Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/0/323630323a663732653a663a3a2f34382d3438203d3e203131393637.roa
File:                     323630323a663732653a663a3a2f34382d3438203d3e203131393637.roa (raw, json)
Hash identifier:          bNdENBvEeCfejykrRj0QVG3BfMHmOKzIVCtuHTQ+Kzo=
Subject key identifier:   93:28:0F:91:5A:AD:A9:C5:1A:46:D6:DF:10:2E:5A:CE:0E:9E:B0:A8
Certificate issuer:       /CN=369dbc2ec1754da1dbaabab18a4c5590d9fbf947f503b5fd60
Certificate serial:       2CE37289C3172F9F2C3CC771C745E95150455EB0
Authority key identifier: 41:17:16:F7:FD:EB:2F:71:72:BC:E3:E6:1D:86:C8:3B:82:41:11:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec1754da1dbaabab18a4c5590d9fbf947f503b5fd60.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/0/323630323a663732653a663a3a2f34382d3438203d3e203131393637.roa
Signing time:             Tue 13 May 2025 22:21:21 +0000
ROA not before:           Tue 13 May 2025 22:16:21 +0000
ROA not after:            Tue 12 May 2026 22:21:21 +0000
asID:                     11967
IP address blocks:        2602:f72e:f::/48 maxlen: 48
Validation:               Failed, certificate revoked on Wed 14 May 2025 08:18:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:e3:72:89:c3:17:2f:9f:2c:3c:c7:71:c7:45:e9:51:50:45:5e:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=369dbc2ec1754da1dbaabab18a4c5590d9fbf947f503b5fd60
        Validity
            Not Before: May 13 22:16:21 2025 GMT
            Not After : May 12 22:21:21 2026 GMT
        Subject: CN=93280F915AADA9C51A46D6DF102E5ACE0E9EB0A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:3d:d1:0c:44:79:4e:6f:67:bb:d9:40:45:5a:
                    12:a5:85:e4:10:3b:8a:79:33:f2:dd:19:f3:fc:44:
                    80:4c:42:41:5a:e4:0e:64:58:88:7e:07:f8:0c:6e:
                    6e:a8:d4:70:aa:a9:94:f0:23:e2:65:2a:d9:81:39:
                    ad:64:bd:69:bc:b7:96:43:ed:ad:a9:0e:dd:cf:bc:
                    0d:f8:7b:81:9e:5f:39:10:26:16:57:55:86:01:47:
                    ac:fe:3e:b2:ce:4a:a9:ed:3f:60:62:85:a5:b5:a5:
                    c0:cf:ac:4f:3b:8a:b0:77:6f:3e:0c:1a:a5:6f:46:
                    47:ed:71:52:ad:7e:67:ba:96:26:0c:76:06:81:ff:
                    d4:97:67:30:8e:cd:73:f2:3c:e8:d8:ca:aa:ac:e0:
                    f7:66:2a:db:dd:54:1e:a7:83:82:c3:25:f3:fc:05:
                    0f:6f:54:97:26:bb:71:72:4a:b5:29:07:f1:a8:80:
                    e0:8f:50:b1:9c:ba:03:9d:02:09:61:35:44:1b:7c:
                    15:d6:93:8d:fd:2b:8f:04:8b:3c:38:ea:cf:9d:df:
                    5e:14:ef:f8:7d:ea:47:6a:f7:fb:ab:ef:6a:73:24:
                    8a:cc:1e:ad:f5:e5:db:3f:6c:2e:ba:18:b7:8f:42:
                    71:9f:e9:6e:42:e5:ed:56:e9:5d:b2:15:c4:47:d1:
                    0a:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:28:0F:91:5A:AD:A9:C5:1A:46:D6:DF:10:2E:5A:CE:0E:9E:B0:A8
            X509v3 Authority Key Identifier:
                keyid:41:17:16:F7:FD:EB:2F:71:72:BC:E3:E6:1D:86:C8:3B:82:41:11:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/0/411716F7FDEB2F7172BCE3E61D86C83B824111FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576633f-343d-4ac3-a936-98958e5630e6/369dbc2ec1754da1dbaabab18a4c5590d9fbf947f503b5fd60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/0/323630323a663732653a663a3a2f34382d3438203d3e203131393637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f72e:f::/48

    Signature Algorithm: sha256WithRSAEncryption
         86:b3:f5:63:d7:5a:f6:77:c2:11:7c:f7:d6:01:b5:bf:0a:a4:
         23:97:ea:aa:13:28:30:6e:d0:d6:c1:42:0d:d9:e3:87:14:41:
         33:07:81:ce:36:10:1d:fe:2f:e0:62:69:28:51:ec:a0:e4:37:
         40:aa:c1:22:df:3e:38:3a:b4:4c:52:b8:6f:36:b7:61:b1:52:
         75:d7:3c:22:01:c4:f6:ea:8f:27:db:7b:f0:91:dc:77:f8:4c:
         f5:de:03:a1:b3:14:4b:1d:29:e1:67:b0:f4:f7:d5:71:45:56:
         bd:8f:0d:60:27:8b:88:e3:8f:0c:69:12:e8:f7:f1:ab:c7:b6:
         13:29:9e:20:3c:6c:8e:7d:8a:93:38:93:9f:29:63:62:b5:3f:
         70:02:75:ae:0e:4c:48:39:e9:2c:92:33:af:29:7c:c1:bb:3e:
         2e:66:2a:25:eb:24:b8:72:a0:3b:84:da:f2:16:6c:59:cb:7f:
         22:6d:e0:1a:b2:d5:1b:3d:1b:2e:01:fa:88:40:ac:0a:57:8b:
         99:07:c8:a3:a7:35:20:6e:b7:66:ef:64:a8:9d:24:0d:39:b4:
         c4:17:df:27:91:a6:14:73:33:fd:b9:be:af:b7:f7:c1:ef:41:
         34:8c:00:af:2c:22:9d:36:aa:74:ae:70:c7:6c:fc:1c:db:df:
         46:e5:a4:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:11:12 2025 by rpki-client