Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/93be919b-7751-306d-952b-82d78333dcdd.roa
File:                     93be919b-7751-306d-952b-82d78333dcdd.roa (raw, json)
Hash identifier:          XfcOmVTy9AdEQ5NOdJAHBlBtUTn1l0QS+HnF0YNb5WM=
Subject key identifier:   29:73:FF:31:7C:64:A6:C6:E4:29:A4:9C:5E:B2:1E:23:D8:26:05:68
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F43285849B5E376215E460D05227E5440
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/93be919b-7751-306d-952b-82d78333dcdd.roa
Signing time:             Thu 01 May 2025 16:33:27 +0000
ROA not before:           Thu 01 May 2025 16:33:27 +0000
ROA not after:            Wed 30 Jul 2025 16:33:27 +0000
asID:                     22773
IP address blocks:        2600:8800:8704::/47 maxlen: 47
Validation:               Failed, certificate revoked on Thu 01 May 2025 22:10:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:e3:76:21:5e:46:0d:05:22:7e:54:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  1 16:33:27 2025 GMT
            Not After : Jul 30 16:33:27 2025 GMT
        Subject: CN=b3041bfd-ccb9-49d1-8217-cb388441b539
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:58:e8:0d:fb:53:f2:36:ad:c6:58:97:2d:46:
                    1b:d0:71:dd:e4:d8:3e:fb:5f:fa:bf:29:36:06:53:
                    83:4b:10:de:cd:3b:7b:99:f1:93:22:d5:34:aa:eb:
                    e0:a9:ea:38:d2:8d:63:65:43:29:9f:a6:93:6b:a1:
                    32:12:84:30:c4:b1:10:1b:22:b1:4a:36:eb:75:7b:
                    79:75:48:7e:a4:28:4b:fc:22:c4:43:e1:4f:be:39:
                    26:80:fe:67:d0:8d:fd:5b:60:aa:4d:19:96:a7:b7:
                    09:c8:9a:b2:2e:71:8a:e5:62:e4:ef:cc:bd:22:78:
                    9e:6f:ed:49:4a:b3:2f:7f:4a:ca:12:e0:a6:4b:1b:
                    e7:75:d6:72:39:1f:84:03:92:f3:e2:fa:cc:e5:35:
                    5a:6e:9e:69:1c:af:c0:1d:de:29:78:58:f6:d6:39:
                    67:6d:e8:06:44:60:19:70:90:a6:07:fb:07:a2:fd:
                    9c:0c:08:98:a0:e8:a7:3f:16:63:13:e4:96:75:38:
                    68:a6:af:85:9f:d9:3c:fb:9d:40:d6:9c:c6:a2:6b:
                    b0:e7:54:8e:55:db:aa:31:0c:52:34:ab:b2:cc:43:
                    09:bf:c2:d6:07:13:82:ee:a8:f2:be:b1:87:f1:30:
                    1c:90:a9:ac:ce:f3:a3:2e:8f:23:a4:86:9d:6c:c1:
                    2b:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:73:FF:31:7C:64:A6:C6:E4:29:A4:9C:5E:B2:1E:23:D8:26:05:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/93be919b-7751-306d-952b-82d78333dcdd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:8800:8704::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:a4:2c:9e:69:5b:9c:7b:ac:15:bf:1d:e1:fc:71:20:64:58:
         aa:96:e9:7a:0d:62:b9:ec:57:33:e3:b0:22:97:5a:fa:e6:87:
         69:3d:18:ea:49:7a:6b:01:dc:b3:91:8d:a5:f4:00:c9:84:96:
         cb:79:82:3a:40:31:be:98:69:f5:d0:f3:a3:ed:b4:ca:ff:2c:
         6c:ac:ec:d9:67:13:23:01:c3:5a:1b:cd:30:98:f0:9c:f0:33:
         40:c6:58:cc:5b:c8:36:1e:74:83:57:15:e6:db:88:91:20:f7:
         61:49:ad:b6:8e:4c:95:59:8d:f7:7e:85:ee:ad:4d:54:cf:67:
         c7:d3:13:2e:54:28:93:09:47:04:d2:1a:4d:71:39:39:5a:bc:
         d7:c3:99:28:a5:a2:52:db:74:8f:2b:86:76:30:02:31:ca:9e:
         e9:9f:99:70:75:2d:48:95:63:e8:5d:c3:3e:dd:7e:e6:6a:d8:
         cc:0c:cd:e6:c1:f2:62:75:6f:cb:71:90:03:3d:78:be:be:22:
         b9:2b:56:61:5f:e5:6d:d5:ca:ed:cb:46:d0:d6:c5:de:dc:fd:
         92:5c:d7:5f:71:48:42:5c:1f:92:67:e4:5e:eb:e1:b1:ed:07:
         3f:1c:1e:4a:19:1d:64:66:2c:77:4d:dc:9b:49:39:13:ad:bd:
         c1:b4:8d:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 11:35:41 2025 by rpki-client