Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4ef60bd6-1235-39c9-8987-086663157b11.roa
File:                     4ef60bd6-1235-39c9-8987-086663157b11.roa (raw, json)
Hash identifier:          wB/sM7Nv/mLTwRyBgLz9KG3C8o1cu90csaRLRtWRk48=
Subject key identifier:   81:DE:B5:35:DE:CD:4F:28:13:20:3E:04:76:E1:41:69:4D:79:AD:C0
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F43285849B5E3B9DA52C827E8CD49D4C0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4ef60bd6-1235-39c9-8987-086663157b11.roa
Signing time:             Thu 01 May 2025 16:33:59 +0000
ROA not before:           Thu 01 May 2025 16:33:59 +0000
ROA not after:            Wed 30 Jul 2025 16:33:59 +0000
asID:                     22773
IP address blocks:        2600:8800:a918::/47 maxlen: 47
Validation:               Failed, certificate revoked on Thu 01 May 2025 22:11:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:e3:b9:da:52:c8:27:e8:cd:49:d4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  1 16:33:59 2025 GMT
            Not After : Jul 30 16:33:59 2025 GMT
        Subject: CN=91d3b138-3455-4abf-a741-cdb899f89b2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:42:4d:95:f6:43:d5:50:30:d4:8d:54:19:e9:
                    6e:45:07:d4:db:3e:b1:7a:73:9a:5d:90:28:98:a0:
                    18:d1:37:17:e1:62:d0:8b:57:46:7d:1f:08:b8:65:
                    11:5e:78:bb:c0:1f:67:b0:13:1f:e6:52:0e:4f:96:
                    fb:4a:08:ff:cf:90:d5:b4:1e:65:d1:23:a0:90:21:
                    e2:17:84:4b:d6:4d:f9:b6:90:74:24:b8:4e:f1:ff:
                    8c:3f:7e:51:df:92:4a:1c:bb:43:e4:8a:9c:cd:aa:
                    31:3c:46:c0:00:86:35:46:d6:0a:4c:1c:a2:10:3c:
                    03:90:b8:12:ad:eb:ca:d2:45:78:3b:61:94:13:f2:
                    07:b4:a3:7f:c4:54:f6:f8:1a:43:d0:69:6f:0f:78:
                    2b:47:0d:36:ee:e2:90:c3:8a:59:b7:99:e9:fc:86:
                    98:87:35:ed:b8:a2:b9:2e:be:9f:23:ee:81:c6:5f:
                    9c:7d:3f:5f:a6:b9:43:b8:6d:3f:b0:7c:51:c3:a3:
                    80:e2:a4:f9:ef:45:7e:a5:ba:0e:a7:8d:43:ce:57:
                    e7:cf:43:78:88:f8:81:5a:f8:d8:00:d8:16:b2:76:
                    d7:8c:8a:78:30:cd:15:8a:dd:ed:e0:4d:c3:7f:fb:
                    0f:a5:ce:0f:2f:ab:87:26:44:ae:12:94:92:d4:84:
                    ed:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:DE:B5:35:DE:CD:4F:28:13:20:3E:04:76:E1:41:69:4D:79:AD:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4ef60bd6-1235-39c9-8987-086663157b11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:8800:a918::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:78:89:94:4c:16:26:d5:b0:c5:00:51:1a:a0:3a:c1:72:a4:
         6c:13:13:10:04:1d:d9:89:c6:a6:f9:49:63:c8:62:78:cc:69:
         1d:ed:e8:6f:5a:fb:1e:4b:0a:12:bd:69:81:09:7a:d0:97:55:
         56:e5:80:ad:7d:b1:03:78:5d:32:63:c9:96:bc:3e:24:55:1f:
         b4:23:b9:9c:d1:9c:e9:61:2e:9b:89:67:e1:fa:da:a3:f6:8f:
         0a:0b:64:6c:eb:91:4d:36:e1:d2:7c:e3:f5:50:a2:e1:80:75:
         26:aa:4b:b0:f1:f1:68:ca:fb:dd:26:b1:9d:30:71:6a:aa:fb:
         fc:da:f3:ef:5b:fd:10:32:ba:50:03:cc:ce:43:56:aa:85:51:
         a2:dc:00:c8:0c:a2:73:70:e9:ff:57:e3:c0:8d:51:ec:40:b9:
         19:a9:85:9b:cd:07:aa:3b:80:76:90:e5:a3:2c:eb:d5:34:2f:
         ee:b7:55:77:46:12:41:81:dd:1f:d0:6f:0d:68:ae:e5:ee:1e:
         cc:03:8d:43:2d:45:b4:b1:7e:dc:bf:43:5e:12:9e:cb:8a:01:
         fe:12:f1:08:f9:4e:4b:d5:5f:7a:39:ab:4b:86:86:b9:51:9e:
         e9:7b:66:20:10:fc:ab:ef:88:ce:9f:7b:43:b7:e4:88:cc:33:
         01:63:a9:e0
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEm147naUsgn6M1J1MAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MDUwMTE2MzM1OVoXDTI1MDczMDE2MzM1OVowLzEtMCsGA1UEAxMk
OTFkM2IxMzgtMzQ1NS00YWJmLWE3NDEtY2RiODk5Zjg5YjJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkJNlfZD1VAw1I1UGeluRQfU2z6xenOaXZAo
mKAY0TcX4WLQi1dGfR8IuGURXni7wB9nsBMf5lIOT5b7Sgj/z5DVtB5l0SOgkCHi
F4RL1k35tpB0JLhO8f+MP35R35JKHLtD5IqczaoxPEbAAIY1RtYKTByiEDwDkLgS
revK0kV4O2GUE/IHtKN/xFT2+BpD0GlvD3grRw027uKQw4pZt5np/IaYhzXtuKK5
Lr6fI+6Bxl+cfT9fprlDuG0/sHxRw6OA4qT570V+pboOp41Dzlfnz0N4iPiBWvjY
ANgWsnbXjIp4MM0Vit3t4E3Df/sPpc4PL6uHJkSuEpSS1ITtqQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFIHetTXezU8oEyA+BHbhQWlNea3AMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNGVmNjBiZDYtMTIzNS0z
OWM5LTg5ODctMDg2NjYzMTU3YjExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgCIAKkY
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAH14iZRMFibVsMUAURqgOsFypGwTExAEHdmJxqb5SWPIYnjMaR3t
6G9a+x5LChK9aYEJetCXVVblgK19sQN4XTJjyZa8PiRVH7QjuZzRnOlhLpuJZ+H6
2qP2jwoLZGzrkU024dJ84/VQouGAdSaqS7Dx8WjK+90msZ0wcWqq+/za8+9b/RAy
ulADzM5DVqqFUaLcAMgMonNw6f9X48CNUexAuRmphZvNB6o7gHaQ5aMs69U0L+63
VXdGEkGB3R/Qbw1oruXuHswDjUMtRbSxfty/Q14SnsuKAf4S8Qj5TkvVX3o5q0uG
hrlRnul7ZiAQ/KvviM6fe0O35IjMMwFjqeA=
-----END CERTIFICATE-----
Generated at Fri Jun 20 05:35:16 2025 by rpki-client