Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/253d5305-847c-3fc6-8805-b95728df1e20.roa
File:                     253d5305-847c-3fc6-8805-b95728df1e20.roa (raw, json)
Hash identifier:          MjfHAC2BHOhIHKKNJZuhOWKgzDbvbLyswnmvFIH1mgI=
Subject key identifier:   95:63:FA:E5:9D:01:8B:F4:C7:BA:A0:6F:46:8F:4B:82:1B:BC:B7:C1
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584A0FAE9872631772B04D0C0680
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/253d5305-847c-3fc6-8805-b95728df1e20.roa
Signing time:             Mon 02 Jun 2025 20:29:41 +0000
ROA not before:           Mon 02 Jun 2025 20:29:41 +0000
ROA not after:            Sun 31 Aug 2025 20:29:41 +0000
asID:                     19905
IP address blocks:        2604:2e87:4000::/38 maxlen: 38
Validation:               Failed, certificate revoked on Thu 05 Jun 2025 17:15:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0f:ae:98:72:63:17:72:b0:4d:0c:06:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jun  2 20:29:41 2025 GMT
            Not After : Aug 31 20:29:41 2025 GMT
        Subject: CN=b27e7670-2fd2-4618-afcf-35e777790d92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:12:41:96:63:a4:7c:73:59:d3:0b:44:8d:d8:
                    b5:d3:b3:54:b1:cb:b2:10:31:86:27:fe:50:54:f0:
                    c9:07:f1:39:8a:f0:fe:b0:64:7a:a0:73:cd:cf:ff:
                    1d:59:9d:1a:86:09:da:45:49:6d:74:95:0a:67:10:
                    8f:49:51:4c:fa:22:10:65:50:8f:ce:04:64:10:38:
                    d0:b3:2d:37:61:3a:a3:9f:29:9a:92:cf:e4:ff:36:
                    8b:b2:aa:23:66:4b:ad:4e:be:0f:c4:f7:dc:e8:a7:
                    10:f7:02:a4:42:aa:19:4c:f0:65:93:3f:eb:a5:d7:
                    77:ae:eb:60:1a:47:29:ed:4d:64:be:db:6e:52:5b:
                    e1:5e:ea:e0:c7:46:34:95:7d:76:79:16:ff:4b:87:
                    a4:89:61:ec:9d:b5:54:06:21:9b:38:2c:86:14:56:
                    52:8a:10:cd:0b:6b:49:67:67:1c:33:77:1a:c7:a8:
                    90:30:42:15:3d:94:60:b9:5b:1a:06:b2:49:e5:fd:
                    cc:5a:86:a3:4a:f0:e7:c9:c6:7c:03:23:c9:31:26:
                    ce:21:d2:59:be:47:d5:30:49:07:66:3c:64:9e:d4:
                    7b:b8:dd:d0:98:fb:7b:b2:2f:2c:6f:a3:f9:11:06:
                    21:d6:36:be:82:91:3c:c5:d0:ac:19:c1:ae:97:17:
                    9b:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:63:FA:E5:9D:01:8B:F4:C7:BA:A0:6F:46:8F:4B:82:1B:BC:B7:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/253d5305-847c-3fc6-8805-b95728df1e20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e87:4000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:9f:91:d9:5c:05:f8:68:94:36:de:26:c0:1b:c5:fb:e5:da:
         57:94:f5:2d:51:8a:57:f4:c4:67:e9:93:2d:16:47:1d:0f:ba:
         9d:c6:46:24:7c:49:bc:d8:00:45:99:4a:05:2d:10:cd:4c:62:
         72:d2:e7:c2:dc:cb:9b:36:f0:08:60:44:4c:7d:67:5f:b5:07:
         09:0d:f6:d2:1d:1b:ce:78:fc:42:ca:00:fa:26:79:2a:02:58:
         a1:44:f9:b7:f1:9d:3e:10:45:87:83:00:cb:7f:3f:74:84:36:
         39:4c:d8:b0:80:2b:d8:fa:0d:4a:53:95:7f:ad:f4:9a:06:6c:
         70:96:3f:b9:12:d0:78:c7:09:47:9e:91:c0:67:d8:68:db:ab:
         3f:ec:30:b9:b1:12:81:76:12:8e:44:a2:64:bf:99:49:52:a9:
         2e:0f:c3:3e:5f:0e:13:1a:40:68:5f:7e:e7:b9:64:ed:ac:f7:
         0e:8c:70:3c:5e:10:9e:8f:4a:24:6b:37:8a:a0:1f:ee:04:0e:
         63:71:d0:8a:09:83:9a:f0:5b:79:03:ab:f7:45:63:21:a1:c3:
         61:0c:57:f0:da:02:ba:90:f3:f9:21:ef:38:1d:b2:c0:fd:0b:
         b6:66:93:ba:94:14:12:7c:ee:6b:d6:fa:88:a1:83:29:9b:b4:
         aa:d1:66:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:53:23 2025 by rpki-client