Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07cb17d4-9502-4d38-b51a-02ae7bf3137b/7ac4beb6-caf2-3853-87af-29af1cd12f7a.roa
File:                     7ac4beb6-caf2-3853-87af-29af1cd12f7a.roa (raw, json)
Hash identifier:          ZVqbOZSoCtIEbhm6tU77tbtWmha/ywIsBKNSNGTCAzk=
Subject key identifier:   C2:4C:39:91:2F:F0:99:65:AF:E9:4D:D8:68:00:C5:53:1B:CB:69:AD
Certificate issuer:       /CN=07cb17d4-9502-4d38-b51a-02ae7bf3137b
Certificate serial:       010D0C9F4328584812D52C0B42C2A3C357879900
Authority key identifier: C0:7D:F3:29:1A:91:8D:CD:FA:37:63:19:EE:28:22:CE:B5:88:34:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07cb17d4-9502-4d38-b51a-02ae7bf3137b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07cb17d4-9502-4d38-b51a-02ae7bf3137b/7ac4beb6-caf2-3853-87af-29af1cd12f7a.roa
Signing time:             Mon 02 Dec 2024 14:00:51 +0000
ROA not before:           Mon 02 Dec 2024 14:00:51 +0000
ROA not after:            Sun 02 Mar 2025 14:00:51 +0000
asID:                     211544
IP address blocks:        2602:fc8b::/40 maxlen: 48
Validation:               Failed, certificate revoked on Sat 15 Feb 2025 01:31:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:12:d5:2c:0b:42:c2:a3:c3:57:87:99:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07cb17d4-9502-4d38-b51a-02ae7bf3137b
        Validity
            Not Before: Dec  2 14:00:51 2024 GMT
            Not After : Mar  2 14:00:51 2025 GMT
        Subject: CN=d347f117-7908-4547-a039-d7157395d575
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b9:24:9b:6c:21:c5:b8:56:ea:eb:d1:5d:c9:
                    8c:9f:ae:3c:24:5b:34:c5:56:88:3b:6e:37:e3:cd:
                    3e:93:6c:66:42:d8:91:93:cc:26:44:a0:88:9a:9d:
                    46:8b:21:2d:af:c1:9e:f2:76:42:ea:d8:49:54:08:
                    4c:ba:24:6d:b6:9a:92:22:8a:2f:71:94:f4:de:0d:
                    6e:1d:64:df:1e:4e:c7:90:34:df:a9:d1:2d:78:0b:
                    35:db:f3:20:72:04:49:7c:58:51:96:d7:d6:2e:14:
                    de:01:c0:15:e2:ca:4a:ec:6d:f7:08:76:6b:d4:a2:
                    d3:e4:7a:5d:ca:01:bd:98:88:ba:bc:05:63:60:35:
                    30:28:ce:75:af:2c:45:94:c1:e9:62:2c:f2:55:33:
                    eb:7d:e6:0c:8f:00:2d:24:ae:a6:5a:ab:33:bc:fa:
                    1f:5c:e1:4d:a4:cd:2e:f0:8b:43:8b:aa:98:14:38:
                    bd:b3:56:26:ce:b2:64:a1:d4:71:33:43:ec:d0:0a:
                    a7:39:5c:d6:b0:9e:98:8e:93:f6:9c:12:d6:8d:6c:
                    b7:d2:86:80:16:42:7e:95:bc:28:7e:3f:4d:70:93:
                    11:7a:20:f4:8d:47:02:24:2e:37:36:de:70:93:d0:
                    b3:d8:9f:92:fa:6e:91:36:26:be:b5:f6:af:43:9b:
                    04:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:4C:39:91:2F:F0:99:65:AF:E9:4D:D8:68:00:C5:53:1B:CB:69:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07cb17d4-9502-4d38-b51a-02ae7bf3137b/7ac4beb6-caf2-3853-87af-29af1cd12f7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07cb17d4-9502-4d38-b51a-02ae7bf3137b/07cb17d4-9502-4d38-b51a-02ae7bf3137b.crl

            X509v3 Authority Key Identifier:
                keyid:C0:7D:F3:29:1A:91:8D:CD:FA:37:63:19:EE:28:22:CE:B5:88:34:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/07cb17d4-9502-4d38-b51a-02ae7bf3137b.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc8b::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:6c:a1:32:3f:4d:a8:62:9a:dd:e2:b3:1d:8c:64:94:d4:e3:
         e2:d5:eb:6b:c1:fc:23:8d:72:cc:b3:84:c8:34:6d:d7:0f:01:
         04:7a:45:4f:1e:2c:cd:b4:90:a2:87:33:1d:8a:9f:61:c7:0d:
         67:46:0d:b7:ff:1a:d1:8e:2a:f3:1c:19:6b:ac:0c:77:f4:7a:
         88:07:ae:0f:b8:c3:80:f9:8c:6d:a0:97:b6:19:bc:28:b5:2c:
         ac:92:1e:ec:b4:4f:61:08:df:34:b2:39:be:8c:b7:35:13:1a:
         d2:8f:d6:03:47:26:a8:fc:37:84:57:17:78:5b:65:ed:2b:15:
         aa:7c:fe:51:80:d3:94:00:e5:66:97:91:20:83:0b:1b:06:89:
         4b:2e:63:8e:36:12:7b:10:cd:40:c6:dd:8f:82:71:76:db:96:
         b0:41:38:16:03:f7:e2:0a:fb:7e:7c:69:91:48:5a:c2:bd:e2:
         35:3d:6e:ea:e2:1b:5e:d0:44:c3:ac:3b:96:bb:91:c7:b2:e5:
         db:79:ae:59:89:cb:02:f6:aa:c1:d1:ba:8a:e0:3a:83:fc:c3:
         dc:9a:60:46:cc:1d:2f:0d:0e:6c:7c:8f:6a:4a:1e:cc:43:16:
         42:82:b3:c4:5f:0a:16:8c:8e:b0:ef:4c:c3:b8:1d:b8:6f:41:
         a5:21:67:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:07:38 2025 by rpki-client