Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba639547-69d9-4284-b9b1-ef6cd6542aa6/bc74fef6-2be4-3eac-bbd7-23c219fe3226.roa
File:                     bc74fef6-2be4-3eac-bbd7-23c219fe3226.roa (raw, json)
Hash identifier:          2HWDphAT5sx06gK1I6eL7Ca+cfToppPpC6qQUOL9Hho=
Subject key identifier:   0E:9E:F0:88:08:ED:C2:82:D3:7A:95:DF:A7:99:56:BD:5E:4F:7F:21
Certificate issuer:       /CN=ba639547-69d9-4284-b9b1-ef6cd6542aa6
Certificate serial:       010D0C9F43285849D594D084BE44273C000D4F00
Authority key identifier: 9D:AA:D8:AB:28:D7:C6:59:C5:AA:58:E4:D7:88:95:96:3F:B5:59:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba639547-69d9-4284-b9b1-ef6cd6542aa6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba639547-69d9-4284-b9b1-ef6cd6542aa6/bc74fef6-2be4-3eac-bbd7-23c219fe3226.roa
Signing time:             Tue 13 May 2025 01:00:47 +0000
ROA not before:           Tue 13 May 2025 01:00:47 +0000
ROA not after:            Mon 11 Aug 2025 01:00:47 +0000
asID:                     16509
IP address blocks:        2602:f70f::/48 maxlen: 48
Validation:               Failed, certificate revoked on Tue 10 Jun 2025 13:24:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d5:94:d0:84:be:44:27:3c:00:0d:4f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba639547-69d9-4284-b9b1-ef6cd6542aa6
        Validity
            Not Before: May 13 01:00:47 2025 GMT
            Not After : Aug 11 01:00:47 2025 GMT
        Subject: CN=dd258951-459b-4092-8cba-43dd1f7a8582
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:0d:83:8c:2f:02:b1:d0:e9:a2:b6:25:b3:6c:
                    58:ed:79:75:98:f7:b8:78:c6:22:5e:88:9f:6e:9f:
                    8f:e9:84:9d:3d:bb:2d:00:90:d6:6d:a6:26:eb:c8:
                    f3:78:ea:ac:70:39:05:49:1c:5e:27:dc:b1:4b:fb:
                    45:00:8f:f0:9a:29:ed:2f:9b:3a:9b:60:41:7c:38:
                    a4:44:fa:fa:d3:ad:90:7b:81:87:b3:ff:e1:ea:4b:
                    3e:3a:0c:8d:ee:a1:f4:a5:a5:01:32:b3:6a:07:5e:
                    d2:24:82:ad:18:f0:2d:c7:5a:5a:66:a0:86:ca:8d:
                    81:a0:ce:c5:f4:dc:9a:19:33:2d:6e:0f:39:1e:43:
                    5b:62:53:fe:a8:52:73:3f:f0:f7:86:dc:aa:b7:a8:
                    83:58:fd:10:7c:07:d1:6c:7d:50:85:af:1f:cc:bd:
                    0a:44:03:f4:07:63:bf:22:15:35:5e:56:1f:fb:ed:
                    6a:2c:03:cc:6b:f4:91:b4:6c:ff:66:33:66:ee:bb:
                    1b:65:69:ad:6d:ec:82:55:32:c6:76:75:1e:2b:45:
                    0f:c5:06:3c:22:c3:0f:a2:f5:90:f1:9a:b7:92:7f:
                    c9:a0:cf:ea:81:e3:0a:d8:e7:7f:ea:32:f7:73:d7:
                    e8:d7:92:62:1d:dd:42:e5:75:e2:34:be:cb:cd:3d:
                    80:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:9E:F0:88:08:ED:C2:82:D3:7A:95:DF:A7:99:56:BD:5E:4F:7F:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba639547-69d9-4284-b9b1-ef6cd6542aa6/bc74fef6-2be4-3eac-bbd7-23c219fe3226.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba639547-69d9-4284-b9b1-ef6cd6542aa6/ba639547-69d9-4284-b9b1-ef6cd6542aa6.crl

            X509v3 Authority Key Identifier:
                keyid:9D:AA:D8:AB:28:D7:C6:59:C5:AA:58:E4:D7:88:95:96:3F:B5:59:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba639547-69d9-4284-b9b1-ef6cd6542aa6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f70f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:eb:3c:6e:c3:53:1f:31:2b:16:b8:75:80:31:92:73:1e:37:
         f8:c1:3e:a5:d1:7b:54:44:ad:fa:fb:f0:64:c0:9a:34:f0:9a:
         3f:ac:f8:c1:db:b5:3d:6a:e1:1f:09:8e:0f:c9:e0:fb:7e:dd:
         a0:6e:db:ad:3a:48:c5:c7:22:f6:c1:fa:af:4b:87:43:a9:11:
         f9:b8:40:cb:f9:55:14:26:9a:9b:e2:3d:e0:63:4e:0f:68:ba:
         ff:30:4e:a3:0b:a8:02:c1:86:8d:40:8c:9b:b9:8d:2d:60:91:
         e5:38:ae:60:20:7e:74:63:3e:ad:bc:5e:d7:23:5a:ef:30:fa:
         f9:80:11:b4:c1:e1:99:e5:60:25:52:dc:5b:03:19:ce:2b:23:
         be:51:71:fa:cd:80:32:da:d5:f5:dc:d7:02:be:26:b6:f8:1a:
         35:dd:0d:fd:bb:4e:f4:3f:b4:e9:01:65:9b:d5:2a:c1:97:e5:
         83:56:91:95:06:61:0e:1e:36:21:64:af:90:c2:e9:96:50:b4:
         dc:1d:bd:16:b4:8b:d9:ea:fd:47:45:69:1c:88:f9:e6:e9:46:
         e3:d2:c5:02:bd:ef:d4:c8:94:3e:25:70:ef:9a:a6:1f:ee:df:
         9a:32:c6:d1:ce:45:45:27:93:eb:1e:04:75:fb:b0:00:08:d3:
         b8:d2:ff:30
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnVlNCEvkQnPAANTwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmE2Mzk1NDctNjlkOS00Mjg0LWI5YjEtZWY2Y2Q2NTQy
YWE2MB4XDTI1MDUxMzAxMDA0N1oXDTI1MDgxMTAxMDA0N1owLzEtMCsGA1UEAxMk
ZGQyNTg5NTEtNDU5Yi00MDkyLThjYmEtNDNkZDFmN2E4NTgyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2w2DjC8CsdDporYls2xY7Xl1mPe4eMYiXoif
bp+P6YSdPbstAJDWbaYm68jzeOqscDkFSRxeJ9yxS/tFAI/wmintL5s6m2BBfDik
RPr6062Qe4GHs//h6ks+OgyN7qH0paUBMrNqB17SJIKtGPAtx1paZqCGyo2BoM7F
9NyaGTMtbg85HkNbYlP+qFJzP/D3htyqt6iDWP0QfAfRbH1Qha8fzL0KRAP0B2O/
IhU1XlYf++1qLAPMa/SRtGz/ZjNm7rsbZWmtbeyCVTLGdnUeK0UPxQY8IsMPovWQ
8Zq3kn/JoM/qgeMK2Od/6jL3c9fo15JiHd1C5XXiNL7LzT2AswIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFA6e8IgI7cKC03qV36eZVr1eT38hMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iYTYz
OTU0Ny02OWQ5LTQyODQtYjliMS1lZjZjZDY1NDJhYTYvYmM3NGZlZjYtMmJlNC0z
ZWFjLWJiZDctMjNjMjE5ZmUzMjI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYmE2Mzk1NDctNjlkOS00Mjg0LWI5
YjEtZWY2Y2Q2NTQyYWE2L2JhNjM5NTQ3LTY5ZDktNDI4NC1iOWIxLWVmNmNkNjU0
MmFhNi5jcmwwHwYDVR0jBBgwFoAUnarYqyjXxlnFqljk14iVlj+1WYkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9iYTYzOTU0Ny02OWQ5LTQyODQtYjliMS1lZjZj
ZDY1NDJhYTYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL3DwAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACTrPG7DUx8xKxa4dYAxknMeN/jBPqXRe1RErfr78GTAmjTwmj+s
+MHbtT1q4R8Jjg/J4Pt+3aBu2606SMXHIvbB+q9Lh0OpEfm4QMv5VRQmmpviPeBj
Tg9ouv8wTqMLqALBho1AjJu5jS1gkeU4rmAgfnRjPq28XtcjWu8w+vmAEbTB4Znl
YCVS3FsDGc4rI75RcfrNgDLa1fXc1wK+Jrb4GjXdDf27TvQ/tOkBZZvVKsGX5YNW
kZUGYQ4eNiFkr5DC6ZZQtNwdvRa0i9nq/UdFaRyI+ebpRuPSxQK979TIlD4lcO+a
ph/u35oyxtHORUUnk+seBHX7sAAI07jS/zA=
-----END CERTIFICATE-----
Generated at Mon Jun 16 21:54:50 2025 by rpki-client