Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed/fb19eba4-caef-3537-8740-c107b404cf02.roa
File:                     fb19eba4-caef-3537-8740-c107b404cf02.roa (raw, json)
Hash identifier:          pSCb+qCNE50GjBcySULzf+fRIw7w9xZfEav+k3MmzS0=
Subject key identifier:   EA:B9:94:B4:9F:B2:ED:6C:EF:19:68:6B:1C:16:C1:37:12:01:29:60
Certificate issuer:       /CN=4746a92d-5f69-4264-863f-81298a3d93ed
Certificate serial:       010D0C9F4328584A385087F88357A75DD3101180
Authority key identifier: 81:6F:5D:9C:52:44:D7:10:29:C6:8B:DE:2B:66:72:BA:A6:9A:1E:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed/fb19eba4-caef-3537-8740-c107b404cf02.roa
Signing time:             Tue 17 Jun 2025 09:08:01 +0000
ROA not before:           Tue 17 Jun 2025 09:08:01 +0000
ROA not after:            Mon 15 Sep 2025 09:08:01 +0000
asID:                     534340
IP address blocks:        172.93.0.0/23 maxlen: 24
                          2604:2280::/32 maxlen: 48
                          2605:6f80::/32 maxlen: 48
Validation:               Failed, certificate revoked on Tue 17 Jun 2025 10:44:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:38:50:87:f8:83:57:a7:5d:d3:10:11:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4746a92d-5f69-4264-863f-81298a3d93ed
        Validity
            Not Before: Jun 17 09:08:01 2025 GMT
            Not After : Sep 15 09:08:01 2025 GMT
        Subject: CN=fc000df4-0368-4c42-9e8b-111ea61f2e28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:20:6b:3b:43:28:96:a5:1d:a6:af:12:08:d0:
                    71:01:11:46:3f:ef:a9:19:09:b0:75:26:4a:e3:3a:
                    d3:20:5e:09:26:91:26:63:bb:0f:32:d5:7e:fc:1f:
                    76:d0:d4:f3:a9:b7:2c:c9:21:8d:2c:b5:96:a4:93:
                    e9:f8:74:1d:c8:bc:db:5b:42:8a:3a:f5:fe:ee:94:
                    18:ae:a7:bd:fa:bc:35:e2:ae:9c:08:f9:d2:f0:9c:
                    e2:77:e5:fb:ae:5d:fb:e0:f8:70:4f:89:7c:d2:ec:
                    0f:74:10:31:b2:7f:5e:4b:9c:1c:87:1a:76:f7:15:
                    74:8a:f8:6c:7f:4a:45:fc:13:04:35:3f:76:16:ee:
                    8a:c9:05:fa:30:a3:c6:cd:2a:1d:c7:74:cb:46:56:
                    28:c6:df:b0:cd:85:6a:59:81:9d:2c:47:f1:7e:7e:
                    67:2c:ca:d5:45:ed:37:2d:d9:a7:ed:81:b3:ac:38:
                    ad:77:9b:d9:78:a5:4f:f4:25:df:07:a8:23:5f:e3:
                    72:46:bc:23:29:7f:a2:4f:c4:e2:11:90:73:9b:b3:
                    0c:4f:45:90:e6:60:d6:25:d8:f8:79:4a:41:6d:61:
                    1e:9f:39:f5:b2:e4:4f:22:6a:ba:69:b4:ef:34:4f:
                    cb:76:37:6c:92:7a:c1:57:34:86:c2:0c:42:2a:5c:
                    23:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:B9:94:B4:9F:B2:ED:6C:EF:19:68:6B:1C:16:C1:37:12:01:29:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed/fb19eba4-caef-3537-8740-c107b404cf02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed/4746a92d-5f69-4264-863f-81298a3d93ed.crl

            X509v3 Authority Key Identifier:
                keyid:81:6F:5D:9C:52:44:D7:10:29:C6:8B:DE:2B:66:72:BA:A6:9A:1E:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4746a92d-5f69-4264-863f-81298a3d93ed.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.93.0.0/23
                IPv6:
                  2604:2280::/32
                  2605:6f80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:f2:a8:da:c4:c4:89:95:30:48:8b:c2:97:a2:b8:b0:c5:b9:
         b1:0c:75:71:95:b6:3a:94:3c:de:b0:fa:e8:ef:e3:70:b6:0d:
         a7:53:9f:fb:dc:76:6a:6d:8c:30:c4:89:d8:f8:b2:42:e6:f0:
         ed:7b:05:12:47:cd:6e:97:d9:1e:19:a4:11:ef:4f:97:7e:61:
         b6:df:bc:69:aa:58:5b:5b:f4:d5:4e:16:bf:d4:91:1c:a5:b8:
         ec:82:ae:51:89:32:9c:0f:79:95:60:be:9d:32:b9:c7:8a:bc:
         8a:f4:a1:a7:01:be:8d:9e:d4:1a:5a:c7:e5:f9:69:2f:df:15:
         f7:34:12:d3:d3:34:ae:f8:4d:1b:97:66:93:f6:3f:8f:68:3e:
         d9:9c:d8:60:b9:84:6b:97:3b:76:ba:eb:7c:b6:25:46:0c:79:
         a5:6d:bc:ea:ed:85:37:e1:a4:ff:e8:f6:6d:da:72:61:78:83:
         36:5a:72:ac:85:27:f9:bd:51:42:4b:37:ee:ef:3c:12:17:01:
         81:0c:cf:13:7c:2a:b6:38:9a:87:a7:5b:c5:0b:af:f8:d6:92:
         cb:2b:fa:1a:e2:bb:a6:0e:ed:cf:47:73:41:78:68:9a:00:f4:
         dd:9f:72:f7:67:68:97:7b:c1:a7:64:9a:ab:b6:37:64:b4:35:
         83:55:e0:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----