Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4f74ea5d-ed82-4ec7-ba82-247305c841cd/7bf8e533-0e0f-35d6-a377-b4898ce6ebb2.roa
File:                     7bf8e533-0e0f-35d6-a377-b4898ce6ebb2.roa (raw, json)
Hash identifier:          m/nT++YAX75UyvKPUyojFevpqUufy93omx6s8Qv+BUk=
Subject key identifier:   B1:8B:2F:91:43:C8:8D:A2:FD:AA:2C:79:9A:6E:E5:75:D0:5C:E8:EE
Certificate issuer:       /CN=4f74ea5d-ed82-4ec7-ba82-247305c841cd
Certificate serial:       010D0C9F43285849142CA725BFB218F77CF5E000
Authority key identifier: 07:2E:09:3F:E4:BD:49:99:43:C9:B4:2D:E2:2F:2F:2C:0E:60:4E:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4f74ea5d-ed82-4ec7-ba82-247305c841cd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4f74ea5d-ed82-4ec7-ba82-247305c841cd/7bf8e533-0e0f-35d6-a377-b4898ce6ebb2.roa
Signing time:             Tue 04 Mar 2025 18:19:58 +0000
ROA not before:           Tue 04 Mar 2025 18:19:58 +0000
ROA not after:            Mon 02 Jun 2025 17:19:58 +0000
asID:                     25731
IP address blocks:        2602:fab5::/40 maxlen: 40
Validation:               Failed, certificate revoked on Tue 04 Mar 2025 22:14:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:14:2c:a7:25:bf:b2:18:f7:7c:f5:e0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f74ea5d-ed82-4ec7-ba82-247305c841cd
        Validity
            Not Before: Mar  4 18:19:58 2025 GMT
            Not After : Jun  2 17:19:58 2025 GMT
        Subject: CN=7b0f4fec-d823-4e35-a6a2-7b2e3e0fbfb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:a7:d6:93:3c:e1:6a:0a:2b:01:41:93:d4:16:
                    38:9e:92:6a:28:f7:f6:0b:f4:43:a9:a3:52:08:8b:
                    24:ec:b9:6d:a2:ae:05:c7:1f:34:b9:92:18:c4:0c:
                    d5:22:50:06:47:c9:79:d4:9c:e1:6d:e7:79:e6:31:
                    a3:65:45:dc:23:1a:c6:f0:9b:0a:0a:c7:35:c6:9d:
                    58:23:2b:d6:c0:ab:f4:84:e3:5d:77:1b:41:12:9d:
                    a4:70:26:57:98:e3:23:36:4f:d1:05:c2:81:b1:2f:
                    e5:5c:43:af:3b:00:0b:b6:9d:ac:e5:f2:f2:3d:9c:
                    e7:c0:db:71:b1:53:08:1d:93:4e:63:d2:83:ec:22:
                    bd:06:10:eb:a8:29:47:a6:51:27:ef:8f:5b:6a:f5:
                    a7:2a:67:a3:ca:fb:c4:55:ad:fd:6e:09:b4:3c:35:
                    61:e2:fb:e0:f3:7a:c8:82:29:53:14:0d:96:dc:08:
                    6e:55:39:fa:a7:b8:25:6a:d9:c1:92:c3:04:02:30:
                    cb:10:50:7f:5f:fe:c6:07:31:23:2f:c7:fb:00:1c:
                    ac:59:ab:11:c3:db:9c:e8:cd:79:71:df:0e:c1:ee:
                    56:58:fd:c2:f5:e1:02:ea:55:25:9b:db:14:6a:80:
                    01:2a:dd:62:5d:b2:aa:a6:99:4a:b0:11:2e:2e:a9:
                    2e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:8B:2F:91:43:C8:8D:A2:FD:AA:2C:79:9A:6E:E5:75:D0:5C:E8:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4f74ea5d-ed82-4ec7-ba82-247305c841cd/7bf8e533-0e0f-35d6-a377-b4898ce6ebb2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4f74ea5d-ed82-4ec7-ba82-247305c841cd/4f74ea5d-ed82-4ec7-ba82-247305c841cd.crl

            X509v3 Authority Key Identifier:
                keyid:07:2E:09:3F:E4:BD:49:99:43:C9:B4:2D:E2:2F:2F:2C:0E:60:4E:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4f74ea5d-ed82-4ec7-ba82-247305c841cd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fab5::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:ff:09:96:02:e9:b5:02:40:b6:de:8c:d2:01:85:02:ad:b9:
         88:a2:30:32:eb:83:64:2b:83:35:4c:ba:b4:c6:b5:18:1a:a2:
         fb:67:01:b0:c4:17:0e:7c:08:0b:77:e4:cf:87:95:12:30:78:
         f2:3b:6c:7d:c1:c4:14:9d:b1:8c:f3:9d:5f:70:63:6e:7c:b2:
         5e:48:5d:f0:42:b6:4a:b9:f6:24:e3:7e:ec:ec:c4:85:90:4e:
         a6:2b:aa:3e:da:a0:a4:fd:cf:54:d5:de:32:78:fc:fa:b2:be:
         39:be:cc:1c:fc:d1:a9:50:54:ac:c7:5a:0e:32:62:3b:8d:31:
         e2:c9:bc:38:84:6a:3a:5f:e2:1f:68:ec:3c:ee:dd:3b:b2:f8:
         73:76:57:94:3c:d7:d6:f1:e0:4d:d8:49:be:25:ec:6c:36:17:
         cd:85:c4:c2:86:87:42:6f:89:f3:34:0a:8b:ad:63:0e:16:92:
         d8:ca:f1:32:51:aa:a1:24:b8:f3:b6:84:1b:b6:86:21:2f:49:
         9a:32:19:72:0d:2f:57:6d:fb:2f:d6:4d:f5:1b:f9:ab:47:7c:
         1a:11:d5:d5:a1:5c:90:d9:eb:81:a8:04:76:5a:0b:ea:86:94:
         42:d7:b0:ad:fd:de:a7:f4:d9:68:a4:d2:de:09:db:37:c7:12:
         c6:ec:c6:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:58:54 2025 by rpki-client