Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/13427551-f543-33a6-a3ff-96a30ea612ba.roa
File:                     13427551-f543-33a6-a3ff-96a30ea612ba.roa (raw, json)
Hash identifier:          L3IpYmAoZU/QT6lB/R0zcXWeHJ2Pn3dDvbNht0ixebs=
Subject key identifier:   32:D2:26:9A:1A:68:92:DB:1D:EF:A5:37:10:46:0A:02:BC:C3:FD:28
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F43285849C8FFE6E447CF173E60AF19E0
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/13427551-f543-33a6-a3ff-96a30ea612ba.roa
Signing time:             Thu 08 May 2025 12:51:06 +0000
ROA not before:           Thu 08 May 2025 12:51:06 +0000
ROA not after:            Wed 06 Aug 2025 12:51:06 +0000
asID:                     215595
IP address blocks:        104.140.86.0/23 maxlen: 24
Validation:               Failed, certificate revoked on Thu 08 May 2025 17:39:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c8:ff:e6:e4:47:cf:17:3e:60:af:19:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: May  8 12:51:06 2025 GMT
            Not After : Aug  6 12:51:06 2025 GMT
        Subject: CN=0c7c8f2f-0cd6-485c-a4e0-dc468380cd59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ad:bb:36:a5:76:fe:a3:72:83:1c:14:b5:9c:
                    39:cf:08:98:3c:63:23:b8:77:83:ac:79:89:de:9c:
                    48:69:bb:9f:67:65:56:14:12:54:fe:d3:82:09:90:
                    c4:40:f1:26:55:d4:25:ea:98:1e:e2:39:d7:6e:69:
                    e5:7d:c2:41:20:18:c7:a6:8b:60:54:7a:cb:1a:82:
                    68:e6:96:5f:64:41:28:4f:52:65:fd:5a:1d:2f:fb:
                    d1:0a:4a:7a:e9:60:40:ab:e5:ed:64:16:1f:41:dd:
                    dc:6e:a0:b5:bd:b1:e2:6d:bf:65:07:02:60:f5:c8:
                    87:26:8a:ee:3a:93:c2:de:d0:5f:ab:58:ac:8f:25:
                    b1:07:e6:59:fc:95:fb:30:3f:a4:34:8e:53:ea:3c:
                    38:15:58:2c:c5:32:56:63:70:db:93:58:99:2d:38:
                    fc:69:16:10:3d:55:1b:24:b8:20:e9:7c:62:ef:f4:
                    18:36:2e:4b:75:25:23:e6:45:34:d2:7e:38:02:9d:
                    6e:08:e8:7e:90:7c:39:f3:51:d4:8b:51:de:41:96:
                    15:dd:03:89:64:8b:13:03:a4:72:0f:87:8e:00:52:
                    82:3f:26:bc:f0:c6:01:f2:a3:c6:77:33:aa:56:71:
                    f9:94:9a:84:ba:31:b1:5c:88:9d:34:b8:63:d8:08:
                    e4:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:D2:26:9A:1A:68:92:DB:1D:EF:A5:37:10:46:0A:02:BC:C3:FD:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/13427551-f543-33a6-a3ff-96a30ea612ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.140.86.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:e1:ac:ed:52:fa:92:ae:dc:30:72:ac:08:88:8f:94:73:42:
         54:c1:4e:79:23:fd:2d:be:0d:18:d2:52:4e:4a:63:bb:c3:38:
         ba:82:2c:9c:42:d6:80:a1:c1:a4:f3:7b:e4:2f:c6:aa:54:9e:
         a2:b6:c9:a6:5a:bc:25:29:87:2d:ae:2c:7f:06:b1:65:87:49:
         20:46:73:7c:87:bd:67:ba:e9:80:df:66:be:20:b1:2b:5a:7f:
         3d:3f:1d:df:13:27:a9:6b:f6:4e:e9:dc:c0:f6:45:e1:71:97:
         e0:73:c5:8a:f9:30:40:ba:cc:68:d3:d2:64:73:8f:f5:1a:c6:
         c7:da:6a:ca:69:2d:42:eb:35:86:00:03:fa:3e:e6:05:75:5d:
         46:d8:4a:72:d4:4d:9d:91:f2:02:bb:9a:71:86:15:59:63:08:
         dd:1e:8c:ff:b2:63:b4:88:e9:6f:25:0c:2e:5c:33:17:de:12:
         36:a0:00:78:49:8f:c4:08:34:85:e6:c3:62:44:75:a7:8a:55:
         e2:95:e6:ef:03:15:28:c3:a4:85:4b:79:7a:6e:2f:a1:88:dc:
         a6:98:b0:b7:90:ce:d5:a3:00:dd:56:88:14:4f:25:5b:d5:d6:
         d4:ec:e3:3f:66:30:99:0e:ab:3a:dc:ec:5e:bc:be:d3:c8:20:
         a9:4a:6f:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 06:57:57 2025 by rpki-client