Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2eedde0b-757f-3275-a231-a77733e29565.roa
File:                     2eedde0b-757f-3275-a231-a77733e29565.roa (raw, json)
Hash identifier:          JmWeA1rfALn06E/DdVFAastmG0soGb3T+nFFW/e5KcU=
Subject key identifier:   AB:B6:E7:BD:1A:0A:7D:69:7D:EE:6C:C5:DD:3C:36:26:90:76:6E:51
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858483E294710F7E00BB5B4941F00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2eedde0b-757f-3275-a231-a77733e29565.roa
Signing time:             Wed 18 Dec 2024 02:30:10 +0000
ROA not before:           Wed 18 Dec 2024 02:30:10 +0000
ROA not after:            Tue 18 Mar 2025 01:30:10 +0000
asID:                     397493
IP address blocks:        2001:470:182::/48 maxlen: 48
Validation:               Failed, certificate revoked on Tue 14 Jan 2025 20:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3e:29:47:10:f7:e0:0b:b5:b4:94:1f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Dec 18 02:30:10 2024 GMT
            Not After : Mar 18 01:30:10 2025 GMT
        Subject: CN=50b4dc01-4b3a-4dc2-ba8d-d723c2c93beb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:59:5f:a0:0c:82:e0:4a:fd:fa:0d:56:3e:dc:
                    3e:63:22:73:5f:a3:38:87:94:1c:76:4f:4e:cc:5f:
                    38:03:04:29:ed:87:b9:65:65:99:0a:fb:56:c4:bb:
                    38:11:1e:36:42:88:65:6a:47:a5:7e:6b:20:8d:16:
                    de:e3:99:6f:ff:94:41:79:cf:a7:d2:53:56:28:45:
                    c0:2b:6a:6e:a4:59:55:bb:1f:3d:c0:bd:24:20:f9:
                    dc:e8:e5:37:aa:5b:5e:a3:cf:39:cd:55:d9:be:08:
                    2d:bd:b1:12:cf:30:db:20:39:68:6b:42:f3:09:f4:
                    a9:27:c5:cc:8b:38:a3:86:a3:f3:de:f8:f7:79:68:
                    db:3b:20:f4:17:91:f4:f6:d0:c4:17:1b:cb:36:fd:
                    41:bb:47:90:93:c1:39:42:6e:53:d0:10:e5:91:87:
                    d4:94:ad:84:63:98:d7:2e:10:6d:0f:c3:a3:0b:91:
                    29:36:02:96:4c:dd:0d:c7:5d:d3:2b:26:19:a9:c9:
                    84:59:dd:0e:89:7d:19:16:12:3b:b2:41:35:0c:c0:
                    cf:32:72:be:8f:0a:91:ad:4c:e9:bc:86:fd:a3:18:
                    b4:c7:f5:84:cc:4d:b4:1e:5d:e7:4f:f0:b0:f0:7c:
                    12:82:f3:57:3e:bf:88:d5:0c:d7:7b:f8:5a:f5:77:
                    25:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:B6:E7:BD:1A:0A:7D:69:7D:EE:6C:C5:DD:3C:36:26:90:76:6E:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2eedde0b-757f-3275-a231-a77733e29565.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:182::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:e4:a6:90:e2:9b:3e:bd:92:4c:13:71:0b:90:92:5b:6c:2e:
         72:bb:dd:b6:53:a6:0b:95:44:e1:66:f5:7e:cf:fb:c9:4a:9f:
         2a:9a:68:98:55:14:a6:7e:fe:8b:c7:ba:0b:19:35:02:e8:e4:
         f4:f5:e8:07:76:9e:f2:49:2e:d7:5d:7e:97:b9:37:43:ae:b0:
         19:43:f9:ac:40:85:29:3f:4b:71:01:79:e1:b2:dd:03:87:b1:
         c8:15:08:2a:00:65:3b:e0:f8:77:8e:75:ab:e3:7e:23:91:01:
         51:bd:f6:c4:78:de:3d:52:a0:5f:05:d4:31:46:f8:0d:06:76:
         69:c6:4d:ce:45:9b:a7:a1:97:d0:d6:a0:d3:3c:8e:38:31:f4:
         cf:62:7f:43:20:3b:f8:23:26:39:64:01:3d:9b:7c:bd:9f:cb:
         fd:37:e6:c4:ec:64:92:37:84:3c:03:b2:a2:2b:b9:1b:81:de:
         36:06:94:72:13:4e:1e:17:ba:92:10:2f:47:a1:62:f8:65:af:
         80:06:11:60:1c:d3:15:a2:df:c6:4f:d8:80:0e:3f:e3:74:d3:
         0e:0c:b4:cf:77:51:82:2b:ce:3f:c6:0c:34:0f:4f:0f:9b:66:
         a9:bb:e1:54:6d:67:5c:4f:51:a1:6d:ab:76:4e:0d:f4:dc:ca:
         08:20:bc:3c
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEg+KUcQ9+ALtbSUHwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI0MTIxODAyMzAxMFoXDTI1MDMxODAxMzAxMFowLzEtMCsGA1UEAxMk
NTBiNGRjMDEtNGIzYS00ZGMyLWJhOGQtZDcyM2MyYzkzYmViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFlfoAyC4Er9+g1WPtw+YyJzX6M4h5Qcdk9O
zF84AwQp7Ye5ZWWZCvtWxLs4ER42QohlakelfmsgjRbe45lv/5RBec+n0lNWKEXA
K2pupFlVux89wL0kIPnc6OU3qlteo885zVXZvggtvbESzzDbIDloa0LzCfSpJ8XM
izijhqPz3vj3eWjbOyD0F5H09tDEFxvLNv1Bu0eQk8E5Qm5T0BDlkYfUlK2EY5jX
LhBtD8OjC5EpNgKWTN0Nx13TKyYZqcmEWd0OiX0ZFhI7skE1DMDPMnK+jwqRrUzp
vIb9oxi0x/WEzE20Hl3nT/Cw8HwSgvNXPr+I1QzXe/ha9Xcl6wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFKu2570aCn1pfe5sxd08NiaQdm5RMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMmVlZGRlMGItNzU3Zi0z
Mjc1LWEyMzEtYTc3NzMzZTI5NTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAGC
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHTkppDimz69kkwTcQuQkltsLnK73bZTpguVROFm9X7P+8lKnyqa
aJhVFKZ+/ovHugsZNQLo5PT16Ad2nvJJLtddfpe5N0OusBlD+axAhSk/S3EBeeGy
3QOHscgVCCoAZTvg+HeOdavjfiORAVG99sR43j1SoF8F1DFG+A0GdmnGTc5Fm6eh
l9DWoNM8jjgx9M9if0MgO/gjJjlkAT2bfL2fy/035sTsZJI3hDwDsqIruRuB3jYG
lHITTh4XupIQL0ehYvhlr4AGEWAc0xWi38ZP2IAOP+N00w4MtM93UYIrzj/GDDQP
Tw+bZqm74VRtZ1xPUaFtq3ZODfTcygggvDw=
-----END CERTIFICATE-----
Generated at Fri Mar 14 12:58:03 2025 by rpki-client