Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/7022e18d-fa1c-38f5-b4c1-25689130aeb7.roa
File:                     7022e18d-fa1c-38f5-b4c1-25689130aeb7.roa (raw, json)
Hash identifier:          d4IDzbGB0WSybWujY9if02PzhrvWAXOhZGMiG9tJFG0=
Subject key identifier:   88:3D:57:F8:29:CB:E0:36:4B:4C:04:0E:E8:79:13:84:F7:31:48:43
Certificate issuer:       /CN=4f9aabcb-26a8-4c57-ae55-7933ba2b51b6
Certificate serial:       010D0C9F43285849EB6BB0B45BEDA251F9D57F80
Authority key identifier: 7C:70:D2:8C:38:34:29:F5:7A:7B:3B:D8:48:17:5E:03:4E:1D:C1:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/7022e18d-fa1c-38f5-b4c1-25689130aeb7.roa
Signing time:             Tue 20 May 2025 20:45:46 +0000
ROA not before:           Tue 20 May 2025 20:45:46 +0000
ROA not after:            Mon 18 Aug 2025 20:45:46 +0000
asID:                     10794
IP address blocks:        199.201.51.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Tue 17 Jun 2025 18:23:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:eb:6b:b0:b4:5b:ed:a2:51:f9:d5:7f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f9aabcb-26a8-4c57-ae55-7933ba2b51b6
        Validity
            Not Before: May 20 20:45:46 2025 GMT
            Not After : Aug 18 20:45:46 2025 GMT
        Subject: CN=605d97b6-5683-4212-9fed-d5826d0f4347
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d8:10:8b:d8:24:3b:2d:97:a3:89:7a:88:27:
                    b2:06:af:91:cc:9d:e0:b8:7b:42:f1:78:3f:32:30:
                    f7:43:80:95:32:67:84:3e:86:66:dd:9f:f6:22:b3:
                    b9:4e:f7:60:49:44:89:46:e2:79:2f:34:09:69:66:
                    c9:86:90:d5:cb:4e:58:e0:23:c9:e4:68:cf:56:2c:
                    52:1f:ae:3d:8d:84:c8:6e:ed:65:c4:5d:7a:1c:d5:
                    c6:d6:d3:01:6d:d1:85:93:c8:54:3f:9b:4f:ac:86:
                    07:9c:94:df:85:5a:8f:f0:bb:cd:99:9e:91:44:1b:
                    63:93:69:71:bc:8c:ad:e1:6c:2f:65:22:e6:a0:f5:
                    18:a9:0c:d8:59:76:c6:84:b2:3b:00:cb:9c:52:67:
                    88:51:b8:12:6e:bd:6a:4c:df:97:3f:17:4b:0c:0d:
                    24:ba:5b:51:00:47:c4:c2:f0:d6:e9:f9:97:6c:d5:
                    5d:ef:4f:ed:4f:a9:07:57:75:a8:28:3f:94:35:cc:
                    99:42:0a:f0:79:49:05:7d:ca:15:9b:f3:3b:ed:d3:
                    73:c9:f5:67:96:fa:c4:da:a2:42:56:4a:a8:96:9e:
                    7d:9d:62:c8:a6:de:0b:fc:79:28:d6:fb:b4:82:a8:
                    00:41:45:45:b8:9a:6f:50:b5:96:02:82:d9:66:c4:
                    6d:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:3D:57:F8:29:CB:E0:36:4B:4C:04:0E:E8:79:13:84:F7:31:48:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/7022e18d-fa1c-38f5-b4c1-25689130aeb7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.crl

            X509v3 Authority Key Identifier:
                keyid:7C:70:D2:8C:38:34:29:F5:7A:7B:3B:D8:48:17:5E:03:4E:1D:C1:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4f9aabcb-26a8-4c57-ae55-7933ba2b51b6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.201.51.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:63:2c:aa:c8:6d:97:28:a3:10:d3:e2:f9:3c:7b:2e:2d:75:
         26:04:a8:1d:b1:cf:b3:7d:91:cc:df:97:5f:da:3e:8d:f4:d7:
         d5:5f:40:91:b2:7e:25:1d:52:eb:c0:3b:84:ce:31:7b:72:b6:
         e5:83:2b:b1:3d:8f:c7:86:26:c3:43:56:c6:a1:86:ec:35:a5:
         c5:d6:32:7c:3c:65:d0:fc:ac:08:19:02:6a:e5:37:c5:04:1f:
         68:3a:5c:80:42:79:2f:39:2c:60:81:0f:11:a1:be:d0:ff:a8:
         58:8b:7f:9d:1f:02:e3:8b:90:56:d4:40:d0:1c:45:60:27:dc:
         bf:ee:41:a0:a5:e0:67:e6:22:73:6b:39:78:b5:0c:fa:d2:68:
         6d:28:55:cb:35:1f:b1:fd:74:83:81:34:d7:7a:f9:f5:2f:b3:
         1b:95:98:96:6a:50:39:ec:a3:06:93:70:62:57:29:44:55:e5:
         87:cd:b0:1b:41:22:94:23:c2:34:30:c4:d4:6c:b4:4b:80:79:
         34:f0:0f:13:2d:02:a7:aa:b9:3c:04:cf:10:86:19:40:bc:9b:
         f5:63:8b:9a:8b:00:2d:0f:7c:2f:73:99:66:5e:00:97:76:01:
         4b:34:37:72:aa:96:49:a7:48:d1:21:6e:46:ed:ad:71:b1:97:
         d9:17:1d:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 15:43:07 2025 by rpki-client