Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c5660af4-67c1-3245-afeb-015a280e7192.roa
File:                     c5660af4-67c1-3245-afeb-015a280e7192.roa (raw, json)
Hash identifier:          zR1JCG+N1YBNXVHhh/6HoXfqiWgv4dleWAPTtn2LecE=
Subject key identifier:   CE:27:0D:43:FF:D3:8D:46:87:53:B9:34:37:06:C3:FD:97:48:64:77
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285848EE0A63F577862AB9F159D840
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c5660af4-67c1-3245-afeb-015a280e7192.roa
Signing time:             Wed 19 Feb 2025 02:30:13 +0000
ROA not before:           Wed 19 Feb 2025 02:30:13 +0000
ROA not after:            Tue 20 May 2025 01:30:13 +0000
asID:                     13002
IP address blocks:        2001:470:31a::/48 maxlen: 48
Validation:               Failed, certificate revoked on Fri 14 Mar 2025 19:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ee:0a:63:f5:77:86:2a:b9:f1:59:d8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 19 02:30:13 2025 GMT
            Not After : May 20 01:30:13 2025 GMT
        Subject: CN=8a2e765d-f0c4-4b7e-a1e7-3afbecb5dfd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:4a:3d:1a:6e:8a:40:67:d1:54:d2:56:cf:a3:
                    0c:9b:4e:69:aa:4f:aa:61:ef:f6:97:3e:1d:c0:38:
                    27:c5:7c:5f:d1:4d:49:3a:e4:90:38:03:66:41:08:
                    0c:58:7f:ce:17:75:e5:51:1c:a5:1f:ac:c9:5e:b9:
                    dd:f4:a5:ba:f9:af:2f:46:c2:13:5d:f6:d0:6d:75:
                    36:3d:c2:c4:44:b9:cd:91:5e:28:58:5d:f9:fa:28:
                    e5:a4:d6:be:1b:4c:2f:83:e5:6d:58:8b:37:91:39:
                    ce:cc:73:5c:44:9d:a9:24:45:dd:48:4a:04:27:14:
                    51:93:b6:ec:bb:5b:90:dc:d4:fb:5e:0b:e7:ac:73:
                    7b:24:3f:52:46:b5:67:7e:eb:2f:f1:07:ee:13:b7:
                    b9:a5:25:2f:35:ab:0e:ec:29:39:40:d2:f6:72:23:
                    63:bc:f4:54:77:b7:30:4e:b0:f4:70:23:30:d7:98:
                    40:cc:e6:f3:37:cc:af:2c:5d:a3:8f:1c:5a:61:05:
                    c9:77:6f:1c:47:dc:31:0d:82:83:2e:de:73:da:b5:
                    49:33:96:ca:6c:af:4a:1d:28:59:df:0e:27:6c:a0:
                    2f:04:68:aa:e7:4c:61:92:1a:b6:43:0b:ae:0d:f3:
                    b7:64:02:f3:dc:17:c9:ed:a7:58:c8:67:5e:00:fb:
                    10:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:27:0D:43:FF:D3:8D:46:87:53:B9:34:37:06:C3:FD:97:48:64:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c5660af4-67c1-3245-afeb-015a280e7192.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:31a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:90:aa:8b:d4:da:fa:90:08:a3:f7:85:45:22:bc:9a:8a:a8:
         09:be:dc:31:db:54:2d:9b:ad:f2:c3:fd:89:08:31:54:b0:04:
         5a:c0:61:18:30:9f:79:a6:c7:f7:bd:99:c5:b0:0d:41:e7:ac:
         7b:38:ab:de:03:d9:68:7f:28:cd:61:0d:ea:57:90:3f:fc:cd:
         49:3d:e5:c6:63:6d:d4:dd:7c:cf:28:a3:aa:2d:39:3f:8d:1d:
         fd:34:22:f9:43:75:4a:2d:c0:13:f7:43:b2:e6:6c:9f:22:b8:
         dd:cd:f8:20:47:fb:20:2c:aa:28:e7:9b:ab:fd:87:07:20:d7:
         4e:e1:a9:51:42:5d:3f:3f:71:7c:39:60:fc:ca:f0:73:24:9f:
         00:70:d6:f1:88:79:07:13:8a:b5:16:6e:84:7e:5a:58:ad:e6:
         b0:cc:db:d2:5a:c2:51:ff:f2:21:52:02:7b:7d:d6:d7:27:d2:
         36:2e:78:e2:7f:99:1c:fb:6d:54:79:4a:c3:86:6c:1b:ec:a8:
         79:c4:d5:fd:9c:2f:41:75:8c:95:d9:0c:08:a2:81:25:4c:a7:
         93:3b:07:ca:d1:db:09:14:71:c5:03:0d:c0:3e:ef:6b:5d:46:
         77:67:ec:c1:19:f2:dc:b8:8a:ed:8c:42:1a:6a:08:ea:8b:f1:
         df:85:ee:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 15:41:38 2025 by rpki-client