Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebf21e98-3294-441a-9899-9d935ac6c3d1/4b7e712f-9329-3708-ab17-5af68b324e55.roa
File:                     4b7e712f-9329-3708-ab17-5af68b324e55.roa (raw, json)
Hash identifier:          y/RvICxxtzKuw+3CD+4NzoEF44kD2jNdbxypzVEFtlY=
Subject key identifier:   89:7D:7F:00:4F:49:4F:20:69:3F:B3:2C:06:5C:A8:87:16:D8:0F:62
Certificate issuer:       /CN=ebf21e98-3294-441a-9899-9d935ac6c3d1
Certificate serial:       010D0C9F43285849068445B0643B425CC7227980
Authority key identifier: 85:73:B7:3D:7F:5B:A4:F5:C2:85:89:F4:BF:2F:E6:95:9D:D3:A4:0A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebf21e98-3294-441a-9899-9d935ac6c3d1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebf21e98-3294-441a-9899-9d935ac6c3d1/4b7e712f-9329-3708-ab17-5af68b324e55.roa
Signing time:             Thu 27 Feb 2025 20:55:11 +0000
ROA not before:           Thu 27 Feb 2025 20:55:11 +0000
ROA not after:            Wed 28 May 2025 19:55:11 +0000
asID:                     19908
IP address blocks:        205.237.72.0/22 maxlen: 22
                          205.237.76.0/23 maxlen: 23
Validation:               Failed, certificate revoked on Fri 28 Feb 2025 15:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:06:84:45:b0:64:3b:42:5c:c7:22:79:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebf21e98-3294-441a-9899-9d935ac6c3d1
        Validity
            Not Before: Feb 27 20:55:11 2025 GMT
            Not After : May 28 19:55:11 2025 GMT
        Subject: CN=09cf4d75-9537-411b-8b15-79bf71717cd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:a6:24:33:af:7f:76:74:2a:ef:3e:01:fd:99:
                    a1:86:7b:01:76:a5:8f:81:84:db:07:50:b0:fa:6a:
                    98:85:03:01:f1:eb:2b:41:fd:0b:ff:a8:33:87:38:
                    c4:06:5a:4d:01:5d:d0:98:df:d3:e5:52:04:eb:09:
                    3d:07:a8:13:5d:87:78:d2:d5:13:5b:0f:35:93:28:
                    7a:9e:b8:e5:ff:79:e9:19:f5:8d:bf:bb:fc:7c:03:
                    8f:10:ea:25:7b:37:7e:bf:cd:f1:de:83:a6:a9:03:
                    44:f5:e6:d2:6e:6d:8b:d1:90:c3:fd:f1:9c:c0:7e:
                    56:2c:34:13:f7:08:ce:35:8e:01:6e:5f:b4:5b:93:
                    83:a4:d0:3e:72:80:b0:91:fc:e0:bb:dd:55:71:24:
                    e1:9a:7b:ea:5d:d0:a0:dd:ce:50:bc:04:96:e4:04:
                    41:ff:55:60:45:2a:8c:3e:bb:dc:a7:10:67:7f:91:
                    92:ed:eb:1f:13:c0:8b:66:94:10:f9:b3:82:e8:e6:
                    f2:df:bb:46:10:1d:df:33:c7:62:a2:f9:31:7b:15:
                    c6:5a:8b:24:98:11:31:18:e2:4c:6e:69:2c:e8:d6:
                    63:44:2c:fb:38:4f:d1:d0:96:08:09:ed:ee:dd:51:
                    55:ee:0e:24:f8:c4:60:99:26:c5:81:e2:1d:4f:1b:
                    df:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:7D:7F:00:4F:49:4F:20:69:3F:B3:2C:06:5C:A8:87:16:D8:0F:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebf21e98-3294-441a-9899-9d935ac6c3d1/4b7e712f-9329-3708-ab17-5af68b324e55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebf21e98-3294-441a-9899-9d935ac6c3d1/ebf21e98-3294-441a-9899-9d935ac6c3d1.crl

