Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/8fb25c39-c635-39fc-bd6f-79f1ab8d1332.roa
File:                     8fb25c39-c635-39fc-bd6f-79f1ab8d1332.roa (raw, json)
Hash identifier:          hArddpJVikDIzcA0Y8i7wOxTeY2b3sjEH8LxVbInW+k=
Subject key identifier:   2B:AE:99:46:C5:28:7D:E2:84:1B:96:11:8B:EC:1E:97:84:46:CA:4C
Certificate issuer:       /CN=b42cd78d-c3f1-471a-931a-26eaf5a872f3
Certificate serial:       010D0C9F43285844D6058E40F796F4149813BD80
Authority key identifier: 0A:F3:1E:F6:71:CB:5B:F5:26:03:2D:37:EE:66:DD:C8:8B:6D:54:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/8fb25c39-c635-39fc-bd6f-79f1ab8d1332.roa
Signing time:             Fri 09 Feb 2024 16:53:19 +0000
ROA not before:           Fri 09 Feb 2024 16:53:19 +0000
ROA not after:            Thu 09 May 2024 15:53:19 +0000
asID:                     53727
IP address blocks:        2602:f982::/36 maxlen: 48

Validation:               Failed, certificate revoked on Mon 19 Feb 2024 17:47:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:d6:05:8e:40:f7:96:f4:14:98:13:bd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b42cd78d-c3f1-471a-931a-26eaf5a872f3
        Validity
            Not Before: Feb  9 16:53:19 2024 GMT
            Not After : May  9 15:53:19 2024 GMT
        Subject: CN=9c41be91-9b43-46ca-b3f6-d0bea759f2b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:96:2c:04:1c:71:20:c2:cf:b3:27:e7:82:20:
                    b5:b0:b6:29:e9:0c:f1:af:55:b1:71:2b:d0:db:9c:
                    43:df:0e:a3:1e:ef:c1:fe:7e:23:4c:ad:7d:27:a8:
                    ed:a5:0c:5c:05:9d:8d:46:17:82:86:23:d1:6c:b7:
                    f4:54:9f:2e:31:0b:8f:e5:34:b0:8c:c2:6f:32:80:
                    a2:b9:66:55:4d:a8:27:a2:4c:7f:7e:30:77:22:b2:
                    1e:91:4b:cf:4e:15:66:16:60:b6:d4:a2:b1:5a:6c:
                    f5:f1:7a:d8:4d:57:d9:a2:e1:28:40:0a:2a:80:ab:
                    f2:23:fd:e5:d7:2b:43:cc:7f:6d:2e:f5:a9:2f:66:
                    2f:f3:02:d5:24:bf:48:14:ad:48:d1:b4:22:ad:4c:
                    53:cf:fb:1f:55:61:2c:20:6d:d7:27:19:d6:e8:71:
                    cb:eb:e0:82:c4:08:78:4c:ff:76:83:75:48:41:be:
                    4a:6f:e0:a7:bb:d4:04:c9:e2:ca:d0:df:14:0d:76:
                    13:98:d7:d8:c7:c6:0d:e8:56:11:d6:4d:d0:39:fd:
                    06:18:1b:a4:4a:01:a5:85:77:f3:cf:6c:a0:6c:66:
                    9a:cf:57:80:28:6a:71:42:62:da:a5:71:be:00:ab:
                    56:f5:30:64:5a:13:cc:b8:70:7d:e3:7f:97:ae:d1:
                    29:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:AE:99:46:C5:28:7D:E2:84:1B:96:11:8B:EC:1E:97:84:46:CA:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/8fb25c39-c635-39fc-bd6f-79f1ab8d1332.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/b42cd78d-c3f1-471a-931a-26eaf5a872f3.crl

            X509v3 Authority Key Identifier:
                keyid:0A:F3:1E:F6:71:CB:5B:F5:26:03:2D:37:EE:66:DD:C8:8B:6D:54:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f982::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:ef:99:0c:06:8a:a8:75:67:b8:1d:e2:17:71:49:81:b3:f3:
         53:8c:5a:f8:a1:32:47:8c:a9:15:80:90:6b:8d:fa:46:39:0e:
         14:98:7a:19:0c:67:aa:6f:4b:fa:55:6d:34:04:ba:7b:1e:56:
         a6:c3:97:ca:d8:95:75:19:14:1b:b9:5e:ea:40:1a:97:4f:67:
         8f:21:f5:2e:98:2f:4f:1a:bf:b1:e7:9d:ed:d7:a5:15:32:f9:
         fb:7f:79:89:c1:63:5e:77:c7:68:33:8d:bf:d6:2c:1e:21:8d:
         de:b7:a3:38:da:fb:eb:f8:14:dc:a3:03:aa:99:9d:80:d5:0c:
         5b:2d:6c:2e:fe:46:17:01:75:95:8c:0b:79:4a:de:0d:91:df:
         83:6d:fe:a3:b3:36:f2:6d:87:9b:36:0f:ef:a9:c1:4a:5b:ba:
         ae:a6:68:27:2c:94:c1:c4:bb:05:bc:3a:d1:52:44:8d:36:88:
         73:3f:64:e3:67:71:c7:0e:2a:04:ca:2a:6c:a7:37:4b:d7:2b:
         8f:21:3b:c4:9f:8e:85:37:18:e1:f6:7d:35:7b:38:90:4b:57:
         65:90:ff:e7:63:c5:75:cb:37:2d:3e:65:09:7e:0d:ed:96:d9:
         c5:7e:81:b0:89:2a:6f:c3:55:36:a8:43:6e:2f:8a:6e:49:49:
         f6:fc:d9:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 19 21:07:41 2024 by rpki-client on console-fra.rpki-client.org