Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a4adf011-2793-3c4b-bba6-9eb63e9b7773.roa
File:                     a4adf011-2793-3c4b-bba6-9eb63e9b7773.roa (raw, json)
Hash identifier:          fLfBXLt0TdqCK26TsQJXuD8VKDfwOl+cqmZT6PhIvWU=
Subject key identifier:   C2:EB:B2:E5:9A:28:8C:4B:23:D9:B6:20:31:26:E8:04:D7:16:20:72
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F43285849B5E421949369AB8042981B48
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a4adf011-2793-3c4b-bba6-9eb63e9b7773.roa
Signing time:             Thu 01 May 2025 16:34:48 +0000
ROA not before:           Thu 01 May 2025 16:34:48 +0000
ROA not after:            Wed 30 Jul 2025 16:34:48 +0000
asID:                     22773
IP address blocks:        2600:880a:d24::/46 maxlen: 46
Validation:               Failed, certificate revoked on Thu 01 May 2025 22:14:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:e4:21:94:93:69:ab:80:42:98:1b:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  1 16:34:48 2025 GMT
            Not After : Jul 30 16:34:48 2025 GMT
        Subject: CN=f470d171-aa63-420c-b43d-7556cec76ff2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:99:61:17:26:ab:d4:dd:c3:90:44:95:80:e2:
                    d3:5d:36:95:d9:a8:30:47:3f:e9:dd:bf:66:2c:cf:
                    5b:6f:fa:4e:77:7b:fd:af:e9:25:2c:be:6f:c8:28:
                    61:0a:06:72:95:38:ee:c0:c1:29:43:16:fe:d9:32:
                    f6:95:cd:8f:f9:7d:b4:e0:83:ff:7a:a5:14:ae:c1:
                    c7:be:a1:0d:3a:02:9d:11:28:4a:0a:ed:41:78:be:
                    e7:f9:1b:a5:8b:38:cf:35:f3:05:72:88:c6:77:83:
                    5e:6e:8b:37:90:0c:2a:a5:94:6c:30:cd:26:76:f3:
                    c8:53:1a:f4:eb:b1:57:7c:39:68:89:30:f5:b7:88:
                    31:f2:23:de:6f:4c:ff:24:67:2a:c6:ef:1e:cc:c7:
                    ca:81:08:e6:0e:09:4c:c6:cc:cb:2c:db:8a:92:43:
                    66:3d:f9:b4:ee:95:12:9d:fa:d3:c3:8c:21:73:ed:
                    b0:cf:b7:25:e2:bb:f4:dc:89:7f:5c:1d:4d:a1:42:
                    2a:f7:a0:d6:ef:57:a0:77:ad:85:c7:8b:fe:82:b2:
                    b1:9f:b4:63:d2:25:08:27:cc:80:d4:6b:08:8e:88:
                    cc:09:06:16:79:b8:0e:7f:0d:c0:43:e2:79:61:bb:
                    51:68:7a:d9:9e:1a:7b:17:5c:3c:12:cd:d7:0b:f3:
                    1b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:EB:B2:E5:9A:28:8C:4B:23:D9:B6:20:31:26:E8:04:D7:16:20:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a4adf011-2793-3c4b-bba6-9eb63e9b7773.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:880a:d24::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:d0:11:28:84:2f:87:40:0c:1c:d6:9e:9b:36:54:1a:9b:5a:
         c5:e5:26:29:a4:fa:4f:45:d0:86:29:be:55:5f:9e:24:cc:dd:
         a6:2b:89:48:2d:2c:fe:aa:6c:0f:f1:81:dc:87:d3:f8:e9:8d:
         7c:06:7e:ba:52:c2:22:5a:dc:df:40:58:8c:bd:f7:e7:d8:2b:
         52:c9:67:4b:0f:4c:bd:25:7d:60:bd:35:3f:05:ae:73:5e:30:
         6d:42:36:c4:59:6c:77:18:a7:6e:0f:3c:6e:1f:2f:46:3f:db:
         42:5e:02:80:b3:33:64:17:60:0d:e8:7e:d1:95:27:f3:c9:a9:
         0a:11:6c:f7:7b:93:cc:7f:da:ea:67:e3:ce:57:7d:af:56:4e:
         cd:de:87:44:e1:4f:1f:ec:f3:70:92:a3:6a:a9:4a:3b:73:7b:
         5f:75:5c:a4:c6:90:d9:11:b3:6c:5b:f0:2b:3c:c8:48:71:44:
         de:f5:0c:4f:32:aa:3c:a8:4b:da:7a:96:51:1e:4e:7f:28:ef:
         be:4b:1f:09:2b:01:29:7d:77:bf:a6:fc:af:be:6c:d4:dd:f2:
         48:f6:c4:97:73:c8:cf:36:25:e4:ce:54:1a:2c:9e:d1:ff:93:
         90:91:a1:32:a9:49:12:51:04:a3:5c:8b:b8:05:49:41:6f:65:
         dc:c3:12:ee
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEm15CGUk2mrgEKYG0gwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MDUwMTE2MzQ0OFoXDTI1MDczMDE2MzQ0OFowLzEtMCsGA1UEAxMk
ZjQ3MGQxNzEtYWE2My00MjBjLWI0M2QtNzU1NmNlYzc2ZmYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJlhFyar1N3DkESVgOLTXTaV2agwRz/p3b9m
LM9bb/pOd3v9r+klLL5vyChhCgZylTjuwMEpQxb+2TL2lc2P+X204IP/eqUUrsHH
vqENOgKdEShKCu1BeL7n+RulizjPNfMFcojGd4Nebos3kAwqpZRsMM0mdvPIUxr0
67FXfDloiTD1t4gx8iPeb0z/JGcqxu8ezMfKgQjmDglMxszLLNuKkkNmPfm07pUS
nfrTw4whc+2wz7cl4rv03Il/XB1NoUIq96DW71egd62Fx4v+grKxn7Rj0iUIJ8yA
1GsIjojMCQYWebgOfw3AQ+J5YbtRaHrZnhp7F1w8Es3XC/Mb+QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFMLrsuWaKIxLI9m2IDEm6ATXFiByMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYTRhZGYwMTEtMjc5My0z
YzRiLWJiYTYtOWViNjNlOWI3NzczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCJgCICg0k
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJjQESiEL4dADBzWnps2VBqbWsXlJimk+k9F0IYpvlVfniTM3aYr
iUgtLP6qbA/xgdyH0/jpjXwGfrpSwiJa3N9AWIy99+fYK1LJZ0sPTL0lfWC9NT8F
rnNeMG1CNsRZbHcYp24PPG4fL0Y/20JeAoCzM2QXYA3oftGVJ/PJqQoRbPd7k8x/
2upn485Xfa9WTs3eh0ThTx/s83CSo2qpSjtze191XKTGkNkRs2xb8Cs8yEhxRN71
DE8yqjyoS9p6llEeTn8o775LHwkrASl9d7+m/K++bNTd8kj2xJdzyM82JeTOVBos
ntH/k5CRoTKpSRJRBKNci7gFSUFvZdzDEu4=
-----END CERTIFICATE-----
Generated at Thu May 15 02:30:52 2025 by rpki-client