Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/22ffee48-ebff-42ef-a411-b2fd73c7ffcf/b691b787-cfa5-377f-9174-57b080336560.roa
File:                     b691b787-cfa5-377f-9174-57b080336560.roa (raw, json)
Hash identifier:          QYlxurYzJWE+W6KxQ0eIub1+9x+iTAAw8blprz17ryk=
Subject key identifier:   F4:8A:0F:AA:EF:EC:B8:F4:74:84:9B:04:23:5C:A0:02:13:97:5D:8E
Certificate issuer:       /CN=22ffee48-ebff-42ef-a411-b2fd73c7ffcf
Certificate serial:       010D0C9F43285848FC7129B09E5FC3D562FC7410
Authority key identifier: A2:D6:37:34:C5:BD:16:2B:C5:17:D1:AA:A4:DF:3B:66:C7:FA:43:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/22ffee48-ebff-42ef-a411-b2fd73c7ffcf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/22ffee48-ebff-42ef-a411-b2fd73c7ffcf/b691b787-cfa5-377f-9174-57b080336560.roa
Signing time:             Mon 24 Feb 2025 06:18:36 +0000
ROA not before:           Mon 24 Feb 2025 06:18:36 +0000
ROA not after:            Sun 25 May 2025 05:18:36 +0000
asID:                     3356
IP address blocks:        23.134.68.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Wed 26 Feb 2025 14:35:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:fc:71:29:b0:9e:5f:c3:d5:62:fc:74:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22ffee48-ebff-42ef-a411-b2fd73c7ffcf
        Validity
            Not Before: Feb 24 06:18:36 2025 GMT
            Not After : May 25 05:18:36 2025 GMT
        Subject: CN=21c84dbc-d58b-420b-84c0-35c762c11c1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b8:0c:48:69:ec:92:a0:05:99:66:67:fd:ef:
                    6c:ae:ec:98:7d:49:db:ee:db:8b:d9:bb:16:3f:54:
                    29:6c:70:8c:ea:0f:c5:10:6d:34:0e:3a:36:23:91:
                    08:b7:2b:a0:48:47:1d:87:a3:cf:09:30:b9:81:74:
                    58:26:af:c6:67:9f:26:4e:13:84:23:ee:0e:fa:f4:
                    07:0d:a7:a6:ea:e3:6b:ad:d9:e6:af:17:d1:bd:d7:
                    23:27:4c:3d:be:86:c5:0c:23:16:67:c9:fe:af:94:
                    82:4a:82:20:8a:44:34:95:4d:d2:80:9f:ef:38:4f:
                    3c:07:e5:b0:68:71:5b:38:90:02:c5:5b:4b:9d:52:
                    dc:cc:4c:8c:0f:74:f8:6b:42:4a:e7:a9:50:40:66:
                    52:d0:90:b1:8c:25:e2:0c:e4:81:9d:61:7b:5d:3f:
                    70:0a:6a:b9:21:8c:7c:87:7a:f1:03:78:b3:43:6a:
                    7c:91:65:59:45:ed:ed:ed:17:47:b4:49:d8:12:65:
                    54:10:67:a0:b3:e8:9b:a9:c4:87:c8:91:92:8a:bc:
                    d9:46:64:f3:43:64:ba:9b:6b:dc:f2:fb:f7:10:3a:
                    e7:56:9c:a5:d0:23:de:2e:e8:20:a1:ba:8e:e6:84:
                    72:c9:57:e7:fe:84:43:e1:89:fc:61:8e:a3:8e:c1:
                    f2:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:8A:0F:AA:EF:EC:B8:F4:74:84:9B:04:23:5C:A0:02:13:97:5D:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/22ffee48-ebff-42ef-a411-b2fd73c7ffcf/b691b787-cfa5-377f-9174-57b080336560.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/22ffee48-ebff-42ef-a411-b2fd73c7ffcf/22ffee48-ebff-42ef-a411-b2fd73c7ffcf.crl

            X509v3 Authority Key Identifier:
                keyid:A2:D6:37:34:C5:BD:16:2B:C5:17:D1:AA:A4:DF:3B:66:C7:FA:43:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/22ffee48-ebff-42ef-a411-b2fd73c7ffcf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.134.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:f6:d8:56:79:7d:5e:95:0f:77:83:36:3b:b8:0e:f6:e9:a4:
         49:1b:82:7d:c6:ac:0f:43:7f:ae:15:9e:46:39:85:d2:7e:96:
         e8:fc:69:0f:11:7f:8d:df:67:db:ac:af:bc:57:30:25:62:af:
         02:0b:8c:5c:da:bb:9d:e8:0d:ea:d6:de:8d:cf:e6:e1:0c:f6:
         9a:9c:f7:36:b6:50:15:69:1a:51:8f:31:9d:a7:cd:6f:0b:ce:
         58:a4:96:5e:97:38:ab:e2:32:24:9f:21:d7:b2:f2:b2:63:86:
         c0:9f:77:81:6d:8e:8e:aa:df:c9:41:1e:5b:25:86:db:d3:e7:
         6d:b4:a6:9b:67:0e:cb:61:c2:de:ef:98:33:eb:d8:bd:2d:3d:
         76:c5:d0:11:0b:6a:45:03:65:4b:6f:27:f4:4c:6a:42:77:55:
         16:66:99:13:94:42:f7:f9:47:12:0e:b0:08:0f:6d:8c:a4:03:
         06:2e:54:ed:3d:44:86:e0:8b:ed:fe:0d:bb:4e:21:24:96:13:
         42:63:ad:04:b7:82:e0:38:69:e1:57:1f:5c:cd:e7:41:34:c0:
         6c:74:df:48:14:4a:2e:de:91:53:10:70:00:6a:c4:b6:6e:a1:
         62:93:1b:8b:8d:32:34:91:3b:e1:98:fc:e7:9e:9a:5b:75:0a:
         9c:69:a7:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:24:42 2025 by rpki-client