Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d/4b4e9bc1-9387-39d1-8582-8aa72a3bfc2a.roa
File:                     4b4e9bc1-9387-39d1-8582-8aa72a3bfc2a.roa (raw, json)
Hash identifier:          szK4HRBDV2geupOg5BC1LOSV9tIuR4uaYoMp1Lnmbb0=
Subject key identifier:   28:2E:FA:6F:39:62:C1:8A:F6:78:D9:D0:1C:05:0F:36:23:57:34:4D
Certificate issuer:       /CN=004321a8-393d-4f7f-add9-dddc07a1320d
Certificate serial:       010D0C9F4328584A26284FABA7207C9EC02D4C40
Authority key identifier: FE:D8:E1:5B:23:CE:B0:9B:2E:84:87:9B:FF:67:16:5D:DA:D5:FD:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d/4b4e9bc1-9387-39d1-8582-8aa72a3bfc2a.roa
Signing time:             Tue 10 Jun 2025 21:42:42 +0000
ROA not before:           Tue 10 Jun 2025 21:42:42 +0000
ROA not after:            Mon 08 Sep 2025 21:42:42 +0000
asID:                     399970
IP address blocks:        2602:fc3b:700::/48 maxlen: 48
Validation:               Failed, certificate revoked on Wed 11 Jun 2025 12:38:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:26:28:4f:ab:a7:20:7c:9e:c0:2d:4c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=004321a8-393d-4f7f-add9-dddc07a1320d
        Validity
            Not Before: Jun 10 21:42:42 2025 GMT
            Not After : Sep  8 21:42:42 2025 GMT
        Subject: CN=9149f7ec-0e94-465d-8cef-f7115c93bfbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:d8:2b:66:d9:c9:21:8f:23:e0:4d:99:01:39:
                    37:69:d9:6c:a4:37:83:d2:9a:c4:7d:b1:fe:fa:2b:
                    9c:17:cf:1e:a7:ad:11:6e:1b:52:5b:c4:ea:62:17:
                    ca:e4:a4:9c:56:73:87:9c:67:f2:b2:b6:f1:ce:c5:
                    83:52:e7:cd:f4:6f:6c:be:e6:25:90:5f:35:e8:33:
                    ee:78:32:ca:1b:8b:c3:70:5e:e5:fc:3f:e2:51:87:
                    9f:83:41:66:6d:56:65:d4:61:a5:a3:11:4a:7b:89:
                    a1:d5:90:d5:5f:f2:e1:fc:d9:40:f1:e9:94:bb:79:
                    9b:29:fc:6c:45:96:c2:fe:17:c6:e5:21:98:f2:37:
                    cb:16:70:86:8e:b2:4a:19:64:02:4b:7b:6f:41:4e:
                    74:a2:8b:02:72:ea:f9:b3:9a:c2:27:8e:36:22:3d:
                    dc:bf:4f:ae:9b:6d:a4:f3:87:e8:b1:1a:b8:9e:72:
                    83:ec:0a:ed:69:7b:92:2e:a6:42:3b:68:f7:e7:13:
                    06:38:6b:f5:d4:bb:b5:d4:74:71:7a:83:90:5c:52:
                    94:da:18:2b:52:4e:1a:2c:1b:f2:55:fd:53:7f:7c:
                    f6:57:02:8e:89:4e:0c:0e:66:c5:e5:60:5c:12:3a:
                    39:4f:c5:38:4b:53:a3:78:1e:3d:5d:4e:aa:ca:e4:
                    6a:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:2E:FA:6F:39:62:C1:8A:F6:78:D9:D0:1C:05:0F:36:23:57:34:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d/4b4e9bc1-9387-39d1-8582-8aa72a3bfc2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d/004321a8-393d-4f7f-add9-dddc07a1320d.crl

            X509v3 Authority Key Identifier:
                keyid:FE:D8:E1:5B:23:CE:B0:9B:2E:84:87:9B:FF:67:16:5D:DA:D5:FD:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:700::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:73:db:9a:17:ba:d6:34:83:ca:48:c3:fd:d8:3e:1b:ea:78:
         a1:29:d0:53:f5:51:e7:7f:bc:f1:72:70:c4:48:c3:80:8e:8a:
         57:65:a3:cf:25:7d:e9:b7:1c:ba:96:50:79:90:3e:53:36:c8:
         bf:a1:14:7f:8d:92:42:67:32:f2:3f:7c:37:31:b0:73:f2:7a:
         be:b6:75:79:14:38:a9:f1:4d:9a:57:07:74:61:74:ad:37:15:
         a7:ac:81:1f:46:ef:d5:0e:69:06:72:67:96:f5:03:e1:ef:41:
         c3:1a:0c:24:03:0d:cd:3f:44:db:de:38:a6:28:a3:1c:84:5f:
         ea:2d:2e:fd:a2:ab:74:33:fe:4a:ef:22:57:fd:08:6d:1a:39:
         7b:c0:fc:a8:51:0f:b4:16:a7:ee:14:d0:95:32:e5:4d:22:c6:
         be:1e:49:c5:83:76:6b:c0:a2:ef:f5:8e:d8:dc:c4:21:b9:14:
         36:12:e0:2f:36:0c:0f:03:00:7f:70:48:d8:35:cb:79:2a:d9:
         a9:a3:3c:30:a0:9d:30:42:8a:48:10:5e:58:73:af:72:01:a5:
         37:11:3a:a1:93:21:d8:19:b1:5d:7b:99:32:9c:ba:63:97:5b:
         9b:c8:1f:fc:82:55:02:74:81:09:a9:01:57:38:e2:c5:9d:e0:
         dd:ac:7c:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:46:04 2025 by rpki-client