Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8798864e-7ea5-3724-a41a-eef5891c5a54.roa
File:                     8798864e-7ea5-3724-a41a-eef5891c5a54.roa (raw, json)
Hash identifier:          HVCze65RFOJ8RSoXtIzyTZcskh/zOLffhjTm3xk02lM=
Subject key identifier:   AB:DF:E8:CD:5F:A4:51:A2:AB:C2:23:7F:C1:8E:76:A8:52:23:65:25
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285848EE0A665CBBCCC2E9F8A96DF0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8798864e-7ea5-3724-a41a-eef5891c5a54.roa
Signing time:             Wed 19 Feb 2025 02:30:14 +0000
ROA not before:           Wed 19 Feb 2025 02:30:14 +0000
ROA not after:            Tue 20 May 2025 01:30:14 +0000
asID:                     13002
IP address blocks:        2001:470:1eb::/48 maxlen: 48
Validation:               Failed, certificate revoked on Fri 14 Mar 2025 19:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ee:0a:66:5c:bb:cc:c2:e9:f8:a9:6d:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 19 02:30:14 2025 GMT
            Not After : May 20 01:30:14 2025 GMT
        Subject: CN=7ade7e12-c21a-445c-a34e-69a78ae6366f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:d6:1c:3f:60:30:aa:6e:75:e5:56:f2:08:67:
                    a1:61:18:04:cb:7c:24:75:e3:fb:c9:0d:02:07:91:
                    23:df:c6:b4:c4:42:2d:48:c5:48:68:5f:2f:26:9e:
                    76:1d:7e:a1:22:aa:22:81:9a:a6:90:42:08:8e:25:
                    fa:8c:23:af:62:9a:f8:70:c2:e5:72:49:32:b0:3d:
                    02:cf:3d:19:f4:4b:4c:35:03:12:f7:7d:96:21:c6:
                    7b:a2:11:45:89:fc:f8:09:25:e5:9d:a6:31:cc:3c:
                    ef:bb:0f:a7:d8:d6:f7:7c:00:8e:ac:e0:4e:67:04:
                    e1:40:3b:d3:83:d7:30:1f:bd:b9:a8:5b:e6:b3:6a:
                    34:a8:dd:df:3e:99:1c:49:07:44:98:1d:0c:d5:2e:
                    78:43:d4:97:24:a0:44:ac:9c:d2:50:70:7b:c5:f0:
                    cc:78:8e:bf:37:44:da:0c:9e:6c:85:66:74:40:3e:
                    c6:9c:cf:44:9e:20:4a:31:e8:eb:25:4d:e0:87:97:
                    61:49:da:8d:54:6a:58:76:96:c7:1d:6e:c1:8b:a4:
                    61:04:e4:26:c3:56:fb:e1:24:7a:0e:c9:de:6b:0c:
                    f2:ad:61:68:90:91:9a:d9:da:18:90:bf:5e:43:1a:
                    ed:7f:ea:15:d5:35:c6:29:e6:0e:c2:2d:8a:43:1c:
                    84:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:DF:E8:CD:5F:A4:51:A2:AB:C2:23:7F:C1:8E:76:A8:52:23:65:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8798864e-7ea5-3724-a41a-eef5891c5a54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:1eb::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:b1:8d:05:98:85:6f:96:94:69:e9:87:75:4a:83:6a:b6:6e:
         21:01:8b:39:12:d9:43:d9:c9:46:f8:55:1f:61:9a:98:23:a3:
         10:ae:07:5b:12:72:b6:52:3b:69:03:53:e6:b9:be:26:a0:55:
         d2:8c:61:01:00:13:20:98:c6:6d:db:8c:6f:da:43:a7:b1:d8:
         7a:88:72:d3:ef:9e:51:e2:5d:83:7d:c9:a1:3b:39:85:cf:de:
         a3:c7:7a:85:8a:72:9c:86:b2:02:81:f1:d2:90:1c:ab:fd:cf:
         0a:e9:d8:87:ab:8d:85:dc:4e:2e:93:e6:ea:aa:92:7d:be:b3:
         b2:32:9c:d5:99:ae:ff:81:5d:a0:b8:bf:70:1b:30:b4:58:0d:
         6a:69:8d:e6:4d:93:36:43:ff:91:4c:52:ae:31:dc:29:a9:1f:
         c9:05:a5:20:b6:e7:7a:3e:d5:58:4a:64:5d:ae:96:8d:0e:d3:
         79:e8:8b:12:ef:6d:8b:7f:52:5a:a6:19:8d:40:7a:28:f2:0b:
         5a:a5:8d:c8:81:d9:a0:d6:fb:b3:93:b3:61:09:4e:1f:85:27:
         2d:59:9f:a9:2a:9e:91:d6:f9:b2:79:66:86:60:f3:81:3d:87:
         7d:8a:28:c0:2c:44:99:76:72:ca:f3:49:3c:d5:b0:db:ce:22:
         3c:3b:43:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 15:28:00 2025 by rpki-client