Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6ff347ac-fe3d-3c5c-bf40-73db9843f478.roa
File:                     6ff347ac-fe3d-3c5c-bf40-73db9843f478.roa (raw, json)
Hash identifier:          9LRu5KcU9llU8FGavb/zoSNFvWPzvu/LdESItM3mcSs=
Subject key identifier:   37:35:2C:69:17:F8:9B:F7:F8:1C:C8:39:A5:6F:C0:77:7D:35:94:91
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F43285849B5E38400B07C47C18B1714C0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6ff347ac-fe3d-3c5c-bf40-73db9843f478.roa
Signing time:             Thu 01 May 2025 16:33:33 +0000
ROA not before:           Thu 01 May 2025 16:33:33 +0000
ROA not after:            Wed 30 Jul 2025 16:33:33 +0000
asID:                     22773
IP address blocks:        2600:8800:8e02::/47 maxlen: 47
Validation:               Failed, certificate revoked on Thu 01 May 2025 22:10:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:e3:84:00:b0:7c:47:c1:8b:17:14:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  1 16:33:33 2025 GMT
            Not After : Jul 30 16:33:33 2025 GMT
        Subject: CN=b319ab1e-59a5-4ff9-b1bd-d999c3e8aed6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:8f:bb:d0:3d:9e:e2:55:72:15:ef:ad:99:10:
                    9b:95:75:c1:9e:2e:31:08:d7:a4:3a:a1:a0:71:e1:
                    60:5b:e3:73:c8:d6:e3:c0:d6:27:13:e0:07:fc:e1:
                    02:ad:e3:4d:f7:c6:e4:0c:a7:0a:da:57:9c:00:c1:
                    9e:04:2d:6d:3e:91:ac:09:38:39:87:1e:3a:73:40:
                    2b:d0:bb:6e:0e:2a:fc:a2:5e:a9:b9:d8:ed:62:54:
                    2c:6e:d4:ad:9b:83:29:2a:3a:bf:3a:20:de:27:86:
                    3e:08:79:95:d2:53:ca:bb:a0:5b:df:ea:f5:d4:15:
                    a1:7b:14:62:b7:6b:b6:d8:6c:10:10:c7:c9:d4:8a:
                    e6:a1:f1:bb:26:25:3b:0d:5a:1d:3a:10:bd:8d:cc:
                    a7:8c:90:d5:fb:f1:35:16:96:f4:e3:62:b5:10:f5:
                    d3:29:ba:97:ad:7c:b0:7e:d4:11:0f:14:3a:7e:c3:
                    c8:81:e0:61:3b:b5:eb:e6:60:de:eb:3d:b1:a2:a5:
                    67:4c:04:bf:ea:5e:5f:42:36:d9:0e:24:0c:df:11:
                    54:05:08:b9:74:be:9e:3d:2e:17:52:b5:67:22:d0:
                    dd:e0:d3:54:53:fc:01:22:20:24:64:10:d5:21:9b:
                    b1:05:b2:42:1f:d1:c9:f3:48:28:9a:39:7e:eb:79:
                    f5:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:35:2C:69:17:F8:9B:F7:F8:1C:C8:39:A5:6F:C0:77:7D:35:94:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6ff347ac-fe3d-3c5c-bf40-73db9843f478.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:8800:8e02::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:1c:0f:f7:4f:f3:71:05:da:97:57:9c:50:2e:37:77:9f:06:
         3d:e4:6b:b3:a2:5f:2b:c2:9d:a4:c8:e1:49:9b:0a:3b:c7:f7:
         60:f1:0e:be:14:b1:65:c0:2f:03:56:65:fe:a2:6a:9c:32:a9:
         8c:39:d3:49:7a:24:f1:da:92:9f:e7:27:3a:4f:09:fe:7d:fa:
         23:57:de:f0:f0:d5:bc:29:71:5f:35:1e:4e:9b:41:c3:9b:3d:
         6b:03:ef:e0:af:02:a5:d9:0d:59:2f:22:42:62:30:d4:18:81:
         c0:0c:7e:6a:c1:e4:8e:28:a5:05:5f:b3:de:02:ee:bf:6a:05:
         93:e3:73:bc:a4:38:90:62:16:7e:fb:52:b6:68:4d:fa:5e:65:
         09:9c:be:80:a8:3c:52:7b:8e:98:8a:ea:b0:dc:36:45:0b:1a:
         0c:80:b5:f8:f0:9f:4e:65:78:50:43:90:72:e5:e7:04:f2:1a:
         94:2c:6e:17:75:f3:6b:8a:de:6e:7f:8a:3b:92:d6:fa:de:31:
         15:42:b3:3d:25:2c:65:36:34:8c:e2:cd:2c:5d:ea:a7:32:03:
         75:a1:8b:08:8e:50:2c:1b:88:8c:45:79:7d:0f:88:d6:c9:f8:
         0f:35:98:c4:db:e2:83:da:c9:32:4a:18:c4:1c:0f:d0:8b:08:
         69:5e:33:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 14:33:52 2025 by rpki-client