Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c9e86012-3d66-34ff-ad53-c4027124faf0.roa
File:                     c9e86012-3d66-34ff-ad53-c4027124faf0.roa (raw, json)
Hash identifier:          noMpSt0RwOZeN9ZbJl6ipgXU8zKErajq++/UWgS8pBw=
Subject key identifier:   67:00:1E:22:2E:EF:4B:4B:77:63:BA:A1:29:28:67:96:F9:CA:70:28
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285848C9BF824857AF468D6E4D3300
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c9e86012-3d66-34ff-ad53-c4027124faf0.roa
Signing time:             Thu 06 Feb 2025 02:30:14 +0000
ROA not before:           Thu 06 Feb 2025 02:30:14 +0000
ROA not after:            Wed 07 May 2025 01:30:14 +0000
asID:                     51202
IP address blocks:        2001:470:31a::/48 maxlen: 48
Validation:               Failed, certificate revoked on Thu 27 Feb 2025 20:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c9:bf:82:48:57:af:46:8d:6e:4d:33:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb  6 02:30:14 2025 GMT
            Not After : May  7 01:30:14 2025 GMT
        Subject: CN=77610bf6-e710-427c-923f-28e8aae5f2d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a4:75:81:9c:2a:90:c6:fd:75:b2:f3:c5:b6:
                    65:f1:04:49:f7:73:ba:4a:4b:af:30:f1:4d:2e:0f:
                    99:36:91:51:7f:07:cb:82:7d:69:e0:93:61:2e:00:
                    8c:31:60:fc:34:bf:5c:f0:23:7f:35:a3:96:6d:6c:
                    a7:2e:0b:53:82:1f:6d:f9:63:69:c1:a2:e1:80:df:
                    75:ad:ca:44:fa:2e:53:df:cd:7e:21:c3:74:c4:6a:
                    00:1f:d4:a9:41:2b:7e:1f:06:25:3c:a9:85:c2:a4:
                    53:5c:58:f3:c2:e3:7c:c4:27:1c:4a:84:13:08:86:
                    de:a7:5f:a3:6f:85:c0:10:66:76:cf:28:4e:11:e6:
                    f1:2f:78:33:9b:9d:40:da:97:a7:91:64:39:75:f7:
                    9f:b2:0c:85:d5:be:14:55:eb:f7:aa:28:f5:79:ce:
                    11:b5:23:2a:51:7a:72:13:7f:d9:32:f2:31:0e:34:
                    5f:a9:d7:53:44:40:7b:77:5f:28:4c:5b:87:6d:4e:
                    ab:95:aa:25:b5:59:3e:c6:88:9b:fb:32:4d:f3:e6:
                    e6:0b:f6:ec:09:5f:fb:68:ad:0c:62:30:41:be:7b:
                    e9:05:b0:84:3f:de:0c:69:7d:47:40:85:f8:74:37:
                    63:5d:dd:39:1a:85:71:4c:e4:c5:70:68:14:b7:ad:
                    d4:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:00:1E:22:2E:EF:4B:4B:77:63:BA:A1:29:28:67:96:F9:CA:70:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/c9e86012-3d66-34ff-ad53-c4027124faf0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:31a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:56:76:7d:99:4e:54:11:27:9c:61:f1:47:2c:10:c1:5e:a5:
         43:36:90:02:f0:e3:9e:bd:a5:87:48:d9:6a:b1:53:be:0b:f6:
         b6:75:6b:0e:a1:3f:ac:9e:b0:47:2e:3a:a8:d3:4b:2f:43:9e:
         6e:bd:d3:c7:72:65:93:de:4a:35:5a:b7:44:ec:0d:71:47:66:
         22:92:81:7c:a2:60:7a:79:3e:fb:7e:e6:1e:8c:a1:93:b4:d1:
         66:ef:fa:60:a6:c8:dd:73:f1:69:7e:61:c6:36:0e:a5:ed:cd:
         f0:22:50:2e:06:4f:40:31:8d:24:11:9a:5e:91:c1:38:2a:89:
         af:50:db:f2:2e:7b:db:8a:04:fd:2d:e3:c1:d5:40:57:ad:41:
         27:99:b1:69:2c:dd:ed:82:df:51:22:08:a9:69:2c:f4:f7:d5:
         49:37:0b:c3:9b:ac:dc:a6:2b:cd:15:b0:26:db:8f:07:a2:1d:
         9b:91:50:c7:4b:94:e7:45:4e:69:7e:a0:ec:fe:ed:9a:c8:9b:
         49:4d:c4:73:85:34:75:24:90:65:49:06:cc:e8:ad:2b:6f:f0:
         b2:74:1f:92:6c:2b:ce:b6:03:bc:86:c2:64:ea:3a:d8:c9:09:
         9c:ac:b8:d8:01:61:6a:a6:9a:08:c6:43:f9:c0:b9:f4:e7:67:
         c9:57:21:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 18:54:22 2025 by rpki-client