Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d16114d0-9aed-42a2-956d-441c06a82e37/46a5ff82-79c5-33ba-a128-6d63aa714dae.roa
File:                     46a5ff82-79c5-33ba-a128-6d63aa714dae.roa (raw, json)
Hash identifier:          1gSHR0Rfrn07IhVWjYCRcwrQ3IBJ9vCgfsgWmQghcL0=
Subject key identifier:   31:D0:B1:7D:55:D9:D3:B2:F8:49:68:0D:B1:0B:FA:F9:B8:5E:A8:2C
Certificate issuer:       /CN=d16114d0-9aed-42a2-956d-441c06a82e37
Certificate serial:       010D0C9F43285849E7D558C8680D8D8AF4882B70
Authority key identifier: C7:B1:27:7E:F0:5A:2B:8F:4B:57:A7:F2:D3:10:A3:D4:67:C3:39:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d16114d0-9aed-42a2-956d-441c06a82e37.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d16114d0-9aed-42a2-956d-441c06a82e37/46a5ff82-79c5-33ba-a128-6d63aa714dae.roa
Signing time:             Mon 19 May 2025 13:55:25 +0000
ROA not before:           Mon 19 May 2025 13:55:25 +0000
ROA not after:            Sun 17 Aug 2025 13:55:25 +0000
asID:                     24440
IP address blocks:        104.245.240.0/22 maxlen: 22
Validation:               Failed, certificate revoked on Thu 22 May 2025 14:45:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e7:d5:58:c8:68:0d:8d:8a:f4:88:2b:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d16114d0-9aed-42a2-956d-441c06a82e37
        Validity
            Not Before: May 19 13:55:25 2025 GMT
            Not After : Aug 17 13:55:25 2025 GMT
        Subject: CN=0b22ac65-bf1b-4d3a-b57a-1c3f9d2b699f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:7e:f5:0b:c0:0a:10:dc:20:0a:5f:77:75:b0:
                    ee:7a:52:0d:90:38:ca:7e:64:bf:8d:6c:89:44:e7:
                    ea:24:79:08:02:12:75:c1:48:94:90:fd:e7:8a:06:
                    c7:a9:69:75:ab:2f:7a:7f:7c:bd:06:12:f1:4c:1f:
                    00:d2:38:3f:02:9e:ab:6e:7c:9b:5b:73:c7:b9:3d:
                    81:7a:e5:a4:a0:6c:6e:ef:8a:3d:1e:e9:42:c1:d0:
                    78:66:ac:76:62:67:f9:95:1f:ea:b2:54:76:11:ed:
                    a7:0a:39:28:df:8c:9c:f9:10:eb:00:95:3e:74:01:
                    8c:58:a5:fb:56:2a:12:1e:32:c3:b2:0e:f1:81:8f:
                    97:9f:88:01:a4:33:0a:31:b2:44:32:ad:09:1c:76:
                    46:1b:a4:75:41:c1:f0:b1:b7:86:88:d1:08:a1:09:
                    24:51:0b:bd:6c:01:a1:75:9a:c1:de:ec:06:6c:71:
                    8c:db:1e:c6:74:c4:14:07:c2:01:25:ea:a2:ea:b5:
                    d6:7b:7f:8a:90:74:f9:0d:bb:30:41:45:1c:92:ae:
                    b0:36:0f:83:bf:76:85:5e:27:92:52:70:9b:dd:85:
                    0f:de:72:ce:49:f3:09:46:05:52:af:35:38:79:98:
                    75:c1:9f:fe:fc:3f:00:ba:eb:01:b2:ca:2d:5f:6a:
                    98:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:D0:B1:7D:55:D9:D3:B2:F8:49:68:0D:B1:0B:FA:F9:B8:5E:A8:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d16114d0-9aed-42a2-956d-441c06a82e37/46a5ff82-79c5-33ba-a128-6d63aa714dae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d16114d0-9aed-42a2-956d-441c06a82e37/d16114d0-9aed-42a2-956d-441c06a82e37.crl

            X509v3 Authority Key Identifier:
                keyid:C7:B1:27:7E:F0:5A:2B:8F:4B:57:A7:F2:D3:10:A3:D4:67:C3:39:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d16114d0-9aed-42a2-956d-441c06a82e37.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.245.240.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:b8:92:2d:fc:01:69:b2:dd:5c:60:98:9c:0b:86:80:b5:c4:
         a1:a8:f0:c9:fd:e2:c1:64:38:85:0f:52:07:60:ff:fb:d5:92:
         e2:38:79:30:64:25:dc:b4:14:2e:73:a4:9d:95:d8:e9:e9:84:
         62:05:6b:26:1c:80:f3:6c:49:90:87:3d:06:6f:e1:f4:42:48:
         14:d9:b8:26:6b:ee:7a:52:cf:db:54:86:59:90:94:d5:26:b9:
         ab:05:e9:37:cf:03:1e:67:f4:62:0d:5b:39:db:eb:4d:e8:11:
         74:24:98:72:26:24:28:c0:c7:e1:a4:71:a5:d7:a9:02:8b:e9:
         c8:4e:94:b6:58:5a:6c:26:d8:d0:81:0d:ae:0a:02:86:e7:58:
         e5:62:d2:55:ba:a6:42:e4:94:33:4b:f9:a4:67:fb:58:16:61:
         cc:89:ce:14:d5:41:06:60:e9:6a:c3:7f:d3:d9:b3:7e:1f:00:
         ff:d5:4e:f1:60:c3:b6:44:8a:1b:74:8b:8c:d9:20:06:0d:88:
         16:03:29:d5:02:23:a9:35:f1:d5:27:06:37:ed:34:16:3c:62:
         ef:e3:2d:0e:ce:e2:65:c8:49:f6:a6:66:80:13:6e:f1:3e:db:
         f8:06:ea:e4:81:bd:ad:86:d6:31:d5:1e:07:ba:8d:d3:65:71:
         15:0c:04:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----