Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348/a82f8e00-faae-3c0f-be9f-827708359a2a.roa
File:                     a82f8e00-faae-3c0f-be9f-827708359a2a.roa (raw, json)
Hash identifier:          PCPGy6X5Tko9Vcyje/Xo3DpG/XQGjh3Gkoi9Bzz1TL0=
Subject key identifier:   C6:17:6B:35:10:D5:E2:8F:C1:EA:91:E4:73:D2:14:1A:87:69:91:72
Certificate issuer:       /CN=ea3f9044-c185-4062-8dad-240b32b11348
Certificate serial:       010D0C9F432858495179308F1F6EA956BADACFE0
Authority key identifier: FE:A0:9D:90:12:27:F6:C7:83:B1:36:01:F0:F6:B6:F2:0B:7F:28:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348/a82f8e00-faae-3c0f-be9f-827708359a2a.roa
Signing time:             Wed 26 Mar 2025 17:18:29 +0000
ROA not before:           Wed 26 Mar 2025 17:18:29 +0000
ROA not after:            Tue 24 Jun 2025 17:18:29 +0000
asID:                     395661
IP address blocks:        2607:bc40:100::/48 maxlen: 56
Validation:               Failed, certificate revoked on Wed 26 Mar 2025 21:07:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:51:79:30:8f:1f:6e:a9:56:ba:da:cf:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea3f9044-c185-4062-8dad-240b32b11348
        Validity
            Not Before: Mar 26 17:18:29 2025 GMT
            Not After : Jun 24 17:18:29 2025 GMT
        Subject: CN=233c9bfd-2055-4bff-b532-417742cd4b8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b2:04:0a:6c:4b:fe:e8:16:fe:52:ab:51:c8:
                    90:ea:15:3a:0c:66:a7:5d:52:ad:99:a7:3c:44:59:
                    51:ba:0c:d5:33:1f:69:9b:a6:f1:4e:30:3a:e9:2a:
                    f0:14:65:16:7b:0b:24:71:ad:a9:82:f0:df:89:5f:
                    1b:e1:13:61:35:38:ca:37:de:1a:bf:a8:ab:23:78:
                    c0:ce:f9:24:3f:a2:90:a8:86:6b:6f:79:a1:e2:68:
                    9f:cd:2f:02:88:62:90:f1:01:24:0f:ff:7b:0f:5c:
                    d3:cc:b5:b2:22:7c:99:15:ba:eb:2c:75:28:8f:64:
                    68:e8:a7:2f:a3:6e:60:1f:05:fa:ef:06:be:b5:0e:
                    5f:cd:e7:c2:fd:c6:3d:b8:17:21:51:48:20:e5:dd:
                    21:3f:c8:e1:b6:8f:e2:f6:1c:b5:51:79:10:e2:c3:
                    f6:48:c1:d5:81:ac:24:33:1f:85:c7:c0:b4:d1:5c:
                    14:b6:1e:cd:5c:51:9a:d8:0e:3f:65:8b:98:15:b7:
                    04:37:b9:bd:f8:a3:54:19:d4:9c:cd:cb:52:f5:e1:
                    e5:59:88:68:51:03:59:f0:33:31:5d:40:e1:8b:3a:
                    be:68:82:c2:19:06:f6:be:57:b0:40:57:4e:13:6a:
                    6e:15:ef:d5:be:d3:55:de:c2:a7:fc:3d:43:84:40:
                    9f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:17:6B:35:10:D5:E2:8F:C1:EA:91:E4:73:D2:14:1A:87:69:91:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348/a82f8e00-faae-3c0f-be9f-827708359a2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348/ea3f9044-c185-4062-8dad-240b32b11348.crl

            X509v3 Authority Key Identifier:
                keyid:FE:A0:9D:90:12:27:F6:C7:83:B1:36:01:F0:F6:B6:F2:0B:7F:28:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ea3f9044-c185-4062-8dad-240b32b11348.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:bc40:100::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:20:66:2d:8a:20:63:dd:3c:fc:e8:4d:a1:07:b9:71:86:79:
         97:7e:ee:6c:d7:9e:c9:b7:dc:90:a4:09:3c:d0:e9:7c:67:e7:
         a1:b8:d9:68:9d:83:67:35:1b:08:dd:d6:05:0c:fb:10:fa:c0:
         3b:60:97:3f:a7:1b:32:59:a2:f5:eb:ce:03:ae:df:05:f4:c1:
         a0:3e:9d:44:04:4c:90:08:52:65:db:bb:2e:81:44:e6:55:39:
         72:e2:87:05:76:b7:8a:16:21:a8:3c:f2:00:7b:e5:1f:a7:ea:
         16:fc:d7:35:6a:92:af:17:b7:76:a5:44:86:81:a0:07:34:dc:
         28:d2:62:a8:85:27:95:ce:20:56:2f:b3:8e:ce:af:e9:5c:cb:
         15:4c:8b:d1:f6:9f:df:a7:bf:8b:ac:50:e3:21:b1:62:57:a8:
         77:af:42:79:aa:6d:44:52:d6:bb:d3:ab:29:c0:34:21:d3:98:
         5f:77:20:1d:e8:c3:f7:8a:e8:b8:62:f2:3b:e6:d8:13:23:33:
         21:4a:a1:1c:82:1b:29:d5:3a:12:de:7a:1e:80:23:db:62:10:
         46:2d:68:79:8a:fb:61:44:eb:36:0a:41:0d:84:56:fd:1d:b3:
         16:2f:5c:d2:f2:01:27:e0:61:1b:73:64:c0:b7:ae:0c:8a:27:
         58:07:70:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 13:42:51 2025 by rpki-client