Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a557e287-1aff-3eeb-800c-0b3f71ec797d.roa
File:                     a557e287-1aff-3eeb-800c-0b3f71ec797d.roa (raw, json)
Hash identifier:          1shz/bAvfWMQ3QKcV5VkSZH3ofY35bvIKObp6w0+5gY=
Subject key identifier:   D1:10:57:44:3F:2E:72:CD:FC:87:A4:17:33:3D:C8:21:F8:FF:4F:FF
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F43285849B5E42BE52C48BD80197B4380
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a557e287-1aff-3eeb-800c-0b3f71ec797d.roa
Signing time:             Thu 01 May 2025 16:34:52 +0000
ROA not before:           Thu 01 May 2025 16:34:52 +0000
ROA not after:            Wed 30 Jul 2025 16:34:52 +0000
asID:                     22773
IP address blocks:        2600:880a:110c::/46 maxlen: 46
Validation:               Failed, certificate revoked on Thu 01 May 2025 22:14:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:e4:2b:e5:2c:48:bd:80:19:7b:43:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  1 16:34:52 2025 GMT
            Not After : Jul 30 16:34:52 2025 GMT
        Subject: CN=e39db130-8db1-41e5-882e-18fe1e1d547e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:57:72:5d:4c:4a:b1:0e:ae:fb:ac:cf:2a:e4:
                    7e:bb:2d:0e:85:d9:73:b8:08:09:5b:88:c1:1b:a4:
                    56:e2:28:1d:09:b2:85:0c:14:fb:de:c7:9a:c0:3e:
                    0a:4d:44:63:62:26:c8:68:65:5a:23:5f:d9:97:c0:
                    b1:7e:41:f2:4d:c4:44:eb:c4:4c:98:b5:34:d3:2c:
                    b7:c8:87:d1:85:22:21:c8:0e:1b:c2:33:4b:47:f9:
                    34:71:b2:93:f7:ea:5d:e7:56:73:9c:1a:f5:da:cb:
                    d7:f0:ea:8c:23:ff:ee:21:3a:d0:0f:61:e8:00:ca:
                    9b:de:04:00:ce:38:7f:74:f8:bd:4f:2e:94:bf:95:
                    c8:a0:2c:3b:c1:7a:a4:7e:f9:5d:a8:12:bf:fd:6b:
                    b7:39:f4:9d:33:eb:d0:2e:4a:9f:4d:f0:82:bf:07:
                    c8:c1:45:25:d5:2f:8b:ae:bd:ea:85:d8:73:7f:07:
                    6b:26:63:22:59:08:f4:31:69:0f:a7:ac:12:a8:10:
                    70:e9:54:28:69:12:8a:41:a7:3c:bb:dc:5a:6d:c4:
                    81:43:5d:90:0c:9e:8d:c8:5e:88:02:9b:f9:29:6c:
                    0d:7b:fa:e8:44:e2:28:35:d7:ff:65:c6:c3:1f:6a:
                    7d:ea:2c:d3:ab:cb:20:b7:66:c6:72:a9:38:12:e0:
                    63:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:10:57:44:3F:2E:72:CD:FC:87:A4:17:33:3D:C8:21:F8:FF:4F:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a557e287-1aff-3eeb-800c-0b3f71ec797d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:880a:110c::/46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:67:a3:1c:92:be:0d:b5:ba:57:23:df:ca:30:d1:11:3b:69:
         10:e1:de:25:a8:49:a1:fd:c9:e6:ab:88:e2:28:d8:0b:ac:1f:
         6b:7a:99:03:f4:0f:5f:4b:16:34:3e:b6:94:5b:04:ce:16:9f:
         0e:e3:c6:7d:27:38:5d:3c:92:41:f6:88:a3:15:18:c5:80:de:
         00:a7:fb:e1:c5:c4:06:ab:95:d3:b5:63:dc:cc:fa:83:87:58:
         af:47:08:2f:4c:3e:3c:12:59:79:e1:50:64:8d:ad:3d:2e:95:
         7a:a4:34:d1:74:44:6f:d8:07:15:b7:4f:43:a8:dd:f0:d4:b6:
         ee:97:9f:84:96:a0:ae:e5:a0:cc:59:9d:68:82:72:01:95:16:
         3c:cc:d5:a8:9e:2d:66:1d:9a:e9:49:95:f0:35:f2:e9:f8:db:
         e2:f1:3b:90:8e:25:57:49:00:80:90:89:c9:fa:46:a5:b5:c9:
         b7:da:99:f5:56:6b:0e:ac:fe:05:25:1e:64:a7:52:2f:58:86:
         3b:ac:26:e2:64:48:51:c5:58:0d:e4:7b:8d:31:b1:fd:a2:3d:
         ee:62:2d:59:84:73:3d:72:0d:f6:16:c8:51:08:0a:29:14:17:
         fc:35:75:d3:7c:64:e5:72:b6:de:e0:b2:5f:65:68:5e:0d:ee:
         a3:dc:34:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 01:15:28 2025 by rpki-client