            X509v3 Authority Key Identifier:
                keyid:85:73:B7:3D:7F:5B:A4:F5:C2:85:89:F4:BF:2F:E6:95:9D:D3:A4:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ebf21e98-3294-441a-9899-9d935ac6c3d1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.237.72.0-205.237.77.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:5c:7c:a2:bb:01:3b:c3:a0:26:0d:3f:c0:c2:05:28:33:f9:
         50:86:56:22:98:57:ba:cb:4d:dc:11:11:04:4a:ff:26:fb:6c:
         17:1a:af:77:69:bc:b7:46:19:c5:6c:40:87:ca:52:91:07:a2:
         2c:62:0d:5f:89:dd:73:00:7c:0a:f4:2a:cb:a3:2d:df:4a:5a:
         84:48:27:94:97:76:a7:09:eb:f5:af:15:f7:e0:24:be:5a:3f:
         aa:a5:02:47:9d:ab:c8:54:3c:68:37:29:3a:43:3c:9f:83:63:
         dc:be:a0:2c:c6:8d:d9:be:16:a3:02:c1:1c:3c:72:41:e6:c4:
         78:62:02:13:90:2a:c4:fa:3f:ce:96:11:10:df:4c:ea:03:47:
         9f:fb:60:25:95:7b:57:f1:6a:be:87:c9:17:13:ea:97:f6:ec:
         c0:f8:0a:6b:05:dd:de:22:39:d4:8f:b3:ea:17:7f:be:66:dc:
         cc:f8:ee:99:73:df:21:d0:10:09:1d:99:39:5b:b6:b2:2d:71:
         07:b7:5b:5d:a5:3b:d9:90:f5:a3:f0:bc:40:23:73:da:3f:51:
         03:95:35:50:16:88:24:8d:9a:24:b1:32:f5:f6:e1:35:d8:bd:
         61:5f:29:0f:57:75:81:92:42:a5:6c:3b:86:08:57:7d:32:7a:
         b7:95:9b:43
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEkGhEWwZDtCXMcieYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWJmMjFlOTgtMzI5NC00NDFhLTk4OTktOWQ5MzVhYzZj
M2QxMB4XDTI1MDIyNzIwNTUxMVoXDTI1MDUyODE5NTUxMVowLzEtMCsGA1UEAxMk
MDljZjRkNzUtOTUzNy00MTFiLThiMTUtNzliZjcxNzE3Y2Q5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiKYkM69/dnQq7z4B/ZmhhnsBdqWPgYTbB1Cw
+mqYhQMB8esrQf0L/6gzhzjEBlpNAV3QmN/T5VIE6wk9B6gTXYd40tUTWw81kyh6
nrjl/3npGfWNv7v8fAOPEOolezd+v83x3oOmqQNE9ebSbm2L0ZDD/fGcwH5WLDQT
9wjONY4Bbl+0W5ODpNA+coCwkfzgu91VcSThmnvqXdCg3c5QvASW5ARB/1VgRSqM
PrvcpxBnf5GS7esfE8CLZpQQ+bOC6Oby37tGEB3fM8diovkxexXGWoskmBExGOJM
bmks6NZjRCz7OE/R0JYICe3u3VFV7g4k+MRgmSbFgeIdTxvfbwIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFIl9fwBPSU8gaT+zLAZcqIcW2A9iMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9lYmYy
MWU5OC0zMjk0LTQ0MWEtOTg5OS05ZDkzNWFjNmMzZDEvNGI3ZTcxMmYtOTMyOS0z
NzA4LWFiMTctNWFmNjhiMzI0ZTU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZWJmMjFlOTgtMzI5NC00NDFhLTk4
OTktOWQ5MzVhYzZjM2QxL2ViZjIxZTk4LTMyOTQtNDQxYS05ODk5LTlkOTM1YWM2
YzNkMS5jcmwwHwYDVR0jBBgwFoAUhXO3PX9bpPXChYn0vy/mlZ3TpAowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9lYmYyMWU5OC0zMjk0LTQ0MWEtOTg5OS05ZDkz
NWFjNmMzZDEuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAPN7UgD
BAHN7UwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEAAVx8orsBO8OgJg0/wMIFKDP5UIZWIphXustN3BERBEr/
JvtsFxqvd2m8t0YZxWxAh8pSkQeiLGINX4ndcwB8CvQqy6Mt30pahEgnlJd2pwnr
9a8V9+Akvlo/qqUCR52ryFQ8aDcpOkM8n4Nj3L6gLMaN2b4WowLBHDxyQebEeGIC
E5AqxPo/zpYREN9M6gNHn/tgJZV7V/FqvofJFxPql/bswPgKawXd3iI51I+z6hd/
vmbczPjumXPfIdAQCR2ZOVu2si1xB7dbXaU72ZD1o/C8QCNz2j9RA5U1UBaIJI2a
JLEy9fbhNdi9YV8pD1d1gZJCpWw7hghXfTJ6t5WbQw==
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:21:50 2025 by rpki-client