Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35/db191535-1b49-3315-894d-4696f3398e5f.roa
File:                     db191535-1b49-3315-894d-4696f3398e5f.roa (raw, json)
Hash identifier:          TwhCyFP7JOJSxPkpUhdnRdedCiy8NMkyEyBN6d7O8+4=
Subject key identifier:   29:1C:67:5F:60:A7:63:2A:93:C3:4D:B8:F7:15:F7:72:DC:D9:B7:36
Certificate issuer:       /CN=6f599815-aa39-4cb1-86b8-df65da50cb35
Certificate serial:       010D0C9F43285848C1CBD0A548D385509F8C3D00
Authority key identifier: 00:F1:EF:2C:40:3D:8E:FB:D9:80:A7:22:2F:F6:54:88:97:A6:0C:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35/db191535-1b49-3315-894d-4696f3398e5f.roa
Signing time:             Mon 03 Feb 2025 06:08:34 +0000
ROA not before:           Mon 03 Feb 2025 06:08:34 +0000
ROA not after:            Sun 04 May 2025 05:08:34 +0000
asID:                     210576
IP address blocks:        2607:eb40:2000::/36 maxlen: 36
Validation:               Failed, certificate revoked on Thu 06 Feb 2025 02:43:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c1:cb:d0:a5:48:d3:85:50:9f:8c:3d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f599815-aa39-4cb1-86b8-df65da50cb35
        Validity
            Not Before: Feb  3 06:08:34 2025 GMT
            Not After : May  4 05:08:34 2025 GMT
        Subject: CN=9a1af617-7c67-4de2-89be-b6bf1ff94bc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:a8:34:74:2d:d7:94:60:61:78:37:64:c9:76:
                    e0:a3:13:ec:2b:29:4e:6d:9f:7f:e2:44:9c:ba:15:
                    fd:59:31:44:ba:8a:ab:a4:58:11:50:34:d6:d4:32:
                    e0:8b:73:9f:b8:8b:af:b5:a8:c5:b0:9e:d5:4c:39:
                    4a:b3:30:c9:9a:83:7a:ad:57:24:62:a5:f8:29:5d:
                    a8:09:2c:3b:22:bd:62:8b:ff:bb:14:97:ed:77:e6:
                    ce:aa:14:4a:7a:9b:35:12:1a:17:49:d9:6b:8f:87:
                    17:49:d6:b7:64:e2:3f:2a:a2:7f:ca:68:22:35:7c:
                    1b:ef:e3:38:75:d3:98:13:c0:11:28:45:01:39:f3:
                    f6:ae:9f:2d:6f:72:52:9c:8a:51:8a:c9:48:6c:3f:
                    da:02:82:1f:13:e7:68:f7:85:ee:3c:03:0a:a0:35:
                    40:1f:0b:c0:9d:bc:be:e8:0e:38:e5:eb:54:1d:e8:
                    41:ef:4e:52:91:07:a6:ee:62:a5:a7:a1:d7:4c:71:
                    61:2f:52:f0:5a:15:c6:d8:37:60:0c:dc:90:93:87:
                    79:58:5e:2e:a8:80:5c:4c:9a:9d:a0:3d:27:a1:73:
                    69:0a:22:63:cf:d5:99:f5:72:d3:80:77:6e:a0:fd:
                    3c:f0:94:d5:95:b1:e7:04:31:e9:be:0c:02:88:39:
                    5f:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:1C:67:5F:60:A7:63:2A:93:C3:4D:B8:F7:15:F7:72:DC:D9:B7:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35/db191535-1b49-3315-894d-4696f3398e5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35/6f599815-aa39-4cb1-86b8-df65da50cb35.crl

            X509v3 Authority Key Identifier:
