b:11:2d:6a:0d:e0:26:f4:
                    8d:3f:78:54:e0:bc:21:08:bd:33:72:38:9a:37:83:
                    8f:52:73:9c:96:cb:e1:09:d1:90:d4:91:b1:8c:75:
                    87:39:44:59:2c:a0:7f:7d:da:7f:ec:00:f4:ec:6a:
                    f9:46:af:ba:7a:65:5a:18:ed:70:e3:41:f5:c7:00:
                    07:1f:a7:06:64:f1:ba:01:9c:65:d1:6d:f3:98:21:
                    56:49:d7:bd:d6:10:e4:1c:f2:4c:e8:a7:1e:2c:6b:
                    58:6b:0f:66:2e:0d:98:77:53:5c:1c:4e:0c:85:50:
                    46:96:05:3f:5f:37:da:01:13:a5:16:80:6d:55:41:
                    63:b3:bf:2a:c1:a0:6d:bc:7c:a1:c7:d5:fd:04:97:
                    7a:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:7C:02:C7:C9:E5:02:1D:AA:C7:7E:D6:91:13:72:C7:B3:82:8D:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc019755-a466-4511-8e5f-83781d1aca46/79cac4ae-68fe-34f6-9936-ee747624ed13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc019755-a466-4511-8e5f-83781d1aca46/fc019755-a466-4511-8e5f-83781d1aca46.crl

            X509v3 Authority Key Identifier:
                keyid:84:FA:EE:9A:A7:8E:05:3C:78:94:E0:09:1F:04:47:CA:FD:2D:B9:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fc019755-a466-4511-8e5f-83781d1aca46.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.170.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:83:11:74:6f:c5:5b:5b:ee:63:43:d6:16:8c:87:86:eb:06:
         6d:4c:fe:09:e2:af:e3:f5:31:dd:27:03:30:86:fc:54:69:a1:
         4e:63:34:92:42:15:55:d3:1d:b0:b9:7a:9c:f0:67:f9:9c:39:
         1b:54:f9:82:f7:4a:da:a5:be:98:50:12:e5:d4:e1:30:c8:60:
         f8:2c:e2:84:a6:6b:86:ff:1e:9a:4c:ee:2d:8a:38:22:76:9e:
         60:b0:29:e2:44:47:d0:ab:de:b8:66:59:cd:60:62:27:d2:63:
         0b:cf:95:92:9a:c9:ac:3e:48:aa:43:7f:0f:08:6b:dd:87:f8:
         7f:70:37:d7:cb:b7:af:57:24:e8:b8:57:23:a4:e7:00:bd:52:
         7d:fa:da:92:bb:e2:20:a3:95:f3:2e:9f:bb:d2:d4:a1:9b:45:
         8c:53:cd:fd:6c:62:6b:5d:ac:80:14:08:91:d5:2b:d8:a8:10:
         fa:23:e3:18:fd:35:e1:94:5e:71:0e:d5:9e:d0:73:35:03:7c:
         29:78:05:c5:3c:8d:de:b0:22:1c:18:dc:ad:15:61:f4:32:c4:
         4c:ef:2d:b8:a8:32:b3:f4:e9:76:78:93:2f:6d:21:49:1a:96:
         26:c5:12:70:8e:76:63:8f:f0:32:b6:ef:d1:f1:30:58:67:ff:
         6d:ee:95:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 04:35:17 2025 by rpki-client