Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/5a46013b-1722-3053-b43a-aff2eecc86cb.roa
File:                     5a46013b-1722-3053-b43a-aff2eecc86cb.roa (raw, json)
Hash identifier:          TOzCSRrdXPqjM+VDvYndlGkZSOHI1G7HUSNVMzySWPE=
Subject key identifier:   2D:0A:ED:E5:A4:0C:86:C6:40:9A:B8:89:49:CE:2B:18:40:20:D5:10
Certificate issuer:       /CN=d45613e1-c70f-4ce1-996e-e01d89469087
Certificate serial:       010D0C9F43285848FDA591E2086A48B4CE3FCF80
Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/5a46013b-1722-3053-b43a-aff2eecc86cb.roa
Signing time:             Mon 24 Feb 2025 16:40:00 +0000
ROA not before:           Mon 24 Feb 2025 16:40:00 +0000
ROA not after:            Sun 25 May 2025 15:40:00 +0000
asID:                     138244
IP address blocks:        141.140.13.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Mon 24 Mar 2025 00:50:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:fd:a5:91:e2:08:6a:48:b4:ce:3f:cf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087
        Validity
            Not Before: Feb 24 16:40:00 2025 GMT
            Not After : May 25 15:40:00 2025 GMT
        Subject: CN=4eca7169-8e8a-4c0e-a8f5-8aa9d188da30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:7d:eb:8b:b1:f9:04:ce:1e:f6:08:a3:64:10:
                    d2:1e:e9:3b:d2:da:c0:4a:61:87:9a:1e:9e:7d:77:
                    2c:e5:cf:53:bb:7c:73:91:3c:cd:5d:07:8e:45:1a:
                    c1:5b:3b:a8:06:4c:a3:11:38:14:1f:b6:83:d2:b9:
                    0f:ce:53:79:d9:06:75:7d:16:5a:cb:1c:61:7f:4c:
                    8b:90:6a:5e:f3:e2:16:93:eb:58:a6:74:56:83:e5:
                    26:a0:22:7c:91:95:19:0e:1f:6c:aa:86:e0:78:77:
                    2f:f8:b3:52:1b:c9:b5:c1:13:17:29:b7:47:3a:dc:
                    6a:b4:31:16:9b:97:a6:9c:d0:62:9f:8d:c3:ee:88:
                    d5:28:38:80:ac:51:6c:02:3a:ef:46:7e:39:84:6e:
                    4c:66:2e:df:52:37:bb:77:92:0f:a2:00:10:45:5d:
                    fe:fb:61:a6:b3:0c:9f:c7:85:be:d3:39:95:47:a5:
                    84:72:df:27:10:fe:9c:3d:74:5b:22:c8:d8:71:29:
                    3d:70:20:06:a5:95:a0:6f:dc:61:66:fa:87:db:75:
                    b2:d7:b7:6f:fc:e9:ea:fd:cd:2c:f9:cd:e2:30:ef:
                    8e:5a:1a:f8:c5:b7:2c:0e:c0:eb:98:a7:01:23:e7:
                    45:0b:c8:27:e5:ea:82:98:94:e6:6b:1b:de:76:62:
                    05:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:0A:ED:E5:A4:0C:86:C6:40:9A:B8:89:49:CE:2B:18:40:20:D5:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/5a46013b-1722-3053-b43a-aff2eecc86cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl

            X509v3 Authority Key Identifier:
                keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.140.13.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:c0:0c:00:55:b9:cc:41:19:43:90:be:3e:42:e4:12:b4:98:
         e3:6d:6b:90:66:a5:1d:5a:4a:12:17:c4:dd:49:7d:36:3e:77:
         a6:1a:2c:70:df:d1:ab:14:f4:cb:66:4b:ce:89:d1:aa:62:45:
         73:c7:34:c6:d7:a7:a0:fc:eb:ce:27:e9:39:3c:bb:43:19:f5:
         37:b7:78:46:c8:d9:19:c7:26:fe:d6:03:ce:57:d9:f8:05:56:
         46:61:d8:01:59:5e:bf:18:b6:45:08:d1:cb:bc:9d:d6:d8:2e:
         52:2b:7a:4c:b0:8e:62:b6:1c:9a:1b:c4:56:3c:0c:bf:6e:33:
         31:97:ab:af:5d:44:17:08:26:1f:c0:6a:ff:98:3b:9d:ee:65:
         90:c7:62:3a:dd:90:6c:e0:07:74:d3:15:2e:77:ae:8a:63:a6:
         58:4c:cc:c6:9d:45:75:e4:18:ca:ca:e5:31:b1:00:1d:3c:8b:
         e1:90:1a:0f:97:7d:0b:2c:33:d0:45:35:93:69:8b:d1:49:2b:
         cd:70:3c:a1:df:45:7b:19:0c:a8:02:18:dd:24:91:f6:8b:62:
         e1:c5:dc:12:bf:1d:0c:96:68:77:7e:9a:6e:3e:91:98:63:2b:
         51:43:95:20:68:83:fe:e3:02:d0:ee:14:36:24:92:72:2e:7c:
         16:26:1d:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 11:52:27 2025 by rpki-client