Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/08c66b0a-191e-3242-b5b5-ac8ab2fa63da.roa
File:                     08c66b0a-191e-3242-b5b5-ac8ab2fa63da.roa (raw, json)
Hash identifier:          AbHbXvgVn44E+jeso/NGVX3JB9QB6oyq3ZfkDuM+nvc=
Subject key identifier:   61:2B:CD:87:BF:D5:AC:73:F4:F2:CF:35:6E:EB:86:B7:81:2A:5A:AC
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F43285849B5E34698DAF2CAFA5C00C600
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/08c66b0a-191e-3242-b5b5-ac8ab2fa63da.roa
Signing time:             Thu 01 May 2025 16:33:04 +0000
ROA not before:           Thu 01 May 2025 16:33:04 +0000
ROA not after:            Wed 30 Jul 2025 16:33:04 +0000
asID:                     22773
IP address blocks:        2600:8800:7404::/47 maxlen: 47
Validation:               Failed, certificate revoked on Thu 01 May 2025 22:09:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:e3:46:98:da:f2:ca:fa:5c:00:c6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  1 16:33:04 2025 GMT
            Not After : Jul 30 16:33:04 2025 GMT
        Subject: CN=48a1ec96-23e9-4d6b-ac1a-a9b252b07b5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:75:76:09:17:db:16:ae:0d:2b:60:82:9f:3a:
                    d7:b5:6a:d8:33:86:ec:58:fd:26:c0:ce:07:13:1e:
                    eb:be:e6:7e:84:db:50:78:56:d4:82:dc:b7:48:2f:
                    40:2f:71:26:f0:7d:a0:ac:82:b3:6b:6c:54:fc:be:
                    ad:ea:6a:72:98:21:c9:b3:ac:61:b1:58:bd:b2:20:
                    15:b3:e5:15:a5:a3:a0:cd:3c:ec:34:a5:10:f2:78:
                    21:4a:e3:04:51:44:af:63:61:b6:71:51:0a:cb:f8:
                    6c:b2:75:1e:e4:74:27:6f:5b:50:77:4b:1d:26:e0:
                    38:ec:e2:52:f4:53:32:09:23:a9:16:bc:98:92:cc:
                    72:5e:02:64:0c:88:c0:2c:b9:1e:45:fd:36:e1:54:
                    64:80:b3:54:c1:50:57:83:bc:a0:e0:55:bf:4c:4f:
                    41:5c:d0:cb:18:7e:15:e8:84:d9:a4:fc:34:c1:fd:
                    2a:50:12:bc:71:34:52:b0:da:93:8f:6d:22:51:cd:
                    f9:26:ce:a8:63:7e:85:87:bf:5e:90:ff:a7:dc:f2:
                    a9:47:46:47:2d:82:ae:ba:6b:43:c6:21:6a:d9:39:
                    13:0f:27:88:aa:14:d4:a9:fe:4c:bb:10:55:8a:33:
                    5e:8b:65:b7:9c:0c:37:3c:5d:a5:8d:43:0f:34:e0:
                    d0:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:2B:CD:87:BF:D5:AC:73:F4:F2:CF:35:6E:EB:86:B7:81:2A:5A:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/08c66b0a-191e-3242-b5b5-ac8ab2fa63da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:8800:7404::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:d2:d2:e5:a1:a0:c1:87:5e:06:39:a4:9d:f5:8c:8e:21:95:
         26:d1:bf:01:9a:10:1e:00:a3:79:d8:7e:b4:45:18:10:84:f9:
         6e:8f:a3:4b:a5:d5:81:03:f1:d0:43:1d:7b:68:19:81:79:15:
         ba:5e:87:12:18:cb:10:2e:94:a7:16:dd:91:92:c4:69:a1:bd:
         cd:e3:24:dd:5e:5a:9d:b3:fd:2b:20:0b:1a:91:2c:bb:fb:e3:
         37:ec:fb:90:42:c5:96:08:e2:09:7a:9f:84:af:8a:3b:41:1d:
         91:c5:ea:89:10:ba:97:87:83:67:37:d6:7a:21:7c:96:5f:d3:
         f8:40:08:7f:41:98:d9:25:08:c0:93:a0:4b:e3:c0:3f:0c:f2:
         20:78:c7:e0:a9:84:ea:0b:5d:60:9f:1a:3a:ca:2c:94:23:d3:
         05:49:73:79:42:14:12:38:41:51:c0:4e:17:65:50:25:86:b8:
         56:29:e7:c5:14:d4:ab:b4:bc:a2:80:89:b8:85:51:ea:0a:85:
         82:5c:d7:44:b0:a6:0e:bd:6b:8c:53:cc:47:2d:31:58:de:fe:
         20:f3:27:3b:33:e2:c4:f1:c5:e9:e7:b9:c1:b1:63:88:21:b9:
         f6:90:f8:f6:07:0b:cc:46:7b:87:d6:f8:8f:76:da:87:b3:09:
         af:16:78:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 02:42:38 2025 by rpki-client