Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/ca191e91-1ffc-3d56-a7f7-352483de6c9a.roa
File:                     ca191e91-1ffc-3d56-a7f7-352483de6c9a.roa (raw, json)
Hash identifier:          6glLiX/C0Jn92PNQq+nhjWczc3mbnSEF+BsAzDUGeTg=
Subject key identifier:   D7:11:F7:F6:11:A4:E2:FB:97:19:4D:57:3B:72:B8:A6:C7:6D:5F:67
Certificate issuer:       /CN=09440a93-986f-41da-8723-7b67f81bdbce
Certificate serial:       010D0C9F432858498CFF146E7356BEA72CC4E380
Authority key identifier: 48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/ca191e91-1ffc-3d56-a7f7-352483de6c9a.roa
Signing time:             Thu 17 Apr 2025 01:00:45 +0000
ROA not before:           Thu 17 Apr 2025 01:00:45 +0000
ROA not after:            Wed 16 Jul 2025 01:00:45 +0000
asID:                     19901
IP address blocks:        2601:1e00::/28 maxlen: 48
Validation:               Failed, certificate revoked on Sun 27 Apr 2025 19:36:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8c:ff:14:6e:73:56:be:a7:2c:c4:e3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09440a93-986f-41da-8723-7b67f81bdbce
        Validity
            Not Before: Apr 17 01:00:45 2025 GMT
            Not After : Jul 16 01:00:45 2025 GMT
        Subject: CN=d433a345-b70b-4dc3-bcc8-fdb866afdd6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:e7:b5:27:65:d1:8b:7d:48:95:0a:9b:04:22:
                    c9:31:b0:2c:3c:8b:c8:ed:91:a9:9c:1c:80:7c:6d:
                    5e:a7:85:d1:e8:28:73:9e:0e:d5:55:20:9e:0c:0d:
                    75:00:e5:d3:2c:aa:42:da:1d:cd:cf:06:c2:83:eb:
                    48:05:8d:1b:1d:d3:bb:6e:69:c6:67:de:05:ef:3e:
                    26:74:79:f8:23:52:bd:74:3a:af:fe:a9:3e:4c:db:
                    1d:ac:c5:8d:5a:d7:5a:b2:38:1e:99:e0:87:99:a8:
                    d1:fb:53:c9:3c:43:4e:3d:81:71:fe:98:a3:f6:63:
                    ed:0d:99:9f:23:f4:1c:59:44:b5:72:dc:fd:53:7a:
                    b8:68:42:17:0f:f8:31:23:53:af:b6:4a:8b:37:cb:
                    f1:9b:e3:a5:a0:fc:66:78:53:b9:83:90:a6:72:0c:
                    3d:0c:f6:3d:2d:bd:52:29:21:f5:b1:38:d9:84:4d:
                    89:d0:20:a1:49:eb:4d:1e:70:9d:1a:8e:26:20:c2:
                    eb:2b:d6:27:bb:1d:70:5a:c0:60:88:1d:e3:a7:64:
                    43:88:95:90:f3:57:9a:5f:16:35:49:d1:be:3b:47:
                    0d:bd:eb:d9:cb:cb:5e:e5:f1:c0:de:7c:6c:04:af:
                    c1:00:43:9b:23:30:27:81:89:58:cb:c9:6a:c9:f2:
                    5a:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:11:F7:F6:11:A4:E2:FB:97:19:4D:57:3B:72:B8:A6:C7:6D:5F:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/ca191e91-1ffc-3d56-a7f7-352483de6c9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.crl

            X509v3 Authority Key Identifier:
                keyid:48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:1e00::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:6c:ff:3d:dd:d3:9d:47:5f:91:9c:08:a5:6e:98:35:59:9a:
         08:f0:b1:b6:3c:35:0f:14:11:86:67:7e:40:3c:cb:76:11:62:
         fb:b9:1d:56:64:70:f8:81:33:1b:d4:1b:3d:e2:4e:e6:5e:0b:
         96:6c:cf:44:01:69:33:ce:d3:61:dd:db:ce:a5:5f:a2:7e:5f:
         5f:40:f9:43:ea:d0:78:5b:47:69:81:a6:9e:bd:e5:ad:bd:43:
         55:83:47:74:12:80:bc:87:9e:2e:fd:17:08:cb:7f:1f:5d:44:
         59:6e:2d:b5:80:c2:23:86:67:38:e6:25:f5:c4:e2:07:76:c1:
         9f:4d:47:33:fa:d3:fb:6b:2a:22:70:34:97:bb:09:36:f8:e3:
         dd:d1:c4:71:00:72:ca:2c:b2:a6:f2:b4:74:be:55:22:1a:58:
         85:40:43:e3:94:10:7d:41:96:af:f1:68:8a:01:64:4d:45:a9:
         10:64:8f:fb:0e:86:f7:92:72:18:3f:c3:b3:72:67:66:27:4c:
         fc:33:5b:b3:2e:4f:bd:b0:fe:ff:8b:4e:fa:59:5a:6c:c5:3d:
         55:12:a2:23:e5:f3:a7:94:39:c9:77:19:f4:42:71:f6:53:f3:
         be:73:a3:c3:1e:41:96:d9:32:3e:8c:4f:d0:81:c9:86:17:48:
         1a:84:5a:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 18:42:46 2025 by rpki-client