Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/757305d9-2b1e-4783-945b-e7d6cc2e49a8/42532a02-6326-3342-93eb-ab5631e34ae6.roa
File:                     42532a02-6326-3342-93eb-ab5631e34ae6.roa (raw, json)
Hash identifier:          uBDtX+UWDSTfx0uKCpOTLTJLp9SqjExj/jIVwyeJSxk=
Subject key identifier:   3D:F9:44:34:48:CA:74:35:A1:24:F2:D9:78:07:10:F6:D4:E4:03:50
Certificate issuer:       /CN=757305d9-2b1e-4783-945b-e7d6cc2e49a8
Certificate serial:       010D0C9F43285849ABC6F4EDB6602F80F7916C00
Authority key identifier: 53:C3:B8:6A:90:10:C7:27:BD:73:12:C9:5F:1C:B1:B7:D8:AC:0D:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/757305d9-2b1e-4783-945b-e7d6cc2e49a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/757305d9-2b1e-4783-945b-e7d6cc2e49a8/42532a02-6326-3342-93eb-ab5631e34ae6.roa
Signing time:             Mon 28 Apr 2025 01:37:56 +0000
ROA not before:           Mon 28 Apr 2025 01:37:56 +0000
ROA not after:            Sun 27 Jul 2025 01:37:56 +0000
asID:                     400941
IP address blocks:        2602:f66b:3::/48 maxlen: 48
Validation:               Failed, certificate revoked on Wed 07 May 2025 01:35:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ab:c6:f4:ed:b6:60:2f:80:f7:91:6c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=757305d9-2b1e-4783-945b-e7d6cc2e49a8
        Validity
            Not Before: Apr 28 01:37:56 2025 GMT
            Not After : Jul 27 01:37:56 2025 GMT
        Subject: CN=9b322ac8-47eb-4e6a-8745-cda592b9aea0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c5:80:97:7e:80:d8:d9:55:82:9d:ea:1e:27:
                    ac:08:cd:7f:cb:02:3b:ad:1b:77:17:fe:13:d7:90:
                    d5:57:c6:0b:29:1c:95:33:36:d5:30:4f:86:2b:9d:
                    a3:d5:c4:49:11:d2:b9:cc:d3:bb:e8:55:38:5f:3e:
                    a0:58:92:7f:51:6f:e9:dd:77:97:c0:6c:18:75:09:
                    02:93:df:33:3c:1d:60:01:cf:86:02:47:3b:5a:b0:
                    1f:b0:a4:c5:e4:33:7a:28:51:1d:92:41:ce:e1:2a:
                    94:3b:1c:16:66:e4:fc:6f:ad:4e:10:46:e9:da:e9:
                    bc:3e:65:45:68:22:a8:b4:bc:ce:d9:75:9b:cf:08:
                    b7:4b:44:fd:e8:c1:60:28:49:99:e4:72:01:94:c0:
                    1e:22:59:d1:0e:7a:c1:72:86:a5:d2:c9:92:2a:b9:
                    44:57:b1:11:21:fb:a6:ac:a4:51:da:2c:72:12:b5:
                    74:d9:c9:e3:81:f6:f5:46:cf:60:e8:93:83:c4:f8:
                    1f:4d:37:75:06:c6:f7:33:db:57:50:8d:8e:34:7a:
                    0b:36:cd:5d:79:a8:b9:a4:5b:19:4a:ee:27:df:9a:
                    87:f1:11:e6:fe:8a:01:48:9e:22:d7:9c:09:d2:7b:
                    86:03:f1:07:f7:3c:b0:30:c4:5b:e2:49:88:a5:e2:
                    19:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:F9:44:34:48:CA:74:35:A1:24:F2:D9:78:07:10:F6:D4:E4:03:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/757305d9-2b1e-4783-945b-e7d6cc2e49a8/42532a02-6326-3342-93eb-ab5631e34ae6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/757305d9-2b1e-4783-945b-e7d6cc2e49a8/757305d9-2b1e-4783-945b-e7d6cc2e49a8.crl

            X509v3 Authority Key Identifier:
                keyid:53:C3:B8:6A:90:10:C7:27:BD:73:12:C9:5F:1C:B1:B7:D8:AC:0D:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/757305d9-2b1e-4783-945b-e7d6cc2e49a8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f66b:3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:e1:b5:67:88:6f:6f:a2:c0:2a:76:56:71:c8:95:4c:e3:84:
         56:94:ac:01:d9:8d:41:a9:6c:e5:7e:85:07:0f:76:48:be:93:
         55:a0:6e:e5:e7:3a:b9:69:4b:4a:42:40:35:5d:1a:ab:f6:9e:
         59:4b:a8:9e:7f:a1:b5:8a:db:b3:c7:a9:02:bc:ad:ed:2d:94:
         d8:f1:fa:be:23:b1:7b:c4:7b:d9:1d:92:fb:48:9b:13:f3:29:
         61:7e:b0:c2:55:78:61:ec:7a:c4:1a:39:54:dd:20:c9:ed:6f:
         8a:1f:38:55:90:94:c4:1e:dc:ee:63:ad:2d:53:4d:b4:0a:19:
         ab:6c:1c:ac:a2:45:bf:00:ec:86:e9:1e:3f:0d:1c:47:e9:a0:
         28:83:7b:af:e1:d1:0d:83:ce:e7:cc:54:3f:e9:2a:0a:7e:7a:
         6e:59:34:d9:08:4e:97:f4:d7:c2:13:e6:a1:fd:f8:51:89:e4:
         4b:d3:e7:cd:d8:ca:dc:b1:bb:95:45:b0:40:a7:0b:d9:7b:77:
         f6:40:77:3c:20:37:11:ee:2f:d6:7a:f0:14:a7:cc:13:b5:12:
         11:fd:54:79:97:63:95:e9:8a:4b:fb:a1:1f:8e:99:d4:53:9e:
         5b:17:15:cd:8e:58:6d:f6:6d:f9:c4:35:36:8c:5d:ab:c3:2e:
         92:77:0e:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 11:54:36 2025 by rpki-client