Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ae28727d-067f-3a3b-917d-a7c2e6ec233d.roa
File:                     ae28727d-067f-3a3b-917d-a7c2e6ec233d.roa (raw, json)
Hash identifier:          h0XBn12xEnwb3ph5B6wd8mohQmySd2HqbE23IcLS6k0=
Subject key identifier:   D8:F2:2D:C6:2C:19:8E:0D:46:DD:8A:F3:46:34:35:C5:A1:E9:E4:ED
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285849C0A4FA76497E9E6D42E3E140
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ae28727d-067f-3a3b-917d-a7c2e6ec233d.roa
Signing time:             Mon 05 May 2025 13:01:00 +0000
ROA not before:           Mon 05 May 2025 13:01:00 +0000
ROA not after:            Sun 03 Aug 2025 13:01:00 +0000
asID:                     153317
IP address blocks:        2001:470:1c6::/48 maxlen: 48
Validation:               Failed, certificate revoked on Sat 31 May 2025 19:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c0:a4:fa:76:49:7e:9e:6d:42:e3:e1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May  5 13:01:00 2025 GMT
            Not After : Aug  3 13:01:00 2025 GMT
        Subject: CN=22b73048-6f38-410b-a186-a53c31ac9baf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:8e:a4:65:0a:32:5e:3d:94:6a:3d:9b:e8:51:
                    41:04:91:3d:d3:fb:cd:12:88:98:a3:a6:af:20:87:
                    d1:36:8d:9c:36:80:fb:47:32:17:c9:60:ea:bf:80:
                    e2:33:79:53:21:d2:6c:a9:bc:ae:2d:91:0e:ef:b3:
                    79:74:59:92:8c:2f:6c:96:86:66:2f:46:5b:a3:52:
                    d7:15:b6:f6:a7:73:13:0e:32:56:e3:2f:ca:81:ca:
                    0a:c7:eb:b7:eb:98:88:b9:8a:6e:32:98:26:5f:d7:
                    cb:76:70:9f:0c:28:14:de:fd:2d:7b:57:7a:40:be:
                    21:4e:3d:fb:98:46:a4:50:4b:03:e5:db:77:f4:4b:
                    56:5b:a1:e3:08:e7:d6:58:90:cf:ac:e7:7e:2b:60:
                    59:f0:e7:19:f9:4c:96:6e:61:83:82:fa:74:d0:38:
                    40:f8:f4:80:f4:c9:18:6a:bd:43:97:d0:45:e3:61:
                    80:61:7b:b8:4a:fc:2e:3d:47:5a:24:ea:ac:42:83:
                    f1:d7:3b:3f:4d:6a:45:a5:55:9a:b5:0d:0b:cb:5d:
                    c9:24:28:a9:7e:d6:4e:42:e6:aa:e3:dd:99:53:3e:
                    c2:55:0c:f0:c2:c3:5d:07:4b:df:6f:17:0a:ce:a0:
                    f3:0e:b5:cb:35:cd:40:1a:b9:f2:4a:f9:55:1e:b9:
                    3e:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:F2:2D:C6:2C:19:8E:0D:46:DD:8A:F3:46:34:35:C5:A1:E9:E4:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ae28727d-067f-3a3b-917d-a7c2e6ec233d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:1c6::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:75:a8:8f:3c:cc:5f:2b:57:0e:31:7e:9a:26:f7:b0:34:6e:
         60:a3:78:7c:f4:12:40:4f:c1:d5:37:c2:22:ed:6f:13:7f:e9:
         d1:7a:06:f2:83:00:f4:05:2b:ec:76:5b:2c:4c:83:2e:40:bd:
         58:6f:6d:07:0a:95:5e:67:45:06:fa:68:90:94:15:7c:94:83:
         85:47:cb:e9:31:84:5e:4f:cc:a3:d1:e0:8d:3a:a7:61:ae:ba:
         87:b1:35:91:de:0b:88:11:05:ed:4f:c1:8f:0f:26:92:e2:35:
         23:bb:ab:75:bf:04:16:6d:50:ff:e9:40:10:36:ed:bc:1d:0d:
         25:19:c1:d7:55:9f:86:12:4e:d4:13:38:41:23:b9:5c:96:6c:
         a2:52:7d:0f:ab:af:16:53:62:8e:a3:52:30:8e:1a:9a:61:9a:
         80:8c:90:ba:a4:34:b7:31:0d:d1:2f:f9:7f:4e:2e:b2:92:41:
         d5:ac:89:36:0b:b3:a9:92:97:d1:8b:64:cf:ff:87:33:ec:37:
         7d:a5:95:92:a7:ce:45:a3:be:08:08:bd:f4:eb:0e:dd:39:50:
         1f:30:8b:05:81:fe:da:6e:69:e0:7f:d9:7c:34:b8:d5:28:cb:
         6a:9a:14:51:2d:e1:99:95:99:9e:22:af:99:9a:1d:c9:f6:81:
         7b:00:47:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 21:00:19 2025 by rpki-client