                keyid:00:F1:EF:2C:40:3D:8E:FB:D9:80:A7:22:2F:F6:54:88:97:A6:0C:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6f599815-aa39-4cb1-86b8-df65da50cb35.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:eb40:2000::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:df:74:57:03:d6:3e:7d:af:bb:18:73:7c:d4:11:69:4b:9f:
         de:22:63:e7:35:b7:31:d0:35:f6:99:04:2c:c3:0f:fe:dc:9e:
         76:b2:af:90:32:57:55:c8:8c:4b:e4:5c:0b:d3:a2:a5:93:69:
         68:cb:1b:67:58:31:e0:71:48:ea:b5:b8:14:9e:2e:3f:4d:43:
         2a:54:a5:65:66:fb:7d:09:a6:f7:5a:f3:44:bc:1c:5d:d0:d7:
         2a:84:74:c6:52:b0:01:81:50:58:14:f2:fc:8f:da:37:ef:f4:
         f7:d8:a8:01:e4:ad:6a:4b:25:91:01:9c:8b:a2:38:af:20:31:
         fb:a1:a7:1b:a4:b4:a9:50:06:2d:6a:e2:a6:b7:b0:fa:ff:e7:
         b4:5b:54:ce:2f:94:ec:40:ff:ce:2b:18:8f:b2:64:5e:65:ad:
         f8:5d:e1:00:94:d7:ab:c5:da:34:df:f4:cc:37:25:4e:cd:5d:
         aa:fd:04:2e:1b:65:95:a8:6d:be:b1:8b:6b:72:99:f1:13:d7:
         fc:91:1b:fe:4e:8b:fc:0d:79:2c:e5:2b:4c:03:3a:e8:55:08:
         46:4f:58:35:ab:c9:1a:1b:e1:12:3f:81:10:73:64:f6:58:59:
         a2:3e:ea:e8:8b:a7:a8:4a:50:7d:a7:26:61:1f:b7:78:72:cc:
         00:be:1c:16
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEjBy9ClSNOFUJ+MPQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmY1OTk4MTUtYWEzOS00Y2IxLTg2YjgtZGY2NWRhNTBj
YjM1MB4XDTI1MDIwMzA2MDgzNFoXDTI1MDUwNDA1MDgzNFowLzEtMCsGA1UEAxMk
OWExYWY2MTctN2M2Ny00ZGUyLTg5YmUtYjZiZjFmZjk0YmM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg6g0dC3XlGBheDdkyXbgoxPsKylObZ9/4kSc
uhX9WTFEuoqrpFgRUDTW1DLgi3OfuIuvtajFsJ7VTDlKszDJmoN6rVckYqX4KV2o
CSw7Ir1ii/+7FJftd+bOqhRKeps1EhoXSdlrj4cXSda3ZOI/KqJ/ymgiNXwb7+M4
ddOYE8ARKEUBOfP2rp8tb3JSnIpRislIbD/aAoIfE+do94XuPAMKoDVAHwvAnby+
6A445etUHehB705SkQem7mKlp6HXTHFhL1LwWhXG2DdgDNyQk4d5WF4uqIBcTJqd
oD0noXNpCiJjz9WZ9XLTgHduoP088JTVlbHnBDHpvgwCiDlffQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFCkcZ19gp2Mqk8NNuPcV93Lc2bc2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi82ZjU5
OTgxNS1hYTM5LTRjYjEtODZiOC1kZjY1ZGE1MGNiMzUvZGIxOTE1MzUtMWI0OS0z
MzE1LTg5NGQtNDY5NmYzMzk4ZTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNmY1OTk4MTUtYWEzOS00Y2IxLTg2
YjgtZGY2NWRhNTBjYjM1LzZmNTk5ODE1LWFhMzktNGNiMS04NmI4LWRmNjVkYTUw
Y2IzNS5jcmwwHwYDVR0jBBgwFoAUAPHvLEA9jvvZgKciL/ZUiJemDBMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi82ZjU5OTgxNS1hYTM5LTRjYjEtODZiOC1kZjY1
ZGE1MGNiMzUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgfrQCAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAMd90VwPWPn2vuxhzfNQRaUuf3iJj5zW3MdA19pkELMMP/tyedrKv
kDJXVciMS+RcC9OipZNpaMsbZ1gx4HFI6rW4FJ4uP01DKlSlZWb7fQmm91rzRLwc
XdDXKoR0xlKwAYFQWBTy/I/aN+/099ioAeStakslkQGci6I4ryAx+6GnG6S0qVAG
LWriprew+v/ntFtUzi+U7ED/zisYj7JkXmWt+F3hAJTXq8XaNN/0zDclTs1dqv0E
LhtllahtvrGLa3KZ8RPX/JEb/k6L/A15LOUrTAM66FUIRk9YNavJGhvhEj+BEHNk
9lhZoj7q6IunqEpQfacmYR+3eHLMAL4cFg==
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:44:33 2025 by rpki-client