Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2ccbb696-c1fa-33d5-bbea-82ebb03a2cdf.roa
File:                     2ccbb696-c1fa-33d5-bbea-82ebb03a2cdf.roa (raw, json)
Hash identifier:          Z6TXm3TmFQkrG+6z4Jo4/dhv9Amr2SY5kVgiipFyiGw=
Subject key identifier:   E4:F7:2B:8C:3F:C6:4C:2D:BE:30:E0:8B:5C:DD:A0:82:BF:A0:EA:D1
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F43285849B5E2BAEB53146FB3D98BFB80
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2ccbb696-c1fa-33d5-bbea-82ebb03a2cdf.roa
Signing time:             Thu 01 May 2025 16:31:58 +0000
ROA not before:           Thu 01 May 2025 16:31:58 +0000
ROA not after:            Wed 30 Jul 2025 16:31:58 +0000
asID:                     22773
IP address blocks:        2600:8800:3180::/41 maxlen: 41
Validation:               Failed, certificate revoked on Thu 01 May 2025 22:05:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:e2:ba:eb:53:14:6f:b3:d9:8b:fb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  1 16:31:58 2025 GMT
            Not After : Jul 30 16:31:58 2025 GMT
        Subject: CN=463d95fa-dabd-4e07-9035-01c93c0b7a61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:bb:88:21:cf:c4:f0:c9:f9:b1:71:ab:93:36:
                    53:80:1d:b7:51:41:67:d3:10:c0:fa:ce:5b:ce:2a:
                    b4:2e:a7:40:42:21:44:16:f4:44:9f:79:1c:6e:75:
                    72:e0:55:04:0a:6e:02:d5:83:94:7d:48:7d:ef:5c:
                    91:76:db:a4:53:18:22:13:dd:4f:e2:32:ac:ca:75:
                    f5:93:9e:d2:fc:6e:b1:57:fd:73:42:0c:4f:61:ca:
                    ae:59:8c:08:67:97:a7:ef:d1:a8:c1:f1:76:60:d2:
                    1a:ce:49:2f:ad:e1:8f:ac:b4:9a:07:5d:88:06:ec:
                    8a:d4:4d:ef:d7:f2:50:1f:21:cf:43:e6:87:c6:a0:
                    3e:a4:3c:2c:75:9e:fa:c8:89:b2:c9:7e:78:4e:8d:
                    2a:43:09:83:b0:c5:f8:eb:44:77:d9:4c:e7:ca:5d:
                    cc:6b:da:c6:e9:a4:0e:1b:02:0c:83:1e:b0:60:f7:
                    30:cc:6b:e8:5d:dc:16:64:3b:15:72:0e:38:cd:09:
                    3d:51:bc:13:e7:2f:7f:4f:cd:dc:f4:86:84:b3:1f:
                    15:ba:37:08:2a:e0:90:dd:3a:84:57:ab:0e:22:95:
                    d4:83:d3:bd:7b:71:5d:12:2e:9c:49:94:03:46:42:
                    37:ff:2d:d2:ef:c6:9e:71:f6:74:ec:8d:ee:67:df:
                    d9:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:F7:2B:8C:3F:C6:4C:2D:BE:30:E0:8B:5C:DD:A0:82:BF:A0:EA:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2ccbb696-c1fa-33d5-bbea-82ebb03a2cdf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:8800:3180::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:02:3a:ea:39:92:37:c2:f3:06:d7:6a:37:3e:54:db:40:05:
         e7:5d:c8:ea:ee:6d:61:f2:a6:07:f6:e4:a4:52:c3:99:80:14:
         1e:88:d0:e2:cf:b5:c0:15:da:73:c9:0f:f4:94:11:04:23:98:
         73:91:21:cc:36:5a:4d:48:15:9e:be:88:e6:4e:28:e7:77:42:
         2a:ca:28:d5:11:3e:e1:1d:ef:20:f8:d0:07:3e:82:12:9e:3a:
         ba:26:92:20:66:1d:89:40:f5:e2:75:34:9b:ce:cd:fe:b9:a5:
         4a:1a:65:ed:64:68:03:e6:54:76:64:a3:d2:85:8e:e9:5c:49:
         e4:71:be:ee:06:f1:57:03:27:fa:e2:13:f1:4f:10:e1:31:dd:
         14:00:e8:dd:b0:ac:25:07:73:a4:d2:c7:33:4b:3e:4a:c4:2b:
         c3:5a:30:f8:38:12:b7:45:e9:3b:38:a7:66:41:11:ad:e7:9a:
         3a:72:bc:b3:03:f3:d9:a6:a3:d3:f7:8e:af:7e:16:26:9c:d9:
         b6:05:b6:e5:88:3d:64:9e:e0:00:d4:87:a7:b3:22:05:de:f6:
         99:02:a4:dc:bc:1f:2b:c2:cc:53:f9:e1:fe:d2:21:4b:ab:34:
         43:6d:ec:82:c3:e5:0f:28:e8:4f:b2:c5:58:87:70:cb:8a:66:
         82:b2:32:6b
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEm14rrrUxRvs9mL+4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MDUwMTE2MzE1OFoXDTI1MDczMDE2MzE1OFowLzEtMCsGA1UEAxMk
NDYzZDk1ZmEtZGFiZC00ZTA3LTkwMzUtMDFjOTNjMGI3YTYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhruIIc/E8Mn5sXGrkzZTgB23UUFn0xDA+s5b
ziq0LqdAQiFEFvREn3kcbnVy4FUECm4C1YOUfUh971yRdtukUxgiE91P4jKsynX1
k57S/G6xV/1zQgxPYcquWYwIZ5en79GowfF2YNIazkkvreGPrLSaB12IBuyK1E3v
1/JQHyHPQ+aHxqA+pDwsdZ76yImyyX54To0qQwmDsMX460R32Uznyl3Ma9rG6aQO
GwIMgx6wYPcwzGvoXdwWZDsVcg44zQk9UbwT5y9/T83c9IaEsx8VujcIKuCQ3TqE
V6sOIpXUg9O9e3FdEi6cSZQDRkI3/y3S78aecfZ07I3uZ9/ZuQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFOT3K4w/xkwtvjDgi1zdoIK/oOrRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMmNjYmI2OTYtYzFmYS0z
M2Q1LWJiZWEtODJlYmIwM2EyY2RmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgCIADGA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGoCOuo5kjfC8wbXajc+VNtABeddyOrubWHypgf25KRSw5mAFB6I
0OLPtcAV2nPJD/SUEQQjmHORIcw2Wk1IFZ6+iOZOKOd3QirKKNURPuEd7yD40Ac+
ghKeOromkiBmHYlA9eJ1NJvOzf65pUoaZe1kaAPmVHZko9KFjulcSeRxvu4G8VcD
J/riE/FPEOEx3RQA6N2wrCUHc6TSxzNLPkrEK8NaMPg4ErdF6Ts4p2ZBEa3nmjpy
vLMD89mmo9P3jq9+Fiac2bYFtuWIPWSe4ADUh6ezIgXe9pkCpNy8HyvCzFP54f7S
IUurNENt7ILD5Q8o6E+yxViHcMuKZoKyMms=
-----END CERTIFICATE-----
Generated at Thu May 15 01:12:08 2025 by rpki-client