Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8f557cf8-de47-357e-8450-3fba934ac41e.roa
File:                     8f557cf8-de47-357e-8450-3fba934ac41e.roa (raw, json)
Hash identifier:          +C+4hC/oDpA2x5AfhLQm/I4E9BlwEe/iim96kPu6VME=
Subject key identifier:   17:AC:C5:07:B1:AA:0E:19:86:98:7B:59:16:99:BA:3E:12:74:64:44
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584906A7DA3FD1B2409F43EC5800
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8f557cf8-de47-357e-8450-3fba934ac41e.roa
Signing time:             Thu 27 Feb 2025 22:06:53 +0000
ROA not before:           Thu 27 Feb 2025 22:06:53 +0000
ROA not after:            Wed 28 May 2025 21:06:53 +0000
asID:                     401152
IP address blocks:        96.126.172.0/22 maxlen: 24
Validation:               Failed, certificate revoked on Tue 04 Mar 2025 18:10:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:06:a7:da:3f:d1:b2:40:9f:43:ec:58:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Feb 27 22:06:53 2025 GMT
            Not After : May 28 21:06:53 2025 GMT
        Subject: CN=f61d21f4-12ea-483d-b65d-c76946773a95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:08:da:8d:35:52:d9:2b:0e:d3:69:d1:c1:c2:
                    8a:fc:b3:e5:fa:00:d5:10:09:28:f6:3a:3d:e4:85:
                    d3:2e:49:b4:24:cb:45:7b:c7:23:e9:67:10:00:46:
                    f3:52:4e:f2:eb:9a:35:54:c7:41:0d:2b:7c:7e:b1:
                    a3:17:de:6a:f6:43:24:f8:f3:6f:8c:3a:3f:17:d6:
                    58:2a:a3:63:22:55:fd:a8:08:b4:f9:2a:d7:08:30:
                    9a:59:23:5d:42:b0:a7:e1:c6:fa:25:25:7a:b8:91:
                    b8:d5:47:09:de:70:db:58:66:33:00:61:08:37:67:
                    36:95:15:c6:3e:3c:c5:a8:6d:36:17:7c:f6:a2:dc:
                    c7:0d:e8:66:7f:a4:45:2c:00:75:03:87:bd:2c:b3:
                    06:81:6b:f5:ec:76:01:d9:45:84:7d:1d:4c:5e:25:
                    66:56:00:af:21:cb:5a:d8:83:16:06:a3:11:35:49:
                    1d:4e:b1:5b:3e:8c:ba:0e:92:eb:74:2e:20:bf:a9:
                    8d:f9:05:2d:ce:40:10:b6:0b:c8:26:0c:7f:ba:b9:
                    9b:d1:2c:a6:d3:f3:7c:d8:da:96:91:74:2c:29:fb:
                    bc:c4:ad:66:e2:b1:36:71:93:16:5b:84:6c:f6:3b:
                    57:c3:1f:9f:2e:7c:aa:87:4d:ef:3c:89:c2:36:00:
                    6d:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:AC:C5:07:B1:AA:0E:19:86:98:7B:59:16:99:BA:3E:12:74:64:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8f557cf8-de47-357e-8450-3fba934ac41e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.126.172.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:2d:62:63:3e:f8:48:a2:82:d9:a2:42:8d:3f:b9:9a:6e:cb:
         3c:73:00:92:19:88:fd:1e:24:22:77:16:09:71:3e:ec:c1:9f:
         6a:a2:83:60:2d:b7:4d:64:57:58:af:ec:e4:8e:40:6a:23:e1:
         d7:83:17:57:eb:9b:5f:47:76:13:56:66:72:a8:76:e9:63:64:
         16:b1:0e:be:2c:61:93:39:91:c2:65:00:2f:00:7b:a8:4b:e5:
         c7:ee:25:36:39:af:8b:80:38:c8:d7:f1:c3:30:85:e7:c6:a7:
         c7:8c:8f:2f:97:44:20:d9:61:95:ef:75:17:ed:8b:8f:dd:86:
         25:2e:4f:36:a7:d5:2d:53:1d:a7:2d:19:26:f4:1e:b2:8e:80:
         ac:ac:74:ac:d5:be:82:c1:f0:c5:20:87:c3:b1:e9:a1:b9:ed:
         8c:e1:96:0f:ea:5f:15:fc:41:d6:4d:77:c2:2e:f7:66:3e:83:
         a6:66:b5:8b:c8:82:46:1f:8d:ae:a6:bc:49:04:b4:89:61:40:
         e9:5c:f1:8a:fc:67:86:88:1d:75:e9:b3:e6:86:eb:8f:21:67:
         8d:e0:81:b3:fe:f2:b8:3d:74:2c:ef:dd:7d:88:23:e3:5d:d2:
         8c:bb:0b:1a:b9:49:cd:4f:e1:e4:ed:30:00:50:0f:79:66:5b:
         59:39:c3:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 16:49:11 2025 by rpki-client