Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/ecac6a1a-ba8a-34e4-b16b-42d19b1b7ebd.roa
File:                     ecac6a1a-ba8a-34e4-b16b-42d19b1b7ebd.roa (raw, json)
Hash identifier:          iZsnQK9T5ZH0xLWO1vCpdm9gr/VxdVq61fsF8Gbcqnk=
Subject key identifier:   10:97:E5:B0:1D:D8:51:7C:E4:94:DF:75:7A:7C:B3:06:89:3D:C5:74
Certificate issuer:       /CN=d45613e1-c70f-4ce1-996e-e01d89469087
Certificate serial:       010D0C9F4328584983E1661C8FAC55FD3F392680
Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/ecac6a1a-ba8a-34e4-b16b-42d19b1b7ebd.roa
Signing time:             Sun 13 Apr 2025 18:38:52 +0000
ROA not before:           Sun 13 Apr 2025 18:38:52 +0000
ROA not after:            Sat 12 Jul 2025 18:38:52 +0000
asID:                     64315
IP address blocks:        141.140.1.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Tue 15 Apr 2025 18:49:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:e1:66:1c:8f:ac:55:fd:3f:39:26:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087
        Validity
            Not Before: Apr 13 18:38:52 2025 GMT
            Not After : Jul 12 18:38:52 2025 GMT
        Subject: CN=47b98103-4d52-4d0d-940f-5148883fbcd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:c4:e9:f9:01:cf:11:c2:1d:5d:af:11:8a:6a:
                    34:67:bd:e6:22:68:c2:b2:fa:c3:88:bb:6d:e1:11:
                    8d:9d:f4:4b:e3:07:a2:8d:b1:a1:df:0d:ca:d3:98:
                    7b:b3:55:25:36:49:b4:99:1b:26:5c:ae:16:bc:da:
                    6e:4b:64:de:48:e1:fb:19:66:23:7d:58:d4:31:a3:
                    9a:98:85:27:07:f8:d6:52:f1:ca:cc:90:9b:f2:7c:
                    c3:15:0e:e0:9a:55:79:63:03:a4:3a:ed:92:90:d8:
                    63:fd:45:05:e8:ab:d3:8c:6c:7a:43:9d:fe:32:05:
                    91:70:91:39:01:53:04:bc:4f:1e:24:5b:94:cf:e7:
                    f9:2a:d3:33:f3:a3:54:0c:23:f0:25:3f:26:45:55:
                    09:05:bd:b0:85:73:3d:7d:6e:a4:cf:fe:46:3a:db:
                    17:a4:93:cd:f5:a6:ae:db:d3:21:0c:79:fa:e3:de:
                    4d:bb:de:80:df:5f:c7:e5:0f:be:31:4d:83:ce:43:
                    7e:de:df:06:39:55:b0:71:1c:73:1d:29:41:b0:11:
                    5c:6f:b2:c3:1e:2e:19:74:3e:91:c5:0d:46:03:e5:
                    d2:07:44:15:64:55:1e:15:fa:dc:e2:4f:35:5f:4e:
                    aa:83:97:50:ba:22:69:26:a1:02:4f:d0:a1:f3:ca:
                    65:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:97:E5:B0:1D:D8:51:7C:E4:94:DF:75:7A:7C:B3:06:89:3D:C5:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/ecac6a1a-ba8a-34e4-b16b-42d19b1b7ebd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl

            X509v3 Authority Key Identifier:
                keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.140.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:f2:9f:6c:30:92:68:51:8d:d4:c2:d2:50:92:62:97:c4:86:
         08:97:58:b1:2e:6c:8a:68:18:70:a6:17:39:e6:35:9a:05:2d:
         28:3f:e3:ec:1c:6c:43:f3:df:a3:17:33:5c:9f:1e:d3:21:8c:
         4c:f9:9b:09:45:4b:89:68:67:9b:4e:9a:0b:06:32:7f:96:29:
         be:92:21:15:09:63:35:a2:85:50:28:1b:1c:1b:b4:79:52:cf:
         17:cd:e8:3e:5b:69:95:14:ef:cc:26:0c:56:3a:a9:fe:e4:c8:
         25:f2:ae:82:1b:06:25:c4:af:a0:d6:37:43:4d:25:cd:7e:cc:
         8f:06:90:04:59:ee:02:33:a2:b1:9d:c6:0e:3b:63:79:5f:0d:
         39:18:95:fe:78:2d:8f:ae:dd:04:1e:0e:de:8d:40:2f:cb:66:
         53:01:8a:a4:34:7a:57:c3:c8:0e:2d:c3:de:0e:ba:96:cd:c1:
         bd:e0:e1:e9:58:47:37:4f:47:65:3d:e8:d0:ab:84:78:ad:f6:
         78:81:84:82:6d:a4:79:77:f1:0c:9d:3a:15:90:e7:f1:0e:a1:
         f9:dd:a0:0b:4b:4e:b8:bf:1a:b2:b2:48:26:0a:28:4b:95:ae:
         14:c7:fb:a7:c7:52:fa:66:ce:f1:75:2b:fc:f0:98:67:3f:6d:
         eb:92:9f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:23:16 2025 by rpki-client