Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/058a49b1-635c-42be-b1a3-1465228f2130/1e64e797-c5ae-34d2-b840-4899b58cf84f.roa
File:                     1e64e797-c5ae-34d2-b840-4899b58cf84f.roa (raw, json)
Hash identifier:          29rUO61GYo1qLpUHnsDA4C/a5wrR7scNEyhCimoAH/w=
Subject key identifier:   0E:24:01:AC:0B:FF:8E:57:34:25:15:A4:95:92:E7:14:B2:E4:46:38
Certificate issuer:       /CN=058a49b1-635c-42be-b1a3-1465228f2130
Certificate serial:       010D0C9F43285847F217D8CB579600DBD085C780
Authority key identifier: 68:25:0F:DE:B3:8D:02:2E:53:C4:A4:AA:2C:97:F2:07:71:20:5F:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/058a49b1-635c-42be-b1a3-1465228f2130.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/058a49b1-635c-42be-b1a3-1465228f2130/1e64e797-c5ae-34d2-b840-4899b58cf84f.roa
Signing time:             Wed 20 Nov 2024 20:33:37 +0000
ROA not before:           Wed 20 Nov 2024 20:33:37 +0000
ROA not after:            Tue 18 Feb 2025 20:33:37 +0000
asID:                     26682
IP address blocks:        2602:f795:a01::/48 maxlen: 48
Validation:               Failed, certificate revoked on Thu 21 Nov 2024 17:34:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f2:17:d8:cb:57:96:00:db:d0:85:c7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=058a49b1-635c-42be-b1a3-1465228f2130
        Validity
            Not Before: Nov 20 20:33:37 2024 GMT
            Not After : Feb 18 20:33:37 2025 GMT
        Subject: CN=f9f6817f-5001-4471-a21e-5f5bd9c89356
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:3c:f0:43:c0:97:64:a4:cf:8b:c4:25:ff:00:
                    0a:e6:f2:99:e0:2d:5f:a4:7b:92:d2:f9:78:8f:e1:
                    d7:77:99:50:ff:86:3b:bf:93:2b:77:95:fa:32:df:
                    9d:d5:c2:ab:77:51:73:42:f2:25:04:8e:67:8d:f6:
                    01:ec:0c:4d:b2:96:3d:ac:4a:b4:2e:cc:6a:88:c0:
                    d3:e3:ff:eb:e1:e7:d5:13:bb:0a:e5:07:a5:e2:50:
                    cf:d0:fd:02:73:8e:a1:02:bf:3b:da:97:44:95:1e:
                    ae:7b:c3:01:3c:2d:02:b1:6a:a1:21:f2:f7:b2:07:
                    17:3f:5d:d0:f9:ac:5f:b0:37:32:be:0c:43:ed:3a:
                    1d:89:18:26:39:b2:99:6d:c8:b4:eb:a8:19:cd:11:
                    0e:4b:5e:b4:ce:74:6f:cb:cc:7c:4e:4e:27:9a:d7:
                    e0:30:26:50:85:42:81:b9:26:4e:24:42:9c:24:7d:
                    8f:0e:bf:80:cb:78:1e:c8:03:99:18:94:b3:85:ff:
                    1f:d7:c4:9c:cc:5f:40:e3:60:40:ba:46:25:59:32:
                    44:30:f9:b8:26:52:70:ba:e1:49:0f:30:83:d2:64:
                    1e:cf:22:47:fe:9c:0e:8a:29:b3:41:90:37:f9:bd:
                    e8:0c:67:46:db:a1:96:3c:61:15:77:0e:8b:cd:15:
                    11:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:24:01:AC:0B:FF:8E:57:34:25:15:A4:95:92:E7:14:B2:E4:46:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/058a49b1-635c-42be-b1a3-1465228f2130/1e64e797-c5ae-34d2-b840-4899b58cf84f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/058a49b1-635c-42be-b1a3-1465228f2130/058a49b1-635c-42be-b1a3-1465228f2130.crl

            X509v3 Authority Key Identifier:
                keyid:68:25:0F:DE:B3:8D:02:2E:53:C4:A4:AA:2C:97:F2:07:71:20:5F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/058a49b1-635c-42be-b1a3-1465228f2130.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f795:a01::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ce:97:0a:cd:41:93:a5:f7:5a:83:a3:ae:eb:6d:7c:09:73:23:
         ee:99:77:bf:b3:bd:50:3a:d2:83:5b:e4:4a:28:73:f4:35:59:
         b0:df:5d:9e:b6:a5:90:17:ba:48:87:b3:e1:20:3a:35:96:d4:
         c1:7b:47:33:17:54:4a:ce:f1:c3:20:82:46:ee:01:29:55:ae:
         65:7d:7f:d6:a2:2a:49:a7:79:72:32:4c:cf:61:10:ea:f1:4f:
         0b:80:0d:0d:17:33:f0:b8:5d:c0:12:f1:37:76:5f:60:7e:0e:
         4d:38:6f:6c:aa:0d:c2:a8:6c:29:3c:5b:53:a8:28:f7:46:60:
         1b:90:9e:55:50:c2:6c:e8:e4:34:ae:e1:00:15:1e:a9:a8:4e:
         fb:d3:79:cd:16:09:c5:a2:07:e6:37:b0:d7:39:3d:60:d5:67:
         9f:91:8d:c6:07:1a:c5:69:10:f6:54:a3:a8:f1:e9:81:a9:01:
         0c:a4:1d:27:85:6b:4e:5d:1a:d0:ea:09:66:5b:2c:39:fe:78:
         28:8c:e4:ad:ca:01:c3:4f:8d:e2:13:28:1f:85:fc:9c:29:a4:
         88:2f:a0:e1:82:5b:2a:dc:53:47:22:ab:c0:fe:c3:98:64:b2:
         15:74:4f:e6:88:9c:6c:c7:02:d5:aa:e3:7c:e5:45:d7:8e:e7:
         60:53:e6:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:50:26 2025 by rpki-client