Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7526f790-ccec-40fc-afc4-9d600cb8a815/7a1c47f2-29f3-3a7d-bb9b-5c25289be1ab.roa
File:                     7a1c47f2-29f3-3a7d-bb9b-5c25289be1ab.roa (raw, json)
Hash identifier:          W0kQw+gvFG+TAWzKscG31J4n7dwaug16t1B54Jb5Xro=
Subject key identifier:   2C:82:F3:FE:D6:FA:47:08:19:25:B8:C7:21:3E:DE:AA:2C:BD:A0:5A
Certificate issuer:       /CN=7526f790-ccec-40fc-afc4-9d600cb8a815
Certificate serial:       010D0C9F43285848D749A800BFC1ABE0D2D3D940
Authority key identifier: A2:2A:15:34:61:F0:E3:32:92:D0:75:36:BB:E4:C3:B1:7E:9C:1E:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7526f790-ccec-40fc-afc4-9d600cb8a815.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7526f790-ccec-40fc-afc4-9d600cb8a815/7a1c47f2-29f3-3a7d-bb9b-5c25289be1ab.roa
Signing time:             Mon 10 Feb 2025 22:54:05 +0000
ROA not before:           Mon 10 Feb 2025 22:54:05 +0000
ROA not after:            Sun 11 May 2025 21:54:05 +0000
asID:                     8075
IP address blocks:        2602:f742::/42 maxlen: 42
Validation:               Failed, certificate revoked on Fri 14 Feb 2025 04:45:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d7:49:a8:00:bf:c1:ab:e0:d2:d3:d9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7526f790-ccec-40fc-afc4-9d600cb8a815
        Validity
            Not Before: Feb 10 22:54:05 2025 GMT
            Not After : May 11 21:54:05 2025 GMT
        Subject: CN=69465ed9-9aae-471e-99b3-8e4dd5574c2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:08:6e:47:f3:4a:54:5a:0e:a6:a9:d4:5d:28:
                    82:87:26:0d:f2:e1:c3:98:52:ec:a0:03:d3:7d:2b:
                    de:c0:ba:33:a5:a9:7a:28:8c:b0:50:e3:00:70:66:
                    40:98:be:a3:84:30:2d:f2:8a:f4:0f:fb:dd:b7:a6:
                    bd:3f:c2:9a:1d:76:6e:28:eb:a4:ae:76:b5:bc:ae:
                    e0:3b:f9:0f:e4:69:8e:82:cd:fc:77:9a:df:01:1d:
                    da:d2:d2:50:55:ce:a0:8c:56:6f:0e:2e:3d:23:1d:
                    4b:00:1d:3e:74:52:c4:22:d1:26:62:16:dd:0a:19:
                    39:0a:45:27:16:4d:8b:79:3b:e7:b9:a6:46:aa:cb:
                    7e:db:e2:ab:04:cd:0c:d6:2a:52:b0:96:87:6a:15:
                    26:31:2c:7d:77:05:7c:c0:8f:98:8c:aa:48:8f:a8:
                    7f:9f:ea:a3:52:c9:c0:25:e1:51:9a:b0:46:2c:be:
                    37:71:28:7f:3f:32:81:92:e3:31:a1:b0:8d:76:e3:
                    c3:9e:8f:55:93:7b:cf:f9:1e:c1:77:9b:e2:fb:00:
                    70:c8:82:3b:b1:f3:6b:b4:74:65:37:5c:45:7b:ac:
                    29:35:a4:be:da:3b:14:1c:57:58:10:95:a3:17:67:
                    d9:d8:4e:9d:b5:32:c4:3a:56:5b:51:02:62:5e:c4:
                    64:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:82:F3:FE:D6:FA:47:08:19:25:B8:C7:21:3E:DE:AA:2C:BD:A0:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7526f790-ccec-40fc-afc4-9d600cb8a815/7a1c47f2-29f3-3a7d-bb9b-5c25289be1ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7526f790-ccec-40fc-afc4-9d600cb8a815/7526f790-ccec-40fc-afc4-9d600cb8a815.crl

            X509v3 Authority Key Identifier:
                keyid:A2:2A:15:34:61:F0:E3:32:92:D0:75:36:BB:E4:C3:B1:7E:9C:1E:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7526f790-ccec-40fc-afc4-9d600cb8a815.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f742::/42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:ca:b7:06:78:d1:cb:54:b9:94:cb:75:df:ee:b2:52:cf:7e:
         04:64:26:8e:41:91:5f:ed:fd:99:3a:46:ef:2d:0a:f8:d5:8e:
         56:96:33:33:c3:4b:f6:29:7a:66:44:50:f1:38:4f:1a:9b:ac:
         c0:af:b7:f4:5a:0b:d0:10:b8:39:31:5d:b4:c7:97:c2:65:0c:
         72:51:f7:1c:12:64:f9:57:62:ce:2f:76:66:78:ff:97:d6:36:
         a2:03:69:6a:7f:b2:e6:e1:dc:6a:35:06:c4:c7:f8:82:6b:db:
         97:a4:0e:2e:5c:9c:2a:ea:f1:ed:14:10:bb:db:a7:62:82:e5:
         70:47:4a:cc:bb:f0:28:90:28:ae:d7:1f:1e:d0:34:8f:7c:50:
         ed:a7:96:5f:ec:7d:14:35:b6:08:2d:a4:27:96:2f:2b:53:c0:
         46:49:7f:13:49:87:47:8f:d9:3c:1c:eb:a3:07:2b:cb:f8:06:
         69:48:c6:58:03:7d:47:03:5f:17:9c:62:0b:b3:09:c0:03:fb:
         c8:f2:fc:79:f9:5f:b0:df:d3:5b:7f:7b:dd:9d:8a:10:2c:f7:
         f5:9a:f5:86:8d:83:20:f1:15:0c:b1:68:fa:49:ef:7f:b7:7a:
         1f:e4:b3:55:2d:98:a8:99:74:3e:75:d6:f6:5f:66:38:f7:92:
         33:43:ce:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:08:00 2025 by rpki-client