Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7115dbdf-c5dc-4cad-b25b-497eb629bafa/53c6160f-b82c-3ebd-ba8f-de82ab853a05.roa
File:                     53c6160f-b82c-3ebd-ba8f-de82ab853a05.roa (raw, json)
Hash identifier:          WNqadQrX9Altd6+YzGqHFlqmptVBdiKXTyL/q/WTaVg=
Subject key identifier:   42:58:2C:98:8E:DE:D8:88:FF:48:78:70:FF:DE:93:16:6C:1B:90:13
Certificate issuer:       /CN=7115dbdf-c5dc-4cad-b25b-497eb629bafa
Certificate serial:       010D0C9F43285849A916176D905FD7A82A292858
Authority key identifier: 21:07:61:A4:9A:C1:D5:7D:06:C6:97:91:39:CA:63:6C:9B:C7:83:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7115dbdf-c5dc-4cad-b25b-497eb629bafa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7115dbdf-c5dc-4cad-b25b-497eb629bafa/53c6160f-b82c-3ebd-ba8f-de82ab853a05.roa
Signing time:             Sun 27 Apr 2025 02:29:57 +0000
ROA not before:           Sun 27 Apr 2025 02:29:57 +0000
ROA not after:            Sat 26 Jul 2025 02:29:57 +0000
asID:                     33218
IP address blocks:        2606:4780::/32 maxlen: 127
Validation:               Failed, certificate revoked on Sun 27 Apr 2025 02:35:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a9:16:17:6d:90:5f:d7:a8:2a:29:28:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7115dbdf-c5dc-4cad-b25b-497eb629bafa
        Validity
            Not Before: Apr 27 02:29:57 2025 GMT
            Not After : Jul 26 02:29:57 2025 GMT
        Subject: CN=02450dc8-d639-4b55-9282-ff725d152ec8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:98:ef:29:3b:a8:27:41:ac:e1:9a:72:1c:bf:
                    35:dd:73:aa:60:79:70:0d:f1:f2:34:3b:97:74:d1:
                    5a:d6:bc:e9:b5:e3:a9:5c:0a:35:0e:21:ba:69:8e:
                    8d:53:f8:ea:1c:67:8f:ce:a6:91:02:60:16:e8:19:
                    b2:4b:17:69:5f:b4:37:e0:55:e2:69:cd:3f:c6:8e:
                    7b:b2:a9:24:95:c6:87:70:be:6c:b1:ce:23:d0:e2:
                    c7:f5:b1:3e:ec:a2:78:06:a6:76:da:fc:1c:4a:9e:
                    10:81:3d:21:de:24:45:d2:e6:58:f1:07:29:fa:cb:
                    6a:db:64:b9:89:fe:9d:51:d3:ab:71:6c:ed:d7:b5:
                    9c:97:61:d8:d7:22:ee:69:ef:e2:6a:ec:d7:21:3b:
                    fd:6a:b7:f2:6c:ab:27:b4:fd:bd:72:f0:d4:b3:43:
                    1c:8d:61:ac:86:67:5b:7e:37:a2:37:93:ef:15:b5:
                    ff:b0:4a:47:6e:82:e4:b7:b3:e1:ec:bc:b5:9a:4c:
                    34:8c:4f:a5:20:dd:b8:84:2c:af:98:32:73:9c:89:
                    bd:9a:e0:6e:43:b5:e1:2d:f0:17:16:cf:32:b2:f7:
                    40:cf:a8:a8:b8:ec:0c:82:2d:ef:76:f5:66:59:78:
                    cd:59:1f:48:c9:f0:6b:29:dd:d8:ed:8d:26:00:9d:
                    87:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:58:2C:98:8E:DE:D8:88:FF:48:78:70:FF:DE:93:16:6C:1B:90:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7115dbdf-c5dc-4cad-b25b-497eb629bafa/53c6160f-b82c-3ebd-ba8f-de82ab853a05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7115dbdf-c5dc-4cad-b25b-497eb629bafa/7115dbdf-c5dc-4cad-b25b-497eb629bafa.crl

            X509v3 Authority Key Identifier:
                keyid:21:07:61:A4:9A:C1:D5:7D:06:C6:97:91:39:CA:63:6C:9B:C7:83:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7115dbdf-c5dc-4cad-b25b-497eb629bafa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:4780::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:9f:c5:b4:6b:fa:fb:1d:15:b4:e5:91:ed:35:17:66:98:d2:
         4b:98:cb:b9:d4:1e:e4:7b:ed:ac:c2:e9:49:c4:c5:27:18:1f:
         b5:1d:e6:c6:81:cf:69:74:2e:e8:1a:df:2b:d3:2e:d4:26:74:
         d3:01:c0:37:49:69:1a:ab:3a:13:e1:1a:da:9d:bb:c6:84:e9:
         ae:06:00:b9:81:1c:89:6f:f8:af:1c:b6:2b:c6:78:df:f0:be:
         53:7a:7c:17:b9:4f:03:5b:2e:62:d7:f2:9d:a1:f6:e3:50:26:
         58:bd:71:18:50:57:e0:c5:c8:40:34:de:77:94:81:7e:36:33:
         6f:21:e0:28:64:95:3b:74:1b:dc:d0:18:7b:40:f6:17:c0:9c:
         cc:8b:e8:74:24:cc:2d:2c:f3:77:b8:3a:d9:c3:ea:93:21:47:
         a6:f4:6c:56:8a:e8:7d:26:15:99:92:ee:c0:2f:ec:c1:1a:d0:
         e2:95:ee:1f:45:16:53:41:0d:67:3e:ba:a9:44:f7:4a:46:75:
         0b:db:19:65:9f:72:44:97:0a:9b:77:72:63:e4:66:95:c9:70:
         67:fa:b4:fd:b0:f4:86:ad:60:70:16:75:d9:19:e0:7c:e4:9c:
         a9:98:78:3c:6f:62:c5:e4:cc:6b:3d:f4:7a:0f:a5:6d:9a:d4:
         34:2f:4b:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:22:52 2025 by rpki-client