Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8/77ee0073-8171-3814-a5bb-bff5a260dede.roa
File:                     77ee0073-8171-3814-a5bb-bff5a260dede.roa (raw, json)
Hash identifier:          kUzVeY3OpBTDORHxnlB8SV/g4zzFIVUV7OviDjdm6Vo=
Subject key identifier:   62:B7:65:08:11:32:6B:77:EC:17:37:CC:18:47:09:9E:2F:D3:AD:20
Certificate issuer:       /CN=a550f64c-4633-45f0-b896-3ac7bdf7e5b8
Certificate serial:       010D0C9F43285849B834414BE68A39EFF6D73F40
Authority key identifier: D1:B2:BF:09:00:99:CE:ED:2B:1A:71:E6:A3:98:5A:61:5E:47:3E:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8/77ee0073-8171-3814-a5bb-bff5a260dede.roa
Signing time:             Fri 02 May 2025 12:27:51 +0000
ROA not before:           Fri 02 May 2025 12:27:51 +0000
ROA not after:            Thu 31 Jul 2025 12:27:51 +0000
asID:                     14298
IP address blocks:        2620:117:5200::/40 maxlen: 48
Validation:               Failed, certificate revoked on Wed 07 May 2025 11:56:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b8:34:41:4b:e6:8a:39:ef:f6:d7:3f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a550f64c-4633-45f0-b896-3ac7bdf7e5b8
        Validity
            Not Before: May  2 12:27:51 2025 GMT
            Not After : Jul 31 12:27:51 2025 GMT
        Subject: CN=9d7135b9-2751-4696-8239-34d360190a44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f6:ac:52:21:8f:ad:84:ee:b8:c2:e8:e2:ba:
                    22:7c:5b:f6:30:6a:a8:03:1b:a8:fa:ce:bc:ab:dd:
                    38:34:7d:92:90:35:d5:51:d4:79:d6:d9:ac:9b:62:
                    08:d8:78:17:ab:98:9f:7d:d3:c2:95:b1:48:2b:10:
                    6b:21:ec:42:60:e6:7d:89:9b:1b:5a:be:f4:5f:f2:
                    42:06:54:23:fb:a1:76:fa:c3:0f:15:80:64:13:5b:
                    ed:ca:5a:57:d5:74:ae:19:53:79:92:88:2d:ae:2c:
                    cb:70:fa:45:4e:ea:57:a5:6e:0d:dc:7a:83:05:44:
                    1b:fc:11:2f:d1:99:30:2a:02:06:39:1a:83:96:1d:
                    25:e4:ea:66:f9:4f:48:f3:08:d0:07:7c:94:fe:bd:
                    c2:62:be:64:da:5b:63:81:54:ae:79:b6:c7:0e:ab:
                    76:51:d1:66:38:e8:6d:6e:eb:ef:00:11:47:b5:40:
                    1c:a6:ae:5b:e1:dd:63:3a:49:bc:82:00:a6:e4:57:
                    57:54:6e:09:c3:50:32:e0:63:8b:83:8a:9b:c9:19:
                    22:8c:e4:ca:31:05:23:30:51:32:67:d0:6e:6c:57:
                    a7:6e:e0:3c:b9:cc:b2:db:0c:65:99:5d:31:9f:d3:
                    ab:69:c0:ea:d0:1b:8e:1e:68:df:6e:4c:d3:3c:06:
                    61:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:B7:65:08:11:32:6B:77:EC:17:37:CC:18:47:09:9E:2F:D3:AD:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8/77ee0073-8171-3814-a5bb-bff5a260dede.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8/a550f64c-4633-45f0-b896-3ac7bdf7e5b8.crl

            X509v3 Authority Key Identifier:
                keyid:D1:B2:BF:09:00:99:CE:ED:2B:1A:71:E6:A3:98:5A:61:5E:47:3E:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a550f64c-4633-45f0-b896-3ac7bdf7e5b8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:117:5200::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:f8:9d:b6:cb:11:9b:9c:08:2a:12:7e:b1:08:20:48:07:75:
         11:87:6b:91:d9:f8:98:2f:71:2f:d0:ac:57:7e:bc:78:9f:bc:
         5c:dd:e6:fd:9e:bf:b7:75:e4:2a:b6:8e:f0:bd:e9:17:3c:1a:
         d5:1b:f7:17:45:9c:40:5a:72:92:47:ad:ec:1e:f5:f5:ea:f3:
         ec:55:4a:d6:26:43:8c:13:29:7c:97:41:2a:62:87:0b:6d:da:
         3e:b6:db:5f:4b:de:37:93:20:79:b8:93:34:3a:b5:b1:b0:31:
         9a:3f:ca:28:8d:61:49:7e:db:97:79:48:8c:33:08:6c:dc:1c:
         7c:70:a1:3c:5b:59:10:b2:46:ce:b6:57:57:e1:26:39:8c:4b:
         3a:71:3a:43:18:9f:d4:84:95:15:65:ae:d0:6f:94:05:55:af:
         35:56:67:23:40:67:cb:a0:27:e4:be:a2:33:c5:96:7b:cc:bf:
         4c:2c:5f:3c:ff:08:f8:ad:32:5b:59:2f:96:a6:a4:15:c1:47:
         37:16:e7:77:e9:43:ce:26:03:67:0f:eb:5e:83:78:ed:72:2a:
         c6:4f:7a:84:1a:fa:46:ea:79:7e:ab:35:f4:48:5d:c8:b6:fe:
         68:bd:23:f1:ae:c5:05:82:38:67:05:db:50:60:87:4a:1f:bb:
         90:f2:98:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 02:27:20 2025 by rpki-client