Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7a3987ef-5d46-3d17-a03f-ad9f71b13344.roa
File:                     7a3987ef-5d46-3d17-a03f-ad9f71b13344.roa (raw, json)
Hash identifier:          WI+9QVIuEsdktJBkkRyQ1fz8oSZXpb5XbhO9uivSh9k=
Subject key identifier:   28:F4:6F:77:8B:D1:B4:09:B7:A1:A7:2A:9C:BD:CF:59:38:FA:47:F3
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F43285849B5E2EFEED719E9A750F4F100
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7a3987ef-5d46-3d17-a03f-ad9f71b13344.roa
Signing time:             Thu 01 May 2025 16:32:23 +0000
ROA not before:           Thu 01 May 2025 16:32:23 +0000
ROA not after:            Wed 30 Jul 2025 16:32:23 +0000
asID:                     22773
IP address blocks:        2600:8800:4d0c::/47 maxlen: 47
Validation:               Failed, certificate revoked on Thu 01 May 2025 22:06:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:e2:ef:ee:d7:19:e9:a7:50:f4:f1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  1 16:32:23 2025 GMT
            Not After : Jul 30 16:32:23 2025 GMT
        Subject: CN=3aa96979-1cd1-4282-a7f5-11d83042d2b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:4d:6b:32:f2:8b:fe:08:b7:12:97:52:12:43:
                    d8:14:db:98:98:b9:2f:4b:1a:94:56:7c:97:73:6c:
                    a9:90:b1:d1:7c:b2:fd:87:f4:ce:8f:00:bd:79:fe:
                    33:3d:55:06:92:a5:73:34:dc:ea:98:85:da:e0:a8:
                    d0:58:bf:2f:29:e9:04:03:0b:7a:8c:94:07:2f:0c:
                    00:6b:97:77:bb:fa:ab:68:6e:a9:eb:d5:d0:bb:39:
                    1a:73:95:b3:f5:7b:e8:4e:a8:1a:d8:27:c9:81:01:
                    94:43:40:2a:0b:1b:86:16:66:67:df:32:fe:a1:31:
                    06:6a:dd:96:5c:55:2e:6f:1c:3b:1b:98:72:cf:9a:
                    ee:42:12:d5:c8:72:53:5e:6c:7e:54:8f:7f:21:d0:
                    de:7e:6f:28:b8:20:e5:ed:94:70:23:86:d5:70:f7:
                    7d:77:8a:c7:56:a2:a1:ae:d1:f4:ed:aa:d0:e4:95:
                    65:ef:22:e6:47:a0:18:0d:45:9a:4f:33:fd:e9:87:
                    22:3f:ca:8f:64:55:d6:19:fa:c8:db:4c:9b:7c:06:
                    9f:75:8c:dc:00:3f:51:87:af:aa:78:ed:89:c6:a6:
                    cd:c9:71:32:a7:75:b2:39:c2:dc:20:ae:f2:09:0b:
                    54:32:91:6b:94:34:5f:23:57:3a:2a:1a:9d:6f:a5:
                    31:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:F4:6F:77:8B:D1:B4:09:B7:A1:A7:2A:9C:BD:CF:59:38:FA:47:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7a3987ef-5d46-3d17-a03f-ad9f71b13344.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:8800:4d0c::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:f0:ed:bd:d3:6b:9a:c1:cb:47:1a:14:33:9f:22:f2:a8:d0:
         a0:f8:40:d4:bd:41:1d:93:ff:60:69:f3:c6:48:1b:d3:74:3c:
         cc:27:5d:2a:4c:66:f5:bc:a6:ad:26:b8:2a:ac:cb:ac:20:4c:
         a1:81:00:c5:b0:9d:fa:df:8e:1c:ce:e7:59:4e:bb:64:21:0e:
         2e:00:18:57:d5:ea:ba:30:77:3d:90:ad:f3:d0:23:34:8b:26:
         8e:a7:26:0a:53:47:6c:97:9c:b1:a7:58:e3:9a:d9:ac:32:18:
         b4:f4:fc:2a:06:ad:98:7d:d1:58:43:6b:7c:f5:50:ad:c4:4f:
         bc:58:29:f2:d8:98:80:d7:a9:58:02:49:ed:b5:d7:a5:96:16:
         8b:70:c8:da:a0:1f:bf:38:34:73:2d:c5:58:67:49:9c:b2:ad:
         0b:70:48:0c:4b:60:22:a2:30:51:d2:91:2a:2a:f0:6e:b6:97:
         6d:d1:f0:a2:92:dd:ce:e2:7e:f1:52:98:37:c2:73:1f:d7:45:
         c6:cb:dd:6a:13:7c:fb:32:af:5b:e6:07:be:49:3b:6e:e3:2e:
         ef:f4:bf:12:08:69:f8:b1:13:1e:17:f1:c2:40:72:e3:1d:2a:
         17:7f:23:1c:c4:94:a4:20:bc:6f:4b:f6:34:77:2c:cc:9f:1a:
         6b:21:57:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 05:02:09 2025 by rpki-client