Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/b36552bb-1d00-3540-9736-aece89ec2715.roa
File:                     b36552bb-1d00-3540-9736-aece89ec2715.roa (raw, json)
Hash identifier:          VMANhmVV8Kg8czNUfgqHT38rxJLiHFhThmNVR0FaeFQ=
Subject key identifier:   78:E5:48:66:9D:54:52:1C:B8:33:11:61:33:16:66:CB:B8:C1:E7:A7
Certificate issuer:       /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial:       010D0C9F43285849DCD986B426798C7EB18BDD40
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/b36552bb-1d00-3540-9736-aece89ec2715.roa
Signing time:             Thu 15 May 2025 15:29:57 +0000
ROA not before:           Thu 15 May 2025 15:29:57 +0000
ROA not after:            Wed 13 Aug 2025 15:29:57 +0000
asID:                     54852
IP address blocks:        2601:20f0::/29 maxlen: 32
Validation:               Failed, certificate revoked on Wed 28 May 2025 20:08:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:dc:d9:86:b4:26:79:8c:7e:b1:8b:dd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
        Validity
            Not Before: May 15 15:29:57 2025 GMT
            Not After : Aug 13 15:29:57 2025 GMT
        Subject: CN=da294207-f529-40d6-8893-b4325cb9357b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ce:9e:07:31:eb:d0:7e:4a:58:88:42:fe:96:
                    51:f6:84:b1:03:d8:2a:b8:a2:ce:67:df:eb:31:c7:
                    52:3e:fb:05:c9:8d:82:43:c9:c0:03:bb:50:94:7b:
                    f1:df:de:d5:76:f4:f4:66:fb:26:eb:6f:30:a8:bf:
                    bb:08:d7:01:b0:40:e2:88:82:5b:df:39:60:be:51:
                    4b:ff:8e:f4:f8:cd:aa:de:32:57:b0:64:fe:f3:85:
                    54:be:d0:2c:f3:53:7b:15:07:9e:1a:b7:4c:36:d2:
                    0e:54:35:3f:0a:a7:10:a0:ad:fb:f9:5b:d3:59:29:
                    b3:da:70:83:3f:f7:90:38:0c:ec:d3:60:52:50:fb:
                    c1:6d:98:cc:e7:0e:dc:81:8e:a1:0b:ac:e4:ba:72:
                    4f:77:99:eb:ea:26:b3:c0:13:4d:30:3d:bf:eb:f3:
                    13:f9:e5:07:b7:0e:02:e3:29:2d:ca:a0:b3:b7:49:
                    bb:04:31:a8:01:7c:73:e2:ba:9a:02:31:6f:4e:76:
                    f8:98:2f:81:17:92:87:6b:5f:42:11:a7:c1:4c:b1:
                    d4:42:e0:d7:9a:7d:ce:e2:92:1f:3c:47:d4:8d:2e:
                    fc:27:03:2e:dd:b2:4b:f4:38:48:de:ba:65:be:3d:
                    0a:65:ea:7e:86:69:2c:a9:7e:38:33:37:da:3b:b1:
                    a0:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:E5:48:66:9D:54:52:1C:B8:33:11:61:33:16:66:CB:B8:C1:E7:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/b36552bb-1d00-3540-9736-aece89ec2715.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:20f0::/29

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:23:72:4d:08:f7:c0:a9:b8:3c:8c:7a:fc:0c:38:08:ca:b1:
         93:96:19:6a:5d:68:09:f4:82:a1:2b:14:59:b0:50:f9:ee:f3:
         06:3d:c0:f5:be:d2:eb:ea:fb:92:df:6c:68:e4:0b:e7:00:65:
         76:0e:a4:f3:72:54:49:62:47:ef:24:2b:f9:11:12:c4:a1:0a:
         46:1f:2b:f3:14:17:fc:24:41:bb:82:52:33:c5:df:0e:fb:f8:
         23:4b:7a:b9:1e:42:72:c4:a5:2b:08:51:6a:2c:66:a0:2b:2a:
         22:96:cc:a4:02:bd:f0:88:29:4a:aa:38:67:50:e8:2f:64:14:
         62:2f:44:8d:73:9d:9f:ab:69:bc:b5:63:03:c1:07:f8:54:11:
         e8:44:e5:05:71:cb:80:ab:4b:24:9f:c7:49:67:fc:35:d7:09:
         94:e1:48:ed:9f:81:be:80:f5:73:8b:bf:81:2e:07:b9:6f:d5:
         6a:61:67:0a:43:e9:22:33:ea:1f:39:a8:eb:93:3c:31:bf:f9:
         87:06:08:6a:dc:b4:81:64:6f:a7:3d:f4:3a:89:fe:93:7a:ae:
         4b:44:c3:ea:d7:94:0f:9f:c9:d0:90:aa:44:62:3e:94:69:a0:
         d3:75:9d:50:05:64:a2:28:6a:b1:01:9a:39:49:21:86:31:03:
         20:a3:9e:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 21:28:32 2025 by rpki-client