Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d/64095018-a008-3733-a92c-fee74da89bbe.roa
File:                     64095018-a008-3733-a92c-fee74da89bbe.roa (raw, json)
Hash identifier:          Uc27Lu30b0ygEVZAZmtbSAO0KpEXtevzt1G0+xe/dCc=
Subject key identifier:   89:08:97:D0:72:27:EA:40:58:D0:5D:6C:57:D9:20:4A:04:0F:F5:91
Certificate issuer:       /CN=004321a8-393d-4f7f-add9-dddc07a1320d
Certificate serial:       010D0C9F4328584A27C7B083D2AD7034066DA680
Authority key identifier: FE:D8:E1:5B:23:CE:B0:9B:2E:84:87:9B:FF:67:16:5D:DA:D5:FD:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d/64095018-a008-3733-a92c-fee74da89bbe.roa
Signing time:             Tue 03 Jun 2025 15:52:19 +0000
ROA not before:           Tue 03 Jun 2025 15:52:19 +0000
ROA not after:            Mon 01 Sep 2025 15:52:19 +0000
asID:                     399970
IP address blocks:        2602:fc3b:e00::/47 maxlen: 48
Validation:               Failed, certificate revoked on Wed 11 Jun 2025 12:39:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:27:c7:b0:83:d2:ad:70:34:06:6d:a6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=004321a8-393d-4f7f-add9-dddc07a1320d
        Validity
            Not Before: Jun  3 15:52:19 2025 GMT
            Not After : Sep  1 15:52:19 2025 GMT
        Subject: CN=65dd2a13-1efe-4970-8a51-247be058af27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:a4:7b:8a:d8:5d:89:bf:22:04:2c:bb:06:12:
                    7e:03:0d:b1:47:64:3d:ef:ab:ef:f6:ea:b0:36:1a:
                    9f:b2:b3:a6:f7:bd:d3:02:b8:39:5c:91:61:3b:5d:
                    1a:c7:74:28:6b:2c:e6:ba:89:0a:b2:3c:ff:01:91:
                    27:f7:25:cf:43:1d:f8:3f:a6:90:ff:51:ac:d9:0d:
                    12:f6:94:bf:97:ca:63:c0:8b:0e:27:9e:b5:42:22:
                    0b:dd:b7:1e:c4:0f:38:17:e9:99:f0:17:c7:a0:0a:
                    00:85:89:18:8c:89:b7:ce:97:0a:d3:8c:c8:d4:bb:
                    3e:ab:99:14:f3:88:90:14:d8:6e:3a:8e:38:c5:ba:
                    fd:28:ff:45:36:4f:fc:51:be:42:1d:e6:98:75:cf:
                    d0:07:3e:a5:6f:16:36:9e:c0:52:2c:91:fa:34:43:
                    bd:54:fe:ed:b7:5b:39:c8:04:c2:1f:15:97:47:cf:
                    62:c0:57:e2:65:d7:89:27:0f:f7:14:34:f8:d5:48:
                    43:74:4d:02:b3:70:e0:b9:f3:46:05:01:c3:0e:cb:
                    5c:88:df:c1:cb:98:72:b6:97:a3:a3:84:ab:d1:92:
                    a9:61:7e:97:ba:8f:bb:25:b6:57:49:93:f9:12:43:
                    79:d1:d6:b6:cb:de:e3:f1:b8:8f:52:3e:51:6e:54:
                    df:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:08:97:D0:72:27:EA:40:58:D0:5D:6C:57:D9:20:4A:04:0F:F5:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d/64095018-a008-3733-a92c-fee74da89bbe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d/004321a8-393d-4f7f-add9-dddc07a1320d.crl

            X509v3 Authority Key Identifier:
                keyid:FE:D8:E1:5B:23:CE:B0:9B:2E:84:87:9B:FF:67:16:5D:DA:D5:FD:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc3b:e00::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:0e:40:59:96:85:a6:01:28:93:a2:b7:93:f9:7b:87:59:b0:
         25:ea:7b:ab:10:38:37:f0:0c:99:76:1d:d9:d2:d9:ec:31:61:
         07:0f:91:82:db:7b:a6:10:a7:fb:83:37:c7:58:38:f6:c3:98:
         d3:0a:38:2e:a9:ac:04:41:14:18:fe:e8:c3:94:48:24:03:84:
         b2:6e:f2:01:c6:1f:83:84:db:b9:4d:23:90:2c:73:99:cf:a0:
         b2:2c:18:bc:22:03:74:b7:b4:51:45:1a:88:f3:16:06:f9:ae:
         3c:d6:4e:54:09:65:2c:a7:37:eb:77:8e:01:25:3f:3e:b3:af:
         72:75:b6:39:c2:1d:23:37:f5:e5:c8:53:49:b5:e6:3f:3e:37:
         33:00:77:d0:77:35:65:36:84:bd:9e:3f:78:e9:44:f7:35:07:
         ff:b6:db:29:17:85:73:95:30:1e:50:d3:80:3a:cb:4d:a9:55:
         79:65:f2:ac:36:c8:00:da:1c:33:c8:95:f5:b5:a7:ae:fa:19:
         d9:29:20:9e:8e:6c:64:7f:d7:98:f0:0b:6b:45:7b:5f:51:8a:
         6e:64:23:64:fe:81:04:c0:2f:a5:28:8b:7d:3a:74:44:7a:46:
         b0:21:cc:cd:cd:f8:92:69:3c:6b:bd:ef:36:e5:14:6b:0f:82:
         d2:10:c4:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 21:34:11 2025 by rpki-client