Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/59c1511e-e8d7-4219-a7b4-cfe09ec19b74/d12ec692-132c-39ac-8783-fe8fe9f66971.roa
File:                     d12ec692-132c-39ac-8783-fe8fe9f66971.roa (raw, json)
Hash identifier:          OaG8UAbIGNAWIezZLoTFAOwuq7WCvZLTpGOTr+874wM=
Subject key identifier:   E0:73:27:29:DE:0B:33:6D:AC:7D:D6:D5:34:78:B1:4C:ED:11:3D:85
Certificate issuer:       /CN=59c1511e-e8d7-4219-a7b4-cfe09ec19b74
Certificate serial:       010D0C9F4328584A175CF7F0EA6C3C223670DB80
Authority key identifier: C1:82:E7:E8:DB:1F:C6:90:EB:25:C8:CA:E0:BE:AD:DA:B2:FC:AB:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/59c1511e-e8d7-4219-a7b4-cfe09ec19b74.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/59c1511e-e8d7-4219-a7b4-cfe09ec19b74/d12ec692-132c-39ac-8783-fe8fe9f66971.roa
Signing time:             Thu 05 Jun 2025 14:31:40 +0000
ROA not before:           Thu 05 Jun 2025 14:31:40 +0000
ROA not after:            Wed 03 Sep 2025 14:31:40 +0000
asID:                     8075
IP address blocks:        2602:814:9000::/44 maxlen: 44
Validation:               Failed, certificate revoked on Fri 13 Jun 2025 12:40:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:17:5c:f7:f0:ea:6c:3c:22:36:70:db:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59c1511e-e8d7-4219-a7b4-cfe09ec19b74
        Validity
            Not Before: Jun  5 14:31:40 2025 GMT
            Not After : Sep  3 14:31:40 2025 GMT
        Subject: CN=f1292069-ca8c-4444-9a36-81b8832eea80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:a9:45:ee:03:c7:83:80:c7:f4:1b:28:19:a2:
                    77:ff:0d:48:5f:a6:3d:83:5e:02:29:54:dd:e5:b7:
                    1a:e7:da:74:2f:74:d1:c5:aa:bf:60:36:09:54:51:
                    2f:55:26:f7:d8:85:5c:55:cc:34:a7:e7:26:28:ad:
                    2a:02:d4:22:35:64:f7:47:b7:90:c7:fa:29:a0:bd:
                    29:5f:8f:da:1f:37:9a:2a:62:ff:13:54:ab:f9:35:
                    b1:46:28:3a:ad:ed:cf:6a:40:4f:87:75:3e:cd:2e:
                    82:06:fe:a9:2c:7b:95:b3:ab:07:a7:93:ab:28:8d:
                    80:40:9b:1a:6b:bb:c5:54:8e:84:96:c9:17:cc:98:
                    2f:18:35:bf:85:76:15:81:4b:a3:60:0f:1b:4e:18:
                    c7:8a:6a:c7:aa:a1:60:63:82:15:fb:d0:11:65:5d:
                    2c:ba:81:34:f5:26:e5:ae:98:69:4f:4a:ca:aa:35:
                    a4:3a:be:d7:49:4c:49:36:ae:77:cc:fc:66:f1:49:
                    82:21:b6:2d:4c:47:5e:49:e6:1d:0a:89:b7:bc:34:
                    14:31:bc:88:fd:d3:63:33:89:82:60:6c:31:8f:48:
                    47:b1:cc:ca:d8:d9:2f:5b:5f:91:a9:60:4d:91:7b:
                    26:46:30:1a:d7:ef:45:b8:ea:00:d8:fb:b0:5d:80:
                    84:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:73:27:29:DE:0B:33:6D:AC:7D:D6:D5:34:78:B1:4C:ED:11:3D:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/59c1511e-e8d7-4219-a7b4-cfe09ec19b74/d12ec692-132c-39ac-8783-fe8fe9f66971.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/59c1511e-e8d7-4219-a7b4-cfe09ec19b74/59c1511e-e8d7-4219-a7b4-cfe09ec19b74.crl

            X509v3 Authority Key Identifier:
                keyid:C1:82:E7:E8:DB:1F:C6:90:EB:25:C8:CA:E0:BE:AD:DA:B2:FC:AB:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/59c1511e-e8d7-4219-a7b4-cfe09ec19b74.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:814:9000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:26:25:2b:07:bd:09:d6:df:02:5b:89:53:63:d2:b1:74:fc:
         d6:9a:a8:5e:3c:08:75:5d:94:4c:f1:a2:9a:07:20:4c:3d:ea:
         34:f5:54:9d:3f:d4:b8:40:b5:7b:86:87:4d:c3:cd:72:2c:b4:
         7b:5f:24:df:0a:3d:a9:35:51:22:87:a9:8d:0a:d9:cb:6d:d4:
         37:63:62:07:f9:a8:42:8d:9d:90:6f:47:c7:c0:3b:e9:5f:47:
         3f:79:8f:68:d9:d7:33:ad:f9:d7:ad:f2:92:bc:db:40:a4:a1:
         33:d2:61:8b:d5:a9:d2:47:bc:00:ad:4d:52:07:46:e5:2d:0a:
         f7:ee:c2:93:97:33:a0:37:03:f4:b2:10:c9:83:08:08:03:58:
         f6:16:3b:ed:61:7c:92:8d:0e:57:00:ce:2c:82:28:eb:6e:9e:
         75:7c:ae:3e:0d:e0:8b:ae:97:9b:19:3d:1c:c5:91:08:5e:b1:
         10:e1:16:3f:89:55:13:f9:d5:ba:6a:64:31:cf:d2:e4:42:40:
         86:05:ec:4c:e7:d2:9c:0e:eb:48:72:85:bd:c7:78:b0:d4:72:
         15:8c:d9:d7:ff:9c:f0:95:8f:f5:1c:a2:23:3d:10:ba:d3:bb:
         21:7a:be:11:b1:8a:e0:5f:7b:b1:b6:72:a1:c2:ae:e0:82:bd:
         3c:f3:8c:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 14:21:05 2025 by rpki-client