Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ab80ce08-b5e3-37c3-84db-5b79b2451e2a.roa
File:                     ab80ce08-b5e3-37c3-84db-5b79b2451e2a.roa (raw, json)
Hash identifier:          QoplXxcZOyZ8jehxqB7zeo20rw3NlzYsgDjMj4hi6tk=
Subject key identifier:   4F:4D:E8:40:46:BD:07:29:D8:48:54:DF:C6:3A:B2:68:7C:A4:B5:FF
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F43285849B5E375358D9857C8C2F8ACC0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ab80ce08-b5e3-37c3-84db-5b79b2451e2a.roa
Signing time:             Thu 01 May 2025 16:33:26 +0000
ROA not before:           Thu 01 May 2025 16:33:26 +0000
ROA not after:            Wed 30 Jul 2025 16:33:26 +0000
asID:                     22773
IP address blocks:        2600:8800:86be::/47 maxlen: 47
Validation:               Failed, certificate revoked on Thu 01 May 2025 22:10:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:e3:75:35:8d:98:57:c8:c2:f8:ac:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  1 16:33:26 2025 GMT
            Not After : Jul 30 16:33:26 2025 GMT
        Subject: CN=fd27a494-1242-44fe-b424-53c72d2046f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:2e:b9:80:3f:c7:fc:b2:50:47:2a:8e:5d:45:
                    3e:9e:61:34:ab:de:7d:e7:cb:ce:f8:e8:82:6e:f1:
                    6d:db:e2:e9:e7:aa:ad:5c:c2:b3:91:34:e0:18:b2:
                    ba:7a:e5:e5:2a:db:15:e2:cc:fa:4b:30:d9:96:57:
                    d2:27:e8:11:e5:81:8f:70:e4:a2:bb:a4:9b:f6:cd:
                    09:4c:be:5a:c8:70:ea:cf:a9:15:c9:88:51:04:6a:
                    12:45:35:63:ca:cc:66:13:0e:ff:23:40:0b:dd:48:
                    82:16:95:16:41:4b:18:b1:f1:de:47:02:f3:fa:ea:
                    d7:7e:62:4b:b5:f9:5e:41:cb:32:a4:b5:84:83:29:
                    9a:7e:91:4b:3a:f0:e4:a3:38:ad:a8:d8:63:2b:a2:
                    42:fc:33:43:66:32:f8:74:92:b7:ab:47:d2:52:f3:
                    67:d1:04:1e:a4:64:39:fb:f3:48:bd:ee:a0:73:b4:
                    30:92:b0:da:4c:7a:f3:ad:8c:3d:11:1f:05:a9:ec:
                    f1:4b:53:f1:de:9c:bf:4f:30:d1:50:e8:4c:1b:a4:
                    7b:47:c7:5a:c6:5c:76:d4:9e:06:d6:40:1c:93:ba:
                    36:24:09:fb:9f:fa:5b:5a:15:85:61:41:b0:a9:55:
                    74:21:46:91:45:6a:6f:03:bf:c8:20:c4:d9:27:75:
                    74:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:4D:E8:40:46:BD:07:29:D8:48:54:DF:C6:3A:B2:68:7C:A4:B5:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ab80ce08-b5e3-37c3-84db-5b79b2451e2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:8800:86be::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:e4:b1:9c:ba:d8:bd:0b:16:48:5d:ae:ef:92:c4:ad:09:d3:
         c6:fe:23:6a:e9:31:21:22:20:32:30:aa:25:25:1a:63:38:65:
         1b:2d:36:a7:3b:a8:ec:45:cb:db:a4:53:20:8f:d8:99:f3:4a:
         4c:6d:af:47:7f:1d:b8:fc:dd:51:07:86:b9:86:e7:a4:ba:d0:
         39:4b:23:07:7b:31:68:69:7b:0d:46:c0:2d:6b:37:8d:1f:e2:
         88:aa:68:b3:8c:f2:05:35:b8:f8:d3:db:0a:32:f2:61:63:97:
         1e:7e:9e:fe:f4:24:e2:7f:7c:43:fe:74:29:06:9a:2e:62:5f:
         6b:25:ef:84:1f:a4:d0:68:c1:b2:cb:2d:2d:4a:57:e4:49:bc:
         94:78:ff:2b:8e:07:47:6f:26:d2:1a:f8:1e:f8:07:f0:7e:ce:
         0e:6e:7e:cb:a8:26:ec:2a:ce:76:14:ed:f7:ea:52:4c:76:db:
         ba:c9:1d:94:e9:29:70:34:af:bd:60:e1:95:c2:e5:4d:8e:3c:
         7d:db:67:ff:b3:90:d5:22:6a:1d:44:44:69:a0:b1:80:7c:28:
         37:f0:55:ba:09:6b:15:c6:c3:02:8b:89:b7:57:ec:eb:3d:cb:
         6c:8f:d1:bf:c6:a5:3a:3f:c5:d1:df:7e:a6:82:16:c7:34:86:
         8c:09:61:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 01:16:40 2025 by rpki-client