Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c0b65892-a6c0-3e30-b957-5c0f0066b6cf.roa
File:                     c0b65892-a6c0-3e30-b957-5c0f0066b6cf.roa (raw, json)
Hash identifier:          0kl3yfzgW0WwaigZVzQPfHvt3M3m+BF/r0YMC1tdgHE=
Subject key identifier:   CA:EB:B0:3E:FB:F7:0B:E4:BD:CE:A6:A5:56:95:47:6E:8A:B4:9A:58
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F43285849B5E294B9F3834E6F00D50028
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c0b65892-a6c0-3e30-b957-5c0f0066b6cf.roa
Signing time:             Thu 01 May 2025 16:31:40 +0000
ROA not before:           Thu 01 May 2025 16:31:40 +0000
ROA not after:            Wed 30 Jul 2025 16:31:40 +0000
asID:                     22773
IP address blocks:        2600:8800:2200::/41 maxlen: 41
Validation:               Failed, certificate revoked on Thu 01 May 2025 22:03:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:e2:94:b9:f3:83:4e:6f:00:d5:00:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  1 16:31:40 2025 GMT
            Not After : Jul 30 16:31:40 2025 GMT
        Subject: CN=1b348eb0-bc5a-426c-95e1-658cde1ad877
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e4:fe:3a:44:5c:06:60:ef:29:c9:1d:4e:76:
                    1c:8d:8f:6a:22:f5:11:8e:9a:e4:72:cc:c6:f1:a6:
                    dc:fd:31:91:97:67:88:30:ab:58:a3:61:37:42:18:
                    57:b2:29:04:cf:aa:3d:8c:95:ee:ed:b4:26:61:f9:
                    bf:0c:b2:4b:55:73:68:16:90:20:2c:c0:25:e2:44:
                    84:22:01:0b:7e:39:93:1b:30:d1:2e:04:b8:dd:0a:
                    95:71:e6:a8:16:cf:c7:37:6b:e2:60:89:1d:ce:7b:
                    3e:ca:4e:84:89:a6:f3:fd:24:51:97:64:7d:4f:0c:
                    cc:2e:7e:ed:ab:fd:e1:50:b1:e2:0d:f9:c4:e3:20:
                    30:8c:59:8c:60:05:4a:53:ca:86:ca:43:80:3d:51:
                    aa:f5:f1:32:27:09:fd:4b:02:e7:cf:c5:c8:51:ca:
                    75:75:aa:7d:04:e5:fb:07:45:4e:ca:b2:ba:31:40:
                    69:7d:10:c8:1b:12:ea:21:ce:94:e3:1a:e2:7c:47:
                    0a:6d:38:fb:b3:47:89:ee:94:81:8e:63:04:b1:f0:
                    2d:bd:93:5d:7b:ae:4e:87:5f:79:05:09:a9:d6:85:
                    08:46:58:38:ae:9c:9a:ae:32:cd:7d:ba:5d:aa:f4:
                    6c:35:f4:ff:c3:75:e3:ad:d0:9b:cc:4f:8f:86:3c:
                    e1:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:EB:B0:3E:FB:F7:0B:E4:BD:CE:A6:A5:56:95:47:6E:8A:B4:9A:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c0b65892-a6c0-3e30-b957-5c0f0066b6cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:8800:2200::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:f7:d2:7f:2a:0a:5e:4d:9a:8e:e0:cd:49:be:ea:ce:78:3b:
         fd:f2:b4:43:aa:8a:0f:01:12:f7:e0:34:ae:c7:f0:61:ac:4d:
         5b:be:2a:f2:28:86:21:62:d0:e6:42:c0:5e:22:5f:d5:c5:a1:
         eb:ca:49:7a:eb:a3:81:fe:6b:31:52:8b:7b:0c:ed:44:d7:9c:
         7b:5c:41:13:fc:db:c2:b8:45:5e:17:37:f7:ac:3e:a3:24:6e:
         4c:12:90:17:29:e2:a3:ec:54:4d:72:78:87:62:f9:42:e7:ff:
         52:d6:68:07:09:10:4a:a7:75:83:db:48:8f:3f:af:e7:01:b8:
         15:bd:1b:26:52:77:bf:2d:55:05:94:10:9e:c8:0e:3c:18:ed:
         f4:4f:27:a3:cf:d4:20:07:1d:2c:43:f6:f5:07:95:1f:95:47:
         53:dc:62:35:98:5e:16:40:be:29:a3:a5:ff:ea:ff:c4:ab:d9:
         1c:81:42:6f:b1:63:d7:68:2e:85:6a:fd:aa:bb:d3:d4:5d:69:
         ee:65:24:b6:50:d7:e7:3a:b7:8d:af:70:d8:b0:52:ea:e9:8e:
         64:db:db:71:36:19:aa:f3:53:7b:e1:25:56:bb:2e:1f:99:c1:
         62:cc:8e:1a:e1:a9:7d:84:64:a8:17:f9:c4:06:83:21:4a:bb:
         c4:76:2c:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 07:56:53 2025 by rpki-client