Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/582d09db-63ec-3ca8-9fef-e2d1c5e7db88.roa
File:                     582d09db-63ec-3ca8-9fef-e2d1c5e7db88.roa (raw, json)
Hash identifier:          t+Nv5SL8Zb5vvucXt0ZPnvRtVMr78OSnMFVplNR9Esw=
Subject key identifier:   44:02:7A:96:4C:D3:6C:CF:1B:14:42:6C:48:63:45:A0:BA:82:95:9B
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849F61B2D0BA0F81BA239A50780
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/582d09db-63ec-3ca8-9fef-e2d1c5e7db88.roa
Signing time:             Sat 24 May 2025 16:37:26 +0000
ROA not before:           Sat 24 May 2025 16:37:26 +0000
ROA not after:            Fri 22 Aug 2025 16:37:26 +0000
asID:                     213238
IP address blocks:        172.121.48.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Sun 25 May 2025 11:51:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f6:1b:2d:0b:a0:f8:1b:a2:39:a5:07:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: May 24 16:37:26 2025 GMT
            Not After : Aug 22 16:37:26 2025 GMT
        Subject: CN=e92fbc3e-a9e3-4ac8-a0e9-fb28e3c2896f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:95:2e:4a:3c:05:9d:ac:18:f6:03:99:8a:dc:
                    c0:d1:48:f3:c6:43:52:4f:48:73:14:b6:74:ff:01:
                    a2:2e:de:e4:aa:fe:f2:cb:e7:eb:14:48:ed:84:a0:
                    58:3e:be:3f:72:4f:12:0c:e0:cc:4a:e4:fc:b7:25:
                    e3:b5:d3:4e:cf:eb:bf:5f:a1:63:16:6c:47:9b:df:
                    30:75:60:d6:6e:90:57:e2:e4:da:fa:c1:72:37:47:
                    0d:ba:43:a6:94:11:31:6a:7a:fd:89:3e:e9:7b:bc:
                    29:30:93:a3:dd:db:3b:21:e2:4c:ae:ea:ef:a8:60:
                    27:f6:82:35:b3:bf:80:ae:99:79:dc:db:71:9f:f4:
                    2d:2d:ad:5a:58:05:18:56:d2:95:a4:c8:09:25:f1:
                    b0:ac:9e:39:f1:99:45:cd:c2:53:e8:81:f8:60:69:
                    c9:e3:cc:e0:87:b0:75:0b:b9:40:32:6a:55:34:a7:
                    ba:f6:c2:85:a4:4f:13:62:fd:c3:95:48:15:c7:7d:
                    12:2b:65:f2:71:43:1f:60:b8:f6:12:27:3b:9a:96:
                    9e:89:fa:3f:12:40:e6:c9:d4:ae:17:97:c4:9d:0a:
                    d7:b2:fc:4a:71:0d:43:8c:61:cd:60:d5:9a:e5:78:
                    16:5c:f4:5b:9b:f0:0d:ab:9b:b4:32:79:9a:85:7b:
                    a9:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:02:7A:96:4C:D3:6C:CF:1B:14:42:6C:48:63:45:A0:BA:82:95:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/582d09db-63ec-3ca8-9fef-e2d1c5e7db88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.121.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:ac:17:73:16:99:df:7a:ef:5f:48:57:c9:8e:2b:a4:32:35:
         5e:3f:2d:25:c2:5c:91:56:2e:5f:7d:77:64:84:b2:2a:c5:a8:
         d3:5e:e6:9e:57:4b:14:7f:92:c6:13:79:d8:9b:76:05:0b:42:
         53:96:da:f7:45:37:73:a9:4a:2a:d4:7d:c6:56:a1:2c:cf:8f:
         ce:ed:12:85:9c:6d:67:b4:69:b3:ed:1d:c7:ed:70:d5:94:32:
         66:e9:02:1d:37:f5:9b:cf:76:bb:47:2b:84:b2:50:99:81:be:
         a2:52:46:61:c9:04:7d:66:1c:cd:b2:38:be:03:c4:34:21:71:
         dc:0b:3d:eb:81:3b:5a:38:a8:f9:8a:34:33:c7:6d:db:9b:b3:
         de:35:87:2f:ab:fc:61:f0:70:b7:36:1e:01:a9:5a:51:47:d6:
         09:e9:53:f3:09:a5:43:07:ac:40:92:1b:a8:12:9d:2d:17:85:
         80:2e:d7:05:15:33:7f:36:c0:03:09:6e:f3:b5:78:7c:b2:99:
         31:96:5a:97:cb:b0:76:0f:fe:4c:cf:f3:7a:7e:3b:65:a8:d2:
         63:9a:e1:65:1a:1e:99:7e:fa:2c:c8:6f:2b:ef:e3:fa:ab:4b:
         f0:16:11:99:8f:9b:ce:17:e8:86:1e:f8:2a:b8:34:9a:8a:9d:
         3e:15:a3:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 05:16:19 2025 by rpki-client