Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dba6a643-b5d0-4f09-8e60-e82ba1eb7848/102385ad-b9d6-3536-abb5-7011029166ed.roa
File:                     102385ad-b9d6-3536-abb5-7011029166ed.roa (raw, json)
Hash identifier:          lqIdSWg/5x5jJ8413tYwjd7Bzf+tKA+nr3VLj1t1jkM=
Subject key identifier:   0D:AC:21:2E:F5:04:3E:CE:BB:89:E7:BF:12:53:CE:5E:0A:B1:15:38
Certificate issuer:       /CN=dba6a643-b5d0-4f09-8e60-e82ba1eb7848
Certificate serial:       010D0C9F432858495EF72F68BBD5FD5AA540DE80
Authority key identifier: 35:7F:A0:24:D8:87:21:3B:59:64:E8:FB:42:28:35:80:AE:5D:53:27
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dba6a643-b5d0-4f09-8e60-e82ba1eb7848.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dba6a643-b5d0-4f09-8e60-e82ba1eb7848/102385ad-b9d6-3536-abb5-7011029166ed.roa
Signing time:             Mon 31 Mar 2025 13:17:51 +0000
ROA not before:           Mon 31 Mar 2025 13:17:51 +0000
ROA not after:            Sun 29 Jun 2025 13:17:51 +0000
asID:                     14537
IP address blocks:        2605:4780::/32 maxlen: 64
Validation:               Failed, certificate revoked on Mon 31 Mar 2025 14:03:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5e:f7:2f:68:bb:d5:fd:5a:a5:40:de:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dba6a643-b5d0-4f09-8e60-e82ba1eb7848
        Validity
            Not Before: Mar 31 13:17:51 2025 GMT
            Not After : Jun 29 13:17:51 2025 GMT
        Subject: CN=57b88737-0900-41d8-9f28-6b0bad9b7363
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:83:eb:8f:81:66:65:cd:d7:89:35:a7:b5:9c:
                    cf:13:db:35:50:5a:b0:57:e8:93:4e:9c:d2:73:c9:
                    82:91:fc:a9:bb:57:e1:28:c9:00:8e:2a:b8:58:01:
                    a3:21:ec:46:53:24:84:9c:0c:9d:cc:f8:3b:ea:f6:
                    5a:96:65:5a:58:0a:13:7e:41:ba:e1:b5:19:55:2b:
                    0f:35:b3:9b:18:d9:a3:b7:5b:68:b3:a9:29:1e:c3:
                    85:e0:57:68:32:1a:8e:f6:d8:f3:68:3b:02:d4:56:
                    aa:7e:af:fb:37:93:8a:94:2b:28:3b:46:bc:73:e2:
                    7a:35:60:27:0a:58:43:c3:5c:3d:3a:f6:b7:2a:a5:
                    6c:1a:9d:bf:55:b9:c5:e7:5b:84:b8:f3:08:60:03:
                    78:47:8d:96:16:eb:af:c7:ca:6d:52:d9:53:b0:0d:
                    67:1e:17:3a:f1:f7:cc:d5:e3:0c:a8:b6:9c:a9:70:
                    a0:65:45:fa:77:be:2a:8c:6e:77:44:e1:ba:3e:2c:
                    8a:05:41:4c:e5:ed:78:d9:3a:61:2e:28:de:75:5c:
                    c2:61:8b:3a:42:ce:4e:b7:c9:ae:c5:6e:f8:09:04:
                    b5:1b:98:76:8b:db:10:5c:53:80:23:1e:56:62:0d:
                    80:34:5e:77:ef:76:cb:95:72:7a:37:c7:7a:42:4b:
                    b2:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:AC:21:2E:F5:04:3E:CE:BB:89:E7:BF:12:53:CE:5E:0A:B1:15:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dba6a643-b5d0-4f09-8e60-e82ba1eb7848/102385ad-b9d6-3536-abb5-7011029166ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dba6a643-b5d0-4f09-8e60-e82ba1eb7848/dba6a643-b5d0-4f09-8e60-e82ba1eb7848.crl

            X509v3 Authority Key Identifier:
                keyid:35:7F:A0:24:D8:87:21:3B:59:64:E8:FB:42:28:35:80:AE:5D:53:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/dba6a643-b5d0-4f09-8e60-e82ba1eb7848.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:4780::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:38:d5:ed:a6:c3:b8:8d:84:0b:b7:c8:8b:c7:af:d9:aa:1a:
         2f:9b:b1:83:16:29:8f:64:65:2a:e5:05:78:0a:ec:5f:14:54:
         a3:0a:54:5c:42:f5:b2:4d:db:13:13:25:22:26:f1:a3:ad:5f:
         10:fb:e6:19:b7:0b:be:18:2d:2f:8f:66:a2:1b:2b:0a:9c:94:
         aa:3a:04:dc:02:3d:4a:e3:7f:5c:e5:6b:36:07:1b:a3:74:d1:
         81:d5:9b:e3:c6:97:65:10:76:75:e8:e1:3f:0f:64:d8:5d:95:
         37:da:c9:cf:0a:b4:ba:b4:71:13:cc:c9:b4:e1:c6:3f:0f:e1:
         64:65:f8:67:be:dd:20:d1:09:f0:f7:c9:89:14:14:29:b0:0c:
         bc:8c:f0:b3:9d:98:10:7e:c0:1f:fb:68:5b:65:99:22:b3:52:
         07:99:72:82:df:20:a3:3e:a7:04:33:8e:88:c2:7e:97:4e:11:
         e6:9c:76:c8:59:d5:79:d9:5f:4b:c7:af:93:ca:27:f3:7d:b5:
         e0:84:27:96:33:f4:2e:ad:60:41:99:e1:4d:ae:02:cd:19:79:
         21:11:b0:1a:5f:e8:29:d5:ca:86:f0:c2:d7:8b:63:23:19:92:
         f7:28:ec:f8:d5:8f:f2:67:c6:79:68:c4:b9:74:7e:d4:94:69:
         4d:0f:14:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----