Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d08de7cb-e67f-4f6e-abd5-77329e7dffd5/9133abe3-2856-37da-9ca2-e33f4f6fbe18.roa
File:                     9133abe3-2856-37da-9ca2-e33f4f6fbe18.roa (raw, json)
Hash identifier:          MjFaw3Ibyb7Pt5dK4PiRYR14gh6EDo2rJfLQ8EVxe6Q=
Subject key identifier:   D4:76:EC:F6:F4:38:13:07:78:7E:FF:43:52:93:59:61:D1:BE:BD:5F
Certificate issuer:       /CN=d08de7cb-e67f-4f6e-abd5-77329e7dffd5
Certificate serial:       010D0C9F432858461773889ED44751F175BB8580
Authority key identifier: BB:24:51:CB:D7:50:EE:17:2C:3B:31:5D:BF:8C:41:FD:FA:96:2C:CA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d08de7cb-e67f-4f6e-abd5-77329e7dffd5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d08de7cb-e67f-4f6e-abd5-77329e7dffd5/9133abe3-2856-37da-9ca2-e33f4f6fbe18.roa
Signing time:             Mon 03 Jun 2024 20:09:23 +0000
ROA not before:           Mon 03 Jun 2024 20:09:23 +0000
ROA not after:            Sun 01 Sep 2024 20:09:23 +0000
asID:                     396872
IP address blocks:        2602:fe65:