Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/78810b5d-6e40-3452-8bbd-f6ab2a3bac3b.roa
File:                     78810b5d-6e40-3452-8bbd-f6ab2a3bac3b.roa (raw, json)
Hash identifier:          T8Q5frlNXreMTFPhe0Uvz7KoZx7GPthuYOnqEpM0HCI=
Subject key identifier:   B0:8D:34:41:F6:5D:E0:94:06:1A:BC:5F:AE:72:05:68:12:08:91:30
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584840F3FF2A5ED1D598A496CD40
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/78810b5d-6e40-3452-8bbd-f6ab2a3bac3b.roa
Signing time:             Thu 19 Dec 2024 02:30:15 +0000
ROA not before:           Thu 19 Dec 2024 02:30:15 +0000
ROA not after:            Wed 19 Mar 2025 01:30:15 +0000
asID:                     199468
IP address blocks:        2001:470:112::/48 maxlen: 48
Validation:               Failed, certificate revoked on Fri 10 Jan 2025 20:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:40:f3:ff:2a:5e:d1:d5:98:a4:96:cd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Dec 19 02:30:15 2024 GMT
            Not After : Mar 19 01:30:15 2025 GMT
        Subject: CN=8a3f0ee1-ddc0-423f-ad7c-2e603f11c2a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:6b:cf:68:53:b9:ec:54:32:1d:55:d4:6c:57:
                    fe:a6:d9:73:6a:21:79:29:5d:59:a9:87:02:ea:20:
                    3a:d2:a5:91:48:43:5c:8f:77:5c:d0:ff:8f:a2:33:
                    5c:b7:f5:a0:3b:04:aa:43:28:f5:93:a1:99:ba:b6:
                    a1:9e:99:31:65:44:2b:6e:b3:d1:54:0c:3a:cf:1b:
                    17:67:d1:d6:39:23:e6:5f:e5:fa:01:60:58:2d:4c:
                    b7:9a:26:b8:3a:de:3d:37:9f:7f:e7:26:c3:16:0a:
                    be:0f:40:b6:28:01:83:b8:b8:c4:d2:7e:da:eb:52:
                    4d:71:30:20:05:e2:34:4c:a8:3b:79:55:0e:ad:71:
                    87:36:76:17:83:9f:17:cf:ec:06:7d:89:62:01:43:
                    b0:d5:e5:91:07:35:42:f3:78:49:09:92:9a:7b:54:
                    bc:cf:d1:09:b5:9c:2f:f3:12:5c:05:35:8c:1d:8e:
                    f5:08:cb:4d:0d:5c:58:d3:e1:5e:05:e9:b6:1c:8a:
                    a9:61:37:ea:02:68:6d:79:27:41:0a:ad:f2:10:b7:
                    5d:2f:b8:bc:50:d3:7d:5a:84:0d:fe:91:a9:f7:a7:
                    41:a1:cd:65:38:84:25:a7:6f:92:62:2a:db:3c:33:
                    5c:17:07:8a:b3:81:a6:11:bf:90:6f:b4:00:9d:16:
                    bf:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:8D:34:41:F6:5D:E0:94:06:1A:BC:5F:AE:72:05:68:12:08:91:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/78810b5d-6e40-3452-8bbd-f6ab2a3bac3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:112::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:a2:ae:37:6c:c3:b6:19:83:88:64:77:7f:40:60:bc:a2:22:
         fc:b9:c5:48:59:69:80:a5:4f:ba:d5:24:bb:17:f4:0a:f9:4b:
         ef:92:8a:ea:e6:f3:e1:ef:89:c8:df:cd:ba:cd:df:db:96:0b:
         fd:88:b1:10:64:6c:d2:fa:78:9c:b0:e7:a7:3a:32:8c:92:b3:
         7a:c7:2e:0f:29:c9:ab:6b:5f:76:01:b3:b3:a6:15:69:df:ff:
         8b:85:5f:d2:6c:69:c1:5a:f5:13:d0:bb:55:55:40:88:14:64:
         25:71:6f:18:62:0f:12:7a:a0:c8:e2:58:43:54:17:50:e2:54:
         16:36:f3:50:74:a2:ae:fe:c7:45:05:a2:27:d7:c8:6c:4d:1c:
         f9:4f:b0:43:6e:6b:f2:90:58:50:f8:a1:19:0d:75:0a:8c:7f:
         6a:32:77:5d:a7:fc:2e:2d:cb:7a:a9:c3:11:3a:45:dc:aa:ad:
         3b:6b:a4:92:73:4b:67:8d:39:bb:c9:82:69:e3:84:88:a3:12:
         0b:14:6d:e2:56:8b:53:8a:4d:d5:df:9f:8f:81:60:83:ef:b9:
         10:b6:3b:e9:5e:3b:97:43:33:21:7d:a4:88:4d:47:da:bf:cc:
         17:92:07:a0:10:b1:ee:e9:98:c0:6f:bf:ae:f8:d4:45:b7:28:
         9b:c5:65:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:20:16 2025 by rpki-client