Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6/1d207a23-a88b-3177-8a68-e5dfa75f4bf0.roa
File:                     1d207a23-a88b-3177-8a68-e5dfa75f4bf0.roa (raw, json)
Hash identifier:          0iW7i5hglYjd3utfhkAXHM+AG9OE/IaKsDhGq5VM10o=
Subject key identifier:   E5:FD:9F:77:5A:C0:84:F5:D8:87:49:A1:37:4B:F5:D8:73:0E:DA:DD
Certificate issuer:       /CN=4ee37184-86de-48c9-af35-5d102d140fa6
Certificate serial:       010D0C9F43285849D22D638406218FA2D6005E00
Authority key identifier: CC:ED:9F:B8:EE:D2:97:B7:58:AB:E8:0A:AA:D3:C8:CB:D8:4C:D1:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6/1d207a23-a88b-3177-8a68-e5dfa75f4bf0.roa
Signing time:             Sun 11 May 2025 19:45:02 +0000
ROA not before:           Sun 11 May 2025 19:45:02 +0000
ROA not after:            Sat 09 Aug 2025 19:45:02 +0000
asID:                     54416
IP address blocks:        2602:f766:2::/47 maxlen: 47
                          2602:f766:4::/46 maxlen: 46
                          2602:f766:8::/47 maxlen: 47
                          2602:f766:a::/48 maxlen: 48
                          2602:f766:c::/46 maxlen: 46
                          2602:f766:10::/44 maxlen: 44
                          2602:f766:20::/43 maxlen: 43
                          2602:f766:100::/40 maxlen: 40
                          2602:f766:200::/39 maxlen: 39
                          2602:f766:400::/40 maxlen: 40
Validation:               Failed, certificate revoked on Thu 15 May 2025 15:53:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d2:2d:63:84:06:21:8f:a2:d6:00:5e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ee37184-86de-48c9-af35-5d102d140fa6
        Validity
            Not Before: May 11 19:45:02 2025 GMT
            Not After : Aug  9 19:45:02 2025 GMT
        Subject: CN=8d9604e0-1070-4bc6-aa07-317541d996dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:20:ae:c6:50:69:41:f0:79:c9:6e:cf:33:ae:
                    ca:9e:9d:50:74:26:a2:b1:a2:a7:43:05:f7:3b:77:
                    bd:70:73:0d:c8:07:79:59:9a:32:2f:de:ce:47:ef:
                    8a:3f:df:ec:ae:6e:54:5d:c3:d0:19:a3:0b:d0:80:
                    4e:a0:e4:c9:d8:8d:55:bb:6d:6a:23:8b:76:62:ed:
                    67:13:7c:d2:2d:44:48:ec:c1:f3:d6:b7:29:08:bd:
                    00:b1:c2:77:29:99:ea:fb:04:e5:40:90:37:8b:c1:
                    62:fc:c3:2a:04:8e:05:a2:45:6a:fa:4b:e6:78:cd:
                    ab:41:8a:da:64:da:8c:05:93:62:0a:92:7a:24:7c:
                    81:f6:52:d5:aa:d5:e0:4f:70:3a:84:de:6b:62:79:
                    d6:53:32:60:b3:c4:0a:11:fb:a4:6a:24:7d:8a:53:
                    85:45:2a:69:21:28:88:b1:1d:22:9d:d1:a2:ce:9d:
                    01:0f:7f:d5:16:a1:29:e1:8a:e0:8a:6c:2e:5c:d2:
                    10:44:f6:82:4d:3f:df:25:e8:9e:f7:a4:b7:f3:cb:
                    13:44:70:25:bd:e6:69:1f:25:3e:ad:1d:77:0a:fd:
                    71:fe:0e:8a:6a:64:16:ee:a8:21:70:c5:e3:3b:dd:
                    68:b0:0d:aa:ba:f3:3c:6b:08:b0:57:b4:74:87:59:
                    87:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:FD:9F:77:5A:C0:84:F5:D8:87:49:A1:37:4B:F5:D8:73:0E:DA:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6/1d207a23-a88b-3177-8a68-e5dfa75f4bf0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6/4ee37184-86de-48c9-af35-5d102d140fa6.crl

            X509v3 Authority Key Identifier:
                keyid:CC:ED:9F:B8:EE:D2:97:B7:58:AB:E8:0A:AA:D3:C8:CB:D8:4C:D1:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4ee37184-86de-48c9-af35-5d102d140fa6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f766:2::-2602:f766:a:ffff:ffff:ffff:ffff:ffff
                  2602:f766:c::-2602:f766:3f:ffff:ffff:ffff:ffff:ffff
                  2602:f766:100::-2602:f766:4ff:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:ab:79:dc:22:56:02:74:82:16:81:20:36:23:3c:9a:59:6b:
         41:c3:29:15:d7:c3:39:fa:4b:c1:08:cf:55:83:a9:1a:23:01:
         a2:8e:3b:08:59:25:2a:b5:8a:5f:da:06:64:83:e8:c4:7e:c6:
         44:39:f6:ee:e5:2d:a1:70:58:53:52:0a:bc:75:a0:8f:64:81:
         11:06:67:db:80:28:a5:2f:c6:ef:d2:ef:89:f8:95:95:c6:05:
         e9:1a:07:7d:99:49:ba:be:45:3d:ae:10:17:4a:8c:1f:86:6d:
         28:44:ba:83:29:21:5d:c9:01:bb:a9:5a:c4:27:48:70:bf:99:
         3f:c0:e0:98:1a:81:9f:91:03:71:2b:5f:0d:4f:bc:30:9b:6b:
         61:7c:d8:58:42:bd:06:f7:ba:81:88:cd:d5:02:7a:79:81:8c:
         52:c2:d8:8e:a6:60:35:dd:9e:b4:f9:e2:e1:5a:0e:16:8e:39:
         b5:95:71:06:68:10:c8:9b:70:f5:e6:2b:e3:9c:20:64:60:47:
         9b:60:ff:48:d0:81:cf:da:57:db:a1:5b:df:38:3f:dc:a5:d9:
         61:3d:39:4d:a8:97:2e:de:21:be:05:57:f5:99:29:b9:f0:24:
         55:af:9e:e7:bd:91:be:cd:c1:66:60:be:74:22:73:72:5f:83:
         9f:a5:5c:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 06:19:23 2025 by rpki-client