Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ddd170e7-ac07-3f4f-936b-31242a9df823.roa
File:                     ddd170e7-ac07-3f4f-936b-31242a9df823.roa (raw, json)
Hash identifier:          ZH7fLOhLl7ZWO7NEgW+VXQoncnMWoJ2vaLd4+z7YEhg=
Subject key identifier:   8D:21:2D:36:3C:E0:55:76:4E:3E:3B:41:A3:2F:A0:DD:7F:75:45:13
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858419A438A1145E6CB176E8B3680
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ddd170e7-ac07-3f4f-936b-31242a9df823.roa
Signing time:             Tue 05 May 2020 17:33:37 +0000
ROA not before:           Tue 05 May 2020 17:33:37 +0000
ROA not after:            Mon 21 Jul 2025 04:00:00 +0000
asID:                     11798
IP address blocks:        166.1.139.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Wed 19 Apr 2023 17:20:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:9a:43:8a:11:45:e6:cb:17:6e:8b:36:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  5 17:33:37 2020 GMT
            Not After : Jul 21 04:00:00 2025 GMT
        Subject: CN=c09f043b-42b8-431b-94f0-e2111eb2accc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c2:45:ba:c6:5d:08:b9:dc:bf:af:ce:97:68:
                    f2:b8:51:8c:04:94:17:a5:74:d6:4c:3b:4d:38:95:
                    5e:24:b0:be:ec:6b:43:4b:e0:d8:8a:65:50:ec:84:
                    0a:26:46:73:88:4f:72:b2:38:aa:f5:1a:a5:3b:ed:
                    c2:6d:2e:49:8a:59:10:45:a6:82:b2:00:9f:be:f2:
                    23:0d:8e:ce:c7:5e:1e:e9:35:b0:ae:50:6d:d5:31:
                    22:ee:37:e5:14:33:33:ac:06:ac:d0:fe:31:33:9c:
                    ef:7c:d7:e9:e1:10:0e:91:44:64:4a:21:9d:35:ce:
                    a7:6e:a1:9e:1b:e7:32:dd:40:27:ad:74:80:89:55:
                    17:74:dd:d0:7e:21:35:fe:dd:d6:e0:e4:0d:71:61:
                    3c:c0:c5:04:55:2d:0c:11:fe:a0:39:38:49:bf:10:
                    f0:0b:b6:3e:f0:29:34:82:79:be:2c:9f:b2:3e:40:
                    86:a9:e2:5e:93:f3:19:f0:27:9d:6c:6b:ab:3f:dd:
                    74:1e:b3:6c:97:b5:15:4c:59:7e:f6:a5:64:c4:77:
                    08:a7:bd:0a:99:8a:9a:e2:03:30:92:aa:ba:a2:fd:
                    36:3a:d7:63:50:7b:dc:4f:1d:e2:7e:8f:be:f0:fe:
                    5c:4d:0f:2c:4a:70:a1:ab:64:eb:a9:37:c1:69:16:
                    19:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:21:2D:36:3C:E0:55:76:4E:3E:3B:41:A3:2F:A0:DD:7F:75:45:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ddd170e7-ac07-3f4f-936b-31242a9df823.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.1.139.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:0f:0e:a9:42:03:7e:b6:0d:98:db:4b:17:7d:09:07:f5:92:
         83:8e:14:e3:96:b0:5c:b7:eb:0d:e3:45:ef:d6:49:98:69:a7:
         e1:09:58:85:f6:53:2a:18:81:d9:41:59:c2:a0:ce:06:38:a4:
         cb:bb:4d:98:e6:e4:08:5f:3f:94:50:83:cf:5c:2d:8c:a8:27:
         77:94:d7:a4:8b:b4:e0:24:c0:9a:31:3b:64:17:0a:b0:61:3d:
         73:b2:06:7c:63:e9:40:45:00:7d:f9:b0:0c:e3:56:b7:0c:43:
         89:05:6a:67:d5:e7:0a:2a:1c:6b:e2:23:32:64:21:fb:da:ee:
         ea:68:87:c6:e4:fc:d6:22:4d:3c:c2:dc:a4:6c:1b:d5:89:d7:
         e9:ac:40:26:37:91:1f:a3:df:4c:6d:67:e1:1f:4b:17:73:cd:
         b3:6b:06:c9:cf:5a:ae:58:2a:60:a4:81:b2:10:6c:b1:4f:e7:
         7c:f0:0b:2d:a3:28:5d:be:1e:05:1d:0b:c4:58:42:bd:77:21:
         23:91:ae:b1:ad:09:c4:f4:93:07:ad:06:94:db:0e:ed:a0:f5:
         5f:a2:53:49:86:4a:82:46:53:d4:ff:37:d3:6e:fc:e4:4b:75:
         87:37:c2:d4:8e:b8:d3:1f:fe:cf:3c:c6:99:e3:2d:18:d6:90:
         21:a5:22:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:04:35 2025 by rpki-client