Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f152b2cd-330d-3d29-9041-5e1fbf9089e9.roa
File:                     f152b2cd-330d-3d29-9041-5e1fbf9089e9.roa (raw, json)
Hash identifier:          hvyvTRNHQuq0Px9LW2t2L4oEKCRyF121BntTjzDRduY=
Subject key identifier:   6C:72:C7:ED:92:FF:E1:58:CC:EA:E3:2F:5E:30:E3:E8:4A:9E:42:46
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584963D1F1E139CD750750BCF100
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f152b2cd-330d-3d29-9041-5e1fbf9089e9.roa
Signing time:             Wed 02 Apr 2025 07:01:52 +0000
ROA not before:           Wed 02 Apr 2025 07:01:52 +0000
ROA not after:            Tue 01 Jul 2025 07:01:52 +0000
asID:                     7016
IP address blocks:        172.121.171.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Thu 10 Apr 2025 01:50:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:63:d1:f1:e1:39:cd:75:07:50:bc:f1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr  2 07:01:52 2025 GMT
            Not After : Jul  1 07:01:52 2025 GMT
        Subject: CN=d68dae2f-cc59-4561-b766-ee775ae3012e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:43:5a:a5:6c:9c:de:27:07:d4:50:05:10:4d:
                    66:fe:39:5a:69:ee:f2:43:54:62:9b:bb:04:c5:61:
                    b7:74:9c:cb:bb:ee:c0:84:68:3c:c7:ea:18:14:21:
                    c4:2c:ec:b1:a5:8e:05:45:ee:d3:07:b2:f4:36:22:
                    66:be:7d:36:eb:71:80:32:6d:49:64:c1:83:f4:de:
                    ef:bb:1b:8b:78:77:9f:32:da:9b:75:df:b5:88:f3:
                    ec:b0:63:b4:af:2d:02:44:ea:21:93:28:e9:7d:93:
                    5f:75:b4:9d:32:0d:5b:a7:41:37:65:6a:72:ad:62:
                    d3:f2:9c:10:f7:00:38:03:e0:fe:66:1d:6d:d3:8a:
                    0b:64:a5:bd:7a:4e:27:d8:a5:41:d9:41:3f:86:11:
                    35:74:1c:c3:f0:9c:27:2f:76:fd:51:c6:3d:0a:eb:
                    cc:0a:81:f0:e6:60:23:0b:4a:d9:f4:e2:79:85:2d:
                    33:c4:b7:86:56:cb:f8:54:61:f3:5f:cf:3a:40:f6:
                    00:30:79:e9:0a:7e:fb:c5:22:eb:4e:7e:2c:f1:c2:
                    60:ae:7c:d8:a8:02:7d:c5:ad:4f:9d:3b:1a:8c:31:
                    8a:71:1f:cd:09:f7:6a:d4:54:83:61:c5:b6:65:7e:
                    98:7b:66:31:d7:8b:83:df:38:f6:e5:bf:f1:3d:2a:
                    09:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:72:C7:ED:92:FF:E1:58:CC:EA:E3:2F:5E:30:E3:E8:4A:9E:42:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f152b2cd-330d-3d29-9041-5e1fbf9089e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.121.171.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:34:50:fb:48:56:de:32:4c:70:57:0e:cc:4b:62:37:e9:db:
         f4:f6:50:19:5f:c3:12:26:db:7a:fc:c7:f2:9c:72:24:a5:03:
         d6:e1:5b:49:55:bd:be:65:2a:d5:2b:54:a7:7f:0a:c9:d9:2a:
         bd:f5:7a:4c:76:0e:5d:a0:4a:f3:bf:7e:b4:c8:c5:23:f5:d4:
         e2:58:57:10:a3:60:7e:be:64:d5:1b:a2:e2:1e:7c:6c:fa:34:
         00:ce:e0:e3:7b:b2:21:5c:84:3f:fc:38:26:58:40:56:b1:ca:
         b9:fd:1e:89:47:7c:29:c1:b9:cc:cd:f9:c8:a5:ab:c1:7b:95:
         ff:41:b9:dc:ab:df:01:21:18:d2:04:c6:08:65:de:49:49:f3:
         41:d7:f0:6a:8d:e5:f9:be:41:e6:08:a5:b8:09:e4:b0:22:89:
         8a:a6:ac:e3:fb:d8:cf:e9:87:4d:b1:42:57:46:23:14:da:73:
         0c:e1:08:c5:91:c3:fc:24:f9:fb:52:60:17:ff:e1:e7:75:78:
         30:18:68:54:5e:05:0d:18:bc:88:eb:3c:52:9b:cf:8e:bc:3c:
         10:c0:76:1a:cd:46:5e:33:e1:ae:68:50:4a:30:80:4d:11:37:
         12:90:e8:08:39:c5:2c:c1:ab:18:51:7c:3c:c2:1c:58:36:34:
         c8:58:d3:c5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElj0fHhOc11B1C88QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI1MDQwMjA3MDE1MloXDTI1MDcwMTA3MDE1MlowLzEtMCsGA1UEAxMk
ZDY4ZGFlMmYtY2M1OS00NTYxLWI3NjYtZWU3NzVhZTMwMTJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApENapWyc3icH1FAFEE1m/jlaae7yQ1Rim7sE
xWG3dJzLu+7AhGg8x+oYFCHELOyxpY4FRe7TB7L0NiJmvn0263GAMm1JZMGD9N7v
uxuLeHefMtqbdd+1iPPssGO0ry0CROohkyjpfZNfdbSdMg1bp0E3ZWpyrWLT8pwQ
9wA4A+D+Zh1t04oLZKW9ek4n2KVB2UE/hhE1dBzD8JwnL3b9UcY9CuvMCoHw5mAj
C0rZ9OJ5hS0zxLeGVsv4VGHzX886QPYAMHnpCn77xSLrTn4s8cJgrnzYqAJ9xa1P
nTsajDGKcR/NCfdq1FSDYcW2ZX6Ye2Yx14uD3zj25b/xPSoJjQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGxyx+2S/+FYzOrjL14w4+hKnkJGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvZjE1MmIyY2QtMzMwZC0z
ZDI5LTkwNDEtNWUxZmJmOTA4OWU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHmrMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHY0UPtIVt4yTHBXDsxLYjfp2/T2UBlfwxIm23r8x/KcciSlA9bhW0lV
vb5lKtUrVKd/CsnZKr31ekx2Dl2gSvO/frTIxSP11OJYVxCjYH6+ZNUbouIefGz6
NADO4ON7siFchD/8OCZYQFaxyrn9HolHfCnBuczN+cilq8F7lf9Budyr3wEhGNIE
xghl3klJ80HX8GqN5fm+QeYIpbgJ5LAiiYqmrOP72M/ph02xQldGIxTacwzhCMWR
w/wk+ftSYBf/4ed1eDAYaFReBQ0YvIjrPFKbz468PBDAdhrNRl4z4a5oUEowgE0R
NxKQ6Ag5xSzBqxhRfDzCHFg2NMhY08U=
-----END CERTIFICATE-----
Generated at Tue Apr 29 18:02:12 2025 by rpki-client