Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/08bf980a-30d8-4eb6-80c5-4a9c8d5a352c/6a5cc74a-ce9d-334f-aff6-45fdf1a1e206.roa
File:                     6a5cc74a-ce9d-334f-aff6-45fdf1a1e206.roa (raw, json)
Hash identifier:          NWDpgSLfgu4iFjdMoEn0m/0YYczzyWZ0D1xARUYuOA0=
Subject key identifier:   DD:9B:FD:94:5E:AE:D3:AF:E3:29:8B:E1:D4:EC:21:6A:1C:B5:B5:49
Certificate issuer:       /CN=08bf980a-30d8-4eb6-80c5-4a9c8d5a352c
Certificate serial:       010D0C9F4328584A26670F7A05CD4984DD89FA5C
Authority key identifier: 30:F3:CE:9A:E5:60:CE:D9:A7:12:0F:90:BD:88:BA:C2:B9:72:96:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/08bf980a-30d8-4eb6-80c5-4a9c8d5a352c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/08bf980a-30d8-4eb6-80c5-4a9c8d5a352c/6a5cc74a-ce9d-334f-aff6-45fdf1a1e206.roa
Signing time:             Thu 05 Jun 2025 16:12:26 +0000
ROA not before:           Thu 05 Jun 2025 16:12:26 +0000
ROA not after:            Wed 03 Sep 2025 16:12:26 +0000
asID:                     401205
IP address blocks:        2620:d8:e000::/48 maxlen: 52
Validation:               Failed, certificate revoked on Tue 17 Jun 2025 19:33:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:26:67:0f:7a:05:cd:49:84:dd:89:fa:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08bf980a-30d8-4eb6-80c5-4a9c8d5a352c
        Validity
            Not Before: Jun  5 16:12:26 2025 GMT
            Not After : Sep  3 16:12:26 2025 GMT
        Subject: CN=fc24600b-3cf9-4ce1-bc13-2b0d09ea007e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:3e:8b:84:c2:87:dc:42:76:98:4c:94:4e:72:
                    c1:3b:3c:a3:89:ca:2b:89:a2:d7:92:ca:9e:22:b9:
                    4c:3b:f7:62:f2:1c:47:3e:6a:d6:2f:e4:13:44:5b:
                    5a:a3:18:a5:44:e9:d3:88:e3:58:c8:00:47:9a:a1:
                    31:95:10:77:d4:d3:61:80:0b:f1:98:ef:61:04:57:
                    3f:3a:d8:47:77:8b:ad:36:0c:b5:62:8a:6d:4b:e9:
                    27:a0:69:2c:13:b9:7b:61:54:c3:0b:29:5c:3a:f2:
                    9e:dd:5d:31:a8:fc:0b:85:fa:a1:d9:68:1a:a0:3f:
                    6c:66:17:9c:ef:62:7f:fc:73:12:e1:c5:00:83:48:
                    42:89:f8:62:8a:af:91:10:33:d7:49:05:6c:36:b8:
                    65:21:5e:66:7b:5d:e5:8c:63:d5:e7:97:0b:70:e1:
                    20:ed:ad:f0:f7:22:c5:a6:33:bd:6c:f8:bc:7f:2f:
                    84:dc:1b:aa:52:82:d1:78:e6:5b:4c:24:84:1a:6d:
                    90:6e:21:39:ae:e6:e4:59:b4:61:eb:e4:d6:9b:50:
                    35:6a:7f:f6:36:fb:60:de:f2:9e:eb:3e:25:8f:70:
                    8a:c7:6b:e8:1f:cc:d4:61:df:14:f2:e4:ba:78:a8:
                    3a:e2:e6:4a:e2:ae:ae:e9:58:af:c9:11:fb:49:37:
                    58:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:9B:FD:94:5E:AE:D3:AF:E3:29:8B:E1:D4:EC:21:6A:1C:B5:B5:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/08bf980a-30d8-4eb6-80c5-4a9c8d5a352c/6a5cc74a-ce9d-334f-aff6-45fdf1a1e206.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/08bf980a-30d8-4eb6-80c5-4a9c8d5a352c/08bf980a-30d8-4eb6-80c5-4a9c8d5a352c.crl

            X509v3 Authority Key Identifier:
                keyid:30:F3:CE:9A:E5:60:CE:D9:A7:12:0F:90:BD:88:BA:C2:B9:72:96:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/08bf980a-30d8-4eb6-80c5-4a9c8d5a352c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:d8:e000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:34:78:c8:24:55:a8:20:0a:04:6d:d7:66:55:28:a4:bd:ea:
         04:d1:36:f5:25:ac:48:48:03:92:be:41:fa:af:b6:41:5a:dc:
         67:d8:0b:e2:72:94:1b:32:fb:41:ca:bb:cc:7b:d3:23:53:1b:
         0c:ef:a5:21:f9:17:9b:ad:ec:b8:af:cd:b1:0a:71:29:f1:ee:
         59:94:c0:36:ab:0e:bb:7b:05:8e:1e:50:a8:72:1f:91:e0:a8:
         f1:f5:13:ef:0c:59:c5:82:6d:55:cd:8d:c3:66:1b:a3:4f:98:
         ab:13:4f:0a:26:63:ab:3b:c4:19:ef:93:75:a0:7c:03:8f:4e:
         6b:40:dd:16:ea:c3:19:f3:1a:ad:87:10:01:c4:c3:61:e0:fd:
         7e:ac:e1:d5:5e:5f:36:50:90:86:cd:97:13:78:a5:49:71:e4:
         27:f1:43:d0:bb:e1:96:e8:f2:9e:fa:88:18:17:f9:8e:c6:df:
         19:d1:d4:38:73:8f:6f:67:99:35:c7:aa:60:08:75:fd:b5:47:
         78:c1:96:1e:49:1d:ee:e8:e3:cc:3b:79:07:36:df:0c:57:76:
         f8:9d:83:89:dd:4d:26:28:96:0b:bc:5f:e5:32:e3:fd:e8:53:
         ad:55:c5:ba:38:d2:50:dc:d6:d2:67:97:94:45:fc:2a:c2:44:
         e1:cb:f7:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 21:14:43 2025 by rpki-client