Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e426927e-660b-3b64-be26-061199b36ca9.roa
File:                     e426927e-660b-3b64-be26-061199b36ca9.roa (raw, json)
Hash identifier:          FNeMjymO34HmdHAftJ5/J2fEuYJbsOCbbHQO+miwb0U=
Subject key identifier:   F3:74:50:02:75:2B:69:AA:DF:8D:CB:AB:EC:66:83:C8:B0:36:B9:A5
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328583DA14A3B6C0AC9478AC84CABC0
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e426927e-660b-3b64-be26-061199b36ca9.roa
Signing time:             Tue 19 Apr 2022 04:00:00 +0000
ROA not before:           Tue 19 Apr 2022 04:00:00 +0000
ROA not after:            Tue 11 Apr 2028 04:00:00 +0000
asID:                     7029
IP address blocks:        2604:cb00::/48 maxlen: 48
Validation:               Failed, certificate revoked on Fri 05 Jan 2024 05:47:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:a1:4a:3b:6c:0a:c9:47:8a:c8:4c:ab:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Apr 19 04:00:00 2022 GMT
            Not After : Apr 11 04:00:00 2028 GMT
        Subject: CN=7241c2f0-5f4c-424c-beb0-d68138cbe869
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:2b:fc:73:4d:5c:8c:b1:f8:99:33:a8:d1:e4:
                    96:11:73:41:e8:7e:dd:76:f2:a7:97:0e:b2:3f:2f:
                    ab:f2:a6:14:48:52:bb:5c:cc:c9:fc:67:32:6f:90:
                    f3:64:b7:2e:83:4d:d2:dd:2c:9e:08:e8:70:c6:07:
                    e5:28:e7:e9:4d:e7:aa:6c:8e:24:23:b1:81:c2:9f:
                    bf:be:26:2f:df:d4:05:33:3b:05:c7:ed:05:43:36:
                    ca:29:1f:af:66:5c:bb:d0:ef:a7:ae:34:7e:01:1e:
                    74:86:eb:72:9d:a9:ed:7d:90:c9:53:b1:2f:94:48:
                    05:a7:11:aa:5d:38:1e:ca:34:26:1a:a5:4b:65:a3:
                    3c:38:c9:e3:cc:61:96:de:82:62:a4:3d:eb:43:d1:
                    13:d7:3a:31:6a:0f:cf:fc:a8:e8:5f:d0:ab:30:25:
                    38:60:d0:a3:23:af:d0:66:8f:87:8d:35:e0:23:da:
                    2a:48:bd:bb:5c:01:55:fd:4d:b3:aa:fb:ab:cd:66:
                    a0:33:49:82:3b:60:d9:40:4d:59:5c:cf:32:59:e6:
                    c0:be:b3:87:a6:f0:85:2b:d2:c2:2b:e3:2d:f3:58:
                    3a:20:27:c8:29:c5:23:88:4c:8f:90:cf:d7:3f:f1:
                    4f:32:0c:f4:1d:8b:d7:99:5e:8f:33:ba:e0:ef:c6:
                    4a:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:74:50:02:75:2B:69:AA:DF:8D:CB:AB:EC:66:83:C8:B0:36:B9:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e426927e-660b-3b64-be26-061199b36ca9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:cb00::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:b0:eb:fe:41:64:a6:2a:90:0a:75:c8:d5:ed:c7:6b:25:1e:
         67:5c:b2:68:74:0e:f3:21:bf:86:ea:be:06:24:fb:5e:f1:5d:
         87:b3:ab:79:14:19:ce:31:62:10:a9:7f:c9:c8:22:23:2d:01:
         69:df:41:e4:f3:cc:88:c9:88:21:c6:89:33:ae:41:3d:80:cb:
         e5:35:19:e5:9c:0d:7e:88:7f:c6:3c:96:9e:22:94:83:bd:6d:
         72:41:9e:f9:73:50:58:42:05:3f:bd:31:86:cf:24:48:1f:dc:
         f3:31:72:21:49:ef:37:dd:55:3e:f9:f4:9d:0f:8c:dd:5a:c9:
         52:1a:ce:7b:d9:06:33:36:c8:f7:52:9a:62:1c:55:68:6d:08:
         92:5f:7d:c4:e8:c0:a4:03:5b:ed:63:a3:fa:b7:4e:53:0c:c5:
         af:ac:96:c5:26:94:bb:6e:3f:b2:6c:49:23:97:85:cb:ab:95:
         0e:10:f2:8c:0b:91:14:5e:85:c1:80:62:21:8f:bc:39:9e:0e:
         2d:2b:2b:dc:61:fc:42:b0:ba:f0:c6:c7:f4:77:c9:56:46:16:
         62:64:8f:4c:49:9c:45:e9:f6:dd:dc:f3:97:2d:d4:2b:33:e1:
         12:93:c8:6a:2d:19:7a:5c:74:ea:4d:da:23:b3:3b:79:62:d7:
         36:17:a2:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:16:18 2025 by rpki-client