Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d/88c63247-dc86-3f32-addb-4a04748ba6a9.roa
File:                     88c63247-dc86-3f32-addb-4a04748ba6a9.roa (raw, json)
Hash identifier:          /jtT68VIZUnC1bznO071sbDgBdbn7CIFIH8nSuX9VeU=
Subject key identifier:   BC:2D:72:D6:CD:36:FA:BF:88:E2:FB:66:54:0D:B4:02:EC:3F:66:E7
Certificate issuer:       /CN=004321a8-393d-4f7f-add9-dddc07a1320d
Certificate serial:       010D0C9F4328584A27C826C1A687658DF79365D0
Authority key identifier: FE:D8:E1:5B:23:CE:B0:9B:2E:84:87:9B:FF:67:16:5D:DA:D5:FD:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d/88c63247-dc86-3f32-addb-4a04748ba6a9.roa
Signing time:             Tue 10 Jun 2025 21:41:10 +0000
ROA not before:           Tue 10 Jun 2025 21:41:10 +0000
ROA not after:            Mon 08 Sep 2025 21:41:10 +0000
asID:                     399970
IP address blocks:        2602:fc3b:a00::/48 maxlen: 48
                          2602:fc3b:b00::/48 maxlen: 48
Validation:               Failed, certificate revoked on Wed 11 Jun 2025 12:39:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:27:c8:26:c1:a6:87:65:8d:f7:93:65:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=004321a8-393d-4f7f-add9-dddc07a1320d
        Validity
            Not Before: Jun 10 21:41:10 2025 GMT
            Not After : Sep  8 21:41:10 2025 GMT
        Subject: CN=c1acb7e6-8218-4c7c-aca3-36e91975df66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:be:07:4d:60:9a:cc:6d:93:34:21:d9:ec:f9:
                    68:20:f8:44:3c:ec:0b:f5:c5:5a:24:ed:42:fc:e2:
                    8f:2d:50:f4:b3:14:a4:d5:92:99:30:36:72:a9:d8:
                    51:cd:fb:1a:a5:a6:85:12:b5:76:94:2e:17:54:7d:
                    79:95:5c:17:ff:bb:9a:62:a9:b0:3b:4f:72:86:a7:
                    18:0a:67:f2:a5:62:e6:d0:18:ea:35:77:6b:00:d8:
                    6e:2a:de:76:d6:4e:a5:42:ba:6f:0c:e7:d9:b2:fc:
                    ae:78:d8:1f:02:18:56:dc:6c:88:00:c0:98:f5:0e:
                    46:d5:49:3d:0e:ce:05:ee:9c:d2:93:cb:0f:ff:15:
                    8f:34:ff:59:e6:4c:35:ce:44:8f:9d:50:6f:8d:c0:
                    15:80:44:09:28:13:8c:a2:49:1d:c2:7f:33:fa:d4:
                    79:2b:68:b1:f4:55:69:34:c1:f2:59:d9:33:06:e2:
                    4b:02:90:9f:f0:53:74:d3:0e:22:65:ec:f0:b7:ac:
                    70:c7:ee:93:b7:0f:5c:1b:2f:a4:01:a3:02:cc:55:
                    bc:b3:6c:a6:9b:60:26:33:86:af:81:15:2f:5e:3a:
                    01:9f:a8:a6:3e:80:89:80:e1:f7:67:29:09:45:f1:
                    7a:d5:c2:17:09:25:73:f8:5f:1b:10:b4:d2:ad:ee:
                    be:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:2D:72:D6:CD:36:FA:BF:88:E2:FB:66:54:0D:B4:02:EC:3F:66:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d/88c63247-dc86-3f32-addb-4a04748ba6a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d/004321a8-393d-4f7f-add9-dddc07a1320d.crl

            X509v3 Authority Key Identifier:
                keyid:FE:D8:E1:5B:23:CE:B0:9B:2E:84:87:9B:FF:67:16:5D:DA:D5:FD:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:a00::/48
                  2602:fc3b:b00::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:e3:1e:f2:6c:b4:ea:25:b3:1a:66:1a:d2:88:9a:30:f8:d6:
         cc:fc:a7:ed:3b:e0:d3:91:c6:8e:0c:77:3a:75:5b:dc:db:04:
         d5:37:cd:fa:dc:16:c8:03:b5:de:e5:92:97:f1:7a:5b:fb:b4:
         2d:fa:1c:94:ee:82:31:8e:3e:af:2d:9d:8d:1a:1d:da:70:8e:
         03:a6:39:3a:eb:7d:47:16:4a:79:e5:be:0b:1c:2f:7d:db:11:
         2e:ef:5c:21:33:a7:d2:82:e8:e9:1b:fd:ae:53:38:e3:10:89:
         86:d1:04:d9:8b:43:31:72:5b:48:70:84:ae:f1:29:89:a5:7a:
         19:ac:2f:27:52:a7:44:e6:d3:4d:fa:b6:c5:91:f1:2a:da:94:
         f4:b9:47:2a:90:50:17:59:60:4b:e2:ae:ce:44:d6:3c:95:94:
         92:3f:d7:94:6c:5e:9f:99:4e:18:ca:ae:7f:9c:13:23:24:b8:
         b7:71:41:b2:6a:1e:cc:e9:7a:d4:8e:c4:dd:aa:6a:ba:94:ac:
         63:07:74:e7:eb:32:14:9f:00:80:47:18:a3:0f:b2:e6:43:cd:
         84:2d:89:d5:e2:8a:bd:21:81:af:ce:e5:ce:08:1c:03:ad:63:
         7f:2a:d9:7b:78:cc:a2:29:f3:d4:e0:54:13:8e:a7:56:37:f3:
         cb:74:21:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 14:35:58 2025 by rpki-client