Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9ee078e1-8cfb-3039-a200-d060e56e6e6d.roa
File:                     9ee078e1-8cfb-3039-a200-d060e56e6e6d.roa (raw, json)
Hash identifier:          +qQsaTnScszlGKJUKqzv20rHKl/J0ipbU4mmDkHO2m0=
Subject key identifier:   CE:62:A0:28:B3:DD:58:EA:56:EB:C0:03:61:9C:8F:A3:1B:F4:58:FD
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849C3668E7A71CB97799FE52100
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9ee078e1-8cfb-3039-a200-d060e56e6e6d.roa
Signing time:             Tue 06 May 2025 12:43:05 +0000
ROA not before:           Tue 06 May 2025 12:43:05 +0000
ROA not after:            Mon 04 Aug 2025 12:43:05 +0000
asID:                     396559
IP address blocks:        2001:502:cbe4::/48 maxlen: 48
Validation:               Failed, certificate revoked on Tue 10 Jun 2025 13:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c3:66:8e:7a:71:cb:97:79:9f:e5:21:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May  6 12:43:05 2025 GMT
            Not After : Aug  4 12:43:05 2025 GMT
        Subject: CN=6c74480d-eb1f-4784-a224-0a3abc383b24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:ff:06:23:7f:57:5e:46:22:e2:2e:94:3d:d3:
                    80:98:b6:45:4f:47:bc:ba:26:75:50:ea:f4:81:c7:
                    29:d9:3e:27:81:14:70:5c:b2:2a:c3:a2:34:45:9b:
                    cb:23:ad:1c:fa:c7:ea:a1:d6:81:66:27:52:7c:68:
                    54:11:c5:78:bc:92:59:cc:fd:0c:5c:78:85:95:dd:
                    6e:e4:84:6d:f2:43:d6:e6:54:2a:6f:2d:d0:87:60:
                    19:78:54:6e:72:78:bb:67:bd:8b:cb:98:64:5c:64:
                    82:5f:52:11:d9:cb:9a:e9:06:33:15:30:b7:cc:7c:
                    0c:c9:75:89:4f:8c:ff:09:ae:eb:f6:92:0b:9d:a2:
                    c6:28:a2:eb:99:9f:0a:0b:e0:9c:9a:97:ce:bd:3a:
                    4d:a7:ab:75:b7:65:fe:ab:54:89:83:7f:47:31:24:
                    db:4d:4c:96:f9:9b:87:50:9b:bf:ad:61:8f:67:e5:
                    14:34:c7:17:bb:9b:5a:b6:8d:a3:d1:7f:62:88:61:
                    2a:54:38:4a:31:c5:9c:07:72:a1:6b:e4:7a:9f:b7:
                    0d:4f:da:c0:04:7c:2b:04:29:b2:7d:8e:e0:61:3b:
                    6d:36:48:90:c0:41:23:2e:90:cc:33:6d:a4:b3:04:
                    33:51:09:54:21:62:24:d9:7a:d9:81:eb:52:2d:63:
                    34:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:62:A0:28:B3:DD:58:EA:56:EB:C0:03:61:9C:8F:A3:1B:F4:58:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9ee078e1-8cfb-3039-a200-d060e56e6e6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:cbe4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:99:f1:77:63:4d:04:89:ae:cd:f5:a5:1f:01:07:40:c8:23:
         c9:6b:49:6f:cc:d9:43:5e:b2:2c:7e:36:fd:d6:2d:96:f3:ed:
         71:3a:cd:d0:9d:72:18:4c:16:3d:95:a0:12:c9:9e:f9:6a:78:
         26:0e:66:07:40:10:ff:f3:de:e7:ba:d7:e9:85:c4:94:6e:44:
         31:6a:cf:72:0a:3e:cc:01:c4:a0:ab:b5:d2:1b:bb:1d:22:f9:
         1d:15:d0:e7:9b:f6:d0:eb:91:a8:48:33:b0:95:76:f5:9c:5b:
         8e:42:bd:f6:80:f2:6e:a7:8f:09:5c:b5:c5:49:8b:4f:09:68:
         7e:70:14:e2:49:5a:66:ca:75:b2:6c:aa:49:0c:f1:08:c1:95:
         15:2e:12:ac:6c:de:ba:cc:5f:5a:fc:90:8f:fc:10:a0:69:4e:
         e8:77:b8:7d:2b:96:55:94:b4:cf:f0:66:13:48:04:b2:81:3e:
         89:63:f6:c5:54:81:ad:63:65:a6:21:e2:8d:d7:8d:01:b4:bb:
         ff:22:c8:b3:91:1a:18:a6:f4:64:34:7f:63:4b:77:fe:cb:51:
         2e:1c:f0:11:36:90:5f:19:b3:9d:1f:ad:7c:18:f3:6d:59:db:
         fb:b7:9c:c5:1f:0d:57:c9:0f:54:56:5f:6a:9d:a7:1c:66:ef:
         16:46:b1:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:00:09 2025 by rpki-client