Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/9c3f4f70-5836-3ff5-be18-141d6b055585.roa
File:                     9c3f4f70-5836-3ff5-be18-141d6b055585.roa (raw, json)
Hash identifier:          5OWsVdcZMKL4vffXjPRy/E4rqgoGuO8uA9uh88vhEUk=
Subject key identifier:   AB:AD:66:E7:6F:02:65:58:2F:0D:79:7B:85:4B:EF:F6:6B:AB:7C:5F
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F43285848EF92C2C5F4CEAC5A3B2966D0
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/9c3f4f70-5836-3ff5-be18-141d6b055585.roa
Signing time:             Wed 19 Feb 2025 15:40:47 +0000
ROA not before:           Wed 19 Feb 2025 15:40:47 +0000
ROA not after:            Tue 20 May 2025 14:40:47 +0000
asID:                     207266
IP address blocks:        2001:500:40::/44 maxlen: 48
Validation:               Failed, certificate revoked on Thu 06 Mar 2025 12:48:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:92:c2:c5:f4:ce:ac:5a:3b:29:66:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Feb 19 15:40:47 2025 GMT
            Not After : May 20 14:40:47 2025 GMT
        Subject: CN=04e73a71-f970-41a0-90ff-64fae1c8055d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:23:bf:51:e5:9a:42:55:f6:0f:59:ad:21:9c:
                    a3:83:ec:80:04:8f:ee:a3:31:7b:eb:8a:11:af:dd:
                    95:fa:41:cd:64:84:4d:9f:52:5e:13:41:57:4b:50:
                    31:2f:60:15:a5:29:50:59:f0:ca:dc:37:ac:38:0b:
                    9b:ab:84:d7:f2:0b:bc:9b:8e:17:1b:62:86:f4:f5:
                    1a:1e:e1:4a:c1:36:36:6a:45:d2:c1:b7:77:a0:63:
                    13:0c:f3:74:3d:40:16:c2:05:7c:a6:89:64:30:30:
                    56:fd:18:db:a4:54:04:ff:45:95:8b:81:82:f5:5f:
                    b3:65:16:fb:f7:9f:65:8e:93:c5:95:8a:b5:b5:cf:
                    2e:2e:3d:84:8f:7d:a4:0f:d3:25:82:98:89:c5:81:
                    99:fd:6d:1a:2a:53:ff:10:be:a3:c6:87:52:01:e6:
                    1b:e2:38:06:0b:b5:b9:a8:26:ae:b9:c5:fa:8e:20:
                    cf:bc:11:61:99:64:f2:71:f4:bb:a0:7b:75:e7:b9:
                    e7:68:e0:73:50:53:f3:a8:7d:30:98:53:1f:00:e9:
                    d7:8d:6f:c0:5b:35:43:77:95:74:63:d1:3d:65:3b:
                    90:72:3d:6f:34:c3:08:62:4b:e5:f4:30:96:58:c5:
                    6b:d3:ba:64:78:e0:24:ae:1b:04:3e:06:21:c1:10:
                    a6:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:AD:66:E7:6F:02:65:58:2F:0D:79:7B:85:4B:EF:F6:6B:AB:7C:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/9c3f4f70-5836-3ff5-be18-141d6b055585.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:40::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:5e:6a:40:ac:15:45:b4:8a:43:08:a7:eb:17:d4:a9:0c:7f:
         46:88:b7:0c:20:c7:c3:bf:75:60:b8:c6:d3:43:ef:a7:cb:e4:
         80:3d:e5:f5:96:24:84:8a:fc:6f:f7:35:5f:59:a2:8b:85:64:
         74:40:52:0a:5d:55:17:4d:82:10:4e:a0:d2:0b:c9:29:bb:7a:
         cd:78:f1:3d:6f:04:ac:83:be:81:6b:31:05:fb:64:18:23:1d:
         9d:34:1b:ec:91:6f:72:79:d4:ac:a7:72:2d:13:6d:fc:0c:63:
         54:b8:e9:61:a2:e4:d1:57:e9:a5:bd:2c:38:76:e3:2f:cc:c6:
         5e:3c:d5:4b:82:fc:91:0c:cb:f4:11:7a:5f:b1:ea:b8:ba:1a:
         e4:07:7c:47:0b:e0:44:e4:92:98:af:8d:a8:b6:4b:3b:ea:1a:
         52:16:3f:90:5c:be:4d:2b:7f:f5:61:ea:99:e4:02:61:61:94:
         6d:dd:e4:91:dc:20:18:04:5a:bd:45:fa:24:78:3a:19:48:92:
         78:a4:aa:95:4b:dc:0a:fc:37:cc:4c:6c:1a:4c:63:8b:d9:a1:
         f3:6a:b9:15:db:d6:16:9b:dd:f3:1d:83:6e:d6:15:30:2f:2a:
         1a:57:a9:c4:8f:77:cd:3d:d2:83:2d:db:0c:df:07:19:1e:d4:
         2b:29:39:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 15 11:55:35 2025 by rpki-client