Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9330b8fe-8cb9-471b-a186-5ab83c9e451d/e9b4ac6d-bff7-3e29-b177-eddae240883c.roa
File:                     e9b4ac6d-bff7-3e29-b177-eddae240883c.roa (raw, json)
Hash identifier:          WpVDHzndfPwuxMkwr4r3JXfEjN0+G4oKNXoRWH1PuW4=
Subject key identifier:   22:C6:FE:52:CA:A5:97:17:41:9C:D6:F9:3D:00:8C:19:CF:E4:FE:42
Certificate issuer:       /CN=9330b8fe-8cb9-471b-a186-5ab83c9e451d
Certificate serial:       010D0C9F432858442F9E5E527A611B1DDB9E29C0
Authority key identifier: EE:AA:21:D4:C0:E7:3B:BA:82:BF:E0:45:1E:2B:CA:94:3E:1A:F5:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9330b8fe-8cb9-471b-a186-5ab83c9e451d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9330b8fe-8cb9-471b-a186-5ab83c9e451d/e9b4ac6d-bff7-3e29-b177-eddae240883c.roa
Signing time:             Tue 12 Dec 2023 02:21:13 +0000
ROA not before:           Tue 12 Dec 2023 02:21:13 +0000
ROA not after:            Mon 11 Mar 2024 01:21:13 +0000
asID:                     211380
IP address blocks:        2602:291:bb::/48 maxlen: 48

Validation:               Failed, certificate revoked on Wed 31 Jan 2024 17:14:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:2f:9e:5e:52:7a:61:1b:1d:db:9e:29:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9330b8fe-8cb9-471b-a186-5ab83c9e451d
        Validity
            Not Before: Dec 12 02:21:13 2023 GMT
            Not After : Mar 11 01:21:13 2024 GMT
        Subject: CN=ea369404-98ef-4c69-acf3-d792ad91ed63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:d8:b5:cf:43:33:85:d0:29:64:6e:e1:e5:fa:
                    9e:20:b4:01:cb:1e:81:e4:e7:4c:16:f2:ee:73:aa:
                    59:29:02:06:df:b7:49:cf:00:d9:08:b8:d0:f2:64:
                    d4:ea:8e:f8:28:b7:cf:2b:72:84:8a:20:92:34:68:
                    d6:d9:1f:db:98:43:3a:ee:99:60:c5:7c:dc:c8:64:
                    4d:4b:68:2f:6c:0a:f9:d2:e7:40:fa:87:93:b0:8e:
                    ff:07:d5:6b:72:83:84:4d:9c:8f:3b:27:46:0f:1a:
                    56:1a:ed:dc:84:7a:ba:46:a3:09:f6:d5:53:63:b8:
                    7a:43:52:2c:86:ce:fa:3c:d1:d9:e8:7e:f0:2b:49:
                    77:e7:01:ab:00:e9:5e:d6:10:9f:96:52:30:30:5b:
                    8a:ef:af:cf:75:9f:d3:60:bf:6d:ed:1c:d4:d4:dd:
                    67:74:f5:8b:16:9a:b5:83:42:70:19:84:e1:50:67:
                    88:86:e2:09:74:3e:45:64:91:ad:bc:39:f2:c7:1f:
                    f0:05:c7:b0:00:0b:25:b4:d9:59:f6:cd:17:22:8b:
                    f3:20:ec:f5:63:ab:d7:9d:be:40:3f:2c:ba:ed:25:
                    e4:da:f9:fb:78:62:c5:23:ab:40:2e:8a:38:d6:86:
                    bd:04:ff:46:04:2f:a1:13:f3:1c:d7:04:b9:eb:40:
                    85:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:C6:FE:52:CA:A5:97:17:41:9C:D6:F9:3D:00:8C:19:CF:E4:FE:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9330b8fe-8cb9-471b-a186-5ab83c9e451d/e9b4ac6d-bff7-3e29-b177-eddae240883c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9330b8fe-8cb9-471b-a186-5ab83c9e451d/9330b8fe-8cb9-471b-a186-5ab83c9e451d.crl

            X509v3 Authority Key Identifier:
                keyid:EE:AA:21:D4:C0:E7:3B:BA:82:BF:E0:45:1E:2B:CA:94:3E:1A:F5:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9330b8fe-8cb9-471b-a186-5ab83c9e451d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:291:bb::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:78:46:e9:15:b2:57:df:1d:8f:ba:c5:f9:2c:23:8f:42:ea:
         9d:c4:5c:a1:82:79:ae:0e:77:36:e8:97:08:ee:0b:f9:9b:01:
         6f:d7:e6:5b:38:7a:f6:9a:ee:7e:93:5c:62:b8:df:48:e0:90:
         f0:b5:ad:5d:ec:dc:d4:25:ee:9a:ca:e9:d6:f8:14:55:b1:4b:
         99:6f:e4:51:03:ec:76:37:d6:c8:10:09:4d:a7:21:04:4e:4b:
         85:f7:ec:a9:e3:19:d8:a7:e8:49:68:22:67:8f:fa:78:28:bc:
         6c:cd:e4:bc:6d:a3:49:78:bf:96:3c:24:d6:0b:62:93:d0:81:
         df:f7:6e:6e:f5:54:56:20:dd:d8:cd:e4:a9:dc:d1:d6:d0:48:
         c9:fb:4f:f7:3e:57:4a:37:84:8b:5d:04:db:ec:40:e6:b4:b6:
         57:c1:64:49:c5:0c:0d:6c:3b:db:41:16:8f:48:30:99:5c:28:
         ab:3c:85:e5:58:87:7c:0c:d9:d7:68:5e:b8:bd:49:d7:07:f1:
         d7:50:59:6f:2d:cf:6a:9e:6b:0b:53:10:cb:0c:2a:2a:4f:fb:
         2e:b4:75:93:90:61:78:d7:3a:84:ed:73:a1:f3:bb:56:a0:2e:
         66:52:7f:d7:9f:e1:a6:75:01:c5:32:6d:d6:05:71:c9:e3:5d:
         c9:6c:81:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 31 20:32:40 2024 by rpki-client on console-ams.rpki-client.org