Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3130352e302f32342d3234203d3e20383334.roa
File:                     3231362e3234372e3130352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          efaC7OVYPrfOuGoDfeeyB2G22xCnBf/uyweEbSeCpQY=
Subject key identifier:   2F:EC:C8:47:75:97:47:EA:7F:55:4B:97:C9:D7:55:E9:B2:F3:B3:A5
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       6671F2F1F0A47EF7FF8F9D528C693518DD55012E
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3130352e302f32342d3234203d3e20383334.roa
Signing time:             Thu 26 Jun 2025 00:01:01 +0000
ROA not before:           Wed 25 Jun 2025 23:56:01 +0000
ROA not after:            Thu 25 Jun 2026 00:01:01 +0000
asID:                     834
IP address blocks:        216.247.105.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Sat 28 Jun 2025 16:49:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:71:f2:f1:f0:a4:7e:f7:ff:8f:9d:52:8c:69:35:18:dd:55:01:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: Jun 25 23:56:01 2025 GMT
            Not After : Jun 25 00:01:01 2026 GMT
        Subject: CN=2FECC847759747EA7F554B97C9D755E9B2F3B3A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:83:ee:09:6b:03:e8:98:2b:bc:de:21:cb:e5:
                    f2:fb:53:12:f2:93:5b:4d:a4:ba:65:f6:68:c5:37:
                    91:7c:ad:94:95:60:93:49:47:a2:a3:b0:7c:22:54:
                    b0:2f:6f:13:ea:b5:89:ed:c8:b5:3f:10:9c:ff:77:
                    56:4e:9a:00:58:e0:c9:b6:0b:36:ef:81:67:41:f6:
                    72:3a:72:ff:18:da:91:1d:93:b6:2d:b2:c2:f2:50:
                    13:00:11:b0:09:bd:d3:17:6d:fa:7c:fd:38:e3:3e:
                    2f:8e:ba:49:38:55:9f:93:5e:cd:12:b6:1e:85:3a:
                    dc:a1:ca:eb:e0:07:0c:d4:a3:00:1b:a6:57:fc:1f:
                    08:33:65:69:93:a3:69:9d:11:1f:34:9d:12:80:2a:
                    e1:91:90:1f:73:21:86:88:ac:a0:74:70:2d:70:1e:
                    54:a8:2a:d9:e6:dd:00:dd:24:bb:d7:64:91:c5:da:
                    9a:8e:7b:9d:03:10:d8:a3:46:00:82:4f:8b:ef:3d:
                    41:ae:b3:39:21:c3:79:ff:72:f4:2b:16:62:eb:36:
                    16:fd:a2:ab:da:aa:56:33:d0:4e:49:2b:02:fb:89:
                    08:42:15:5a:81:4b:a8:fe:9d:d8:a6:99:0d:96:d7:
                    42:4b:51:51:ec:c3:75:38:3f:ea:e6:51:8e:0a:3a:
                    3a:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:EC:C8:47:75:97:47:EA:7F:55:4B:97:C9:D7:55:E9:B2:F3:B3:A5
            X509v3 Authority Key Identifier:
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3130352e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.247.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:56:9f:93:7a:ca:2c:88:81:78:53:c8:e1:98:00:95:c9:f7:
         19:a3:69:d0:7e:d8:21:af:2f:5e:df:ed:26:b5:bf:e9:12:23:
         1c:a7:b8:de:10:18:c4:b8:4e:9d:b9:27:e4:aa:32:6c:a8:83:
         c9:c1:65:22:bb:44:16:16:94:79:3a:09:76:cc:28:54:08:36:
         20:8d:53:a4:6e:0f:5f:7d:75:26:61:53:fc:06:b5:b0:62:45:
         ee:1a:08:37:09:99:f0:2c:b8:1a:8d:98:2e:f5:fd:c6:1e:64:
         6e:aa:f6:07:93:67:ce:af:ba:72:b9:d2:0e:c1:ff:39:dd:e3:
         0a:8e:43:12:bd:75:52:5b:41:36:cd:06:b7:65:cb:f3:85:56:
         d3:56:5c:9b:02:3e:54:a3:44:d5:48:ce:9d:fc:d0:2e:73:06:
         28:11:03:5e:0c:5a:75:95:54:f1:f8:29:f9:68:36:f9:c5:73:
         70:68:73:0c:e7:00:32:45:b1:31:da:ae:3c:a4:d4:ba:6f:e3:
         bb:c3:3c:97:71:6a:71:2f:06:35:ea:ba:6a:a2:0f:ee:05:99:
         68:aa:7a:1d:20:cf:3b:50:74:5d:80:e1:67:25:6f:39:b3:1f:
         cb:e7:e8:9d:0c:04:a6:ea:7f:03:42:db:fe:d1:63:df:60:10:
         fa:e5:6e:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 06:12:00 2025 by rpki-client