Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4c104109-86d2-350c-90eb-4fb5938a534a.roa
File:                     4c104109-86d2-350c-90eb-4fb5938a534a.roa (raw, json)
Hash identifier:          osEwBk6rxTC4wAcQ3bnjez579FsePhYwK45ZDMIuiE8=
Subject key identifier:   95:4A:1A:35:0C:43:A2:DF:13:B8:A4:36:F8:2A:0D:22:9F:18:5D:35
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584A5F6CC7F22AEE931777226D00
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4c104109-86d2-350c-90eb-4fb5938a534a.roa
Signing time:             Tue 01 Jul 2025 10:01:44 +0000
ROA not before:           Tue 01 Jul 2025 10:01:44 +0000
ROA not after:            Mon 29 Sep 2025 10:01:44 +0000
asID:                     32043
IP address blocks:        66.227.124.0/22 maxlen: 24
Validation:               Failed, certificate revoked on Wed 02 Jul 2025 04:46:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5f:6c:c7:f2:2a:ee:93:17:77:22:6d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jul  1 10:01:44 2025 GMT
            Not After : Sep 29 10:01:44 2025 GMT
        Subject: CN=fda78a78-5035-4a3c-a516-45aebdb88514
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:2d:84:7e:72:0a:f2:db:f8:5b:3e:68:08:1c:
                    bb:e5:36:38:22:3d:76:79:4d:b4:91:f1:f6:55:e6:
                    61:c4:c0:06:d0:71:b9:78:1b:17:26:3e:c5:41:d6:
                    8f:af:4a:26:a0:44:14:03:ca:40:74:84:36:dd:ac:
                    bd:a9:53:2f:d1:5b:c8:aa:e9:07:d4:5f:8c:dd:3c:
                    5b:61:d1:37:8d:89:e2:1e:48:2d:bf:ee:5e:41:50:
                    3d:8c:9a:3f:f6:0d:7d:bb:8a:a2:4b:e7:5c:1c:f0:
                    43:c1:3a:57:de:a2:58:09:20:0e:ae:9d:f7:96:78:
                    be:af:b0:ef:99:0f:8f:b3:6f:5e:5d:93:93:2a:5f:
                    7f:59:7c:df:d6:5b:b0:fe:2c:15:5a:05:88:a7:3a:
                    56:c0:eb:62:06:04:57:09:6f:6c:4e:d0:11:48:d8:
                    fa:33:92:3a:d1:fa:34:bc:8e:2d:f9:92:db:f0:6c:
                    e5:8d:ff:1c:21:66:04:3b:0c:80:c5:a9:5e:da:c7:
                    a6:11:4f:6f:6d:25:75:d7:5c:09:a5:7f:e4:76:f5:
                    61:88:3d:6b:82:6f:a6:ad:df:c4:ba:e8:f1:52:7a:
                    25:b0:81:45:bd:cf:9b:d4:b8:fa:51:0d:60:61:4e:
                    10:4e:0b:b0:d9:11:a9:55:ca:19:80:54:60:38:c7:
                    1b:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:4A:1A:35:0C:43:A2:DF:13:B8:A4:36:F8:2A:0D:22:9F:18:5D:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4c104109-86d2-350c-90eb-4fb5938a534a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.227.124.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:5a:99:e9:3a:31:12:fb:21:a9:bf:58:f0:38:f4:78:6b:cb:
         a7:42:1c:68:55:54:83:22:30:cc:36:e5:be:85:5e:aa:e5:1a:
         1a:b9:f4:d8:38:87:14:77:02:ed:8c:7d:ec:83:db:0d:33:28:
         11:d1:a6:e6:8f:64:80:ba:5b:ed:74:9b:b1:4a:ae:01:2b:ea:
         b0:ee:68:19:1c:bd:d6:6b:62:91:d5:0e:e2:3e:ad:80:03:39:
         a9:4c:78:05:47:3f:a0:51:da:89:4e:02:dc:2e:ed:63:71:23:
         d1:84:e1:91:cc:0d:d9:83:74:a8:67:ab:2e:e4:cf:2e:e8:28:
         3b:9a:b3:87:2e:9d:51:f9:e6:53:89:c4:20:94:5e:2d:5d:78:
         54:98:bd:01:2f:f3:2a:10:ef:59:d7:b4:03:91:00:61:88:02:
         0f:03:b3:33:82:a2:32:68:63:cc:c3:da:a0:ec:72:6d:16:09:
         11:df:f3:bc:fc:dd:20:fa:ff:b3:89:fb:81:eb:8d:36:d4:8b:
         58:b3:13:3d:c7:e0:0c:4d:64:76:7f:2a:bf:8f:8d:26:87:45:
         6b:71:78:69:f9:dc:c0:2b:a7:d9:f7:3a:e4:e2:e8:a0:da:e8:
         b8:d7:80:50:7e:09:48:b8:28:22:2f:a1:a5:6b:58:12:8b:e0:
         c6:60:41:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 8 23:00:54 2025 by rpki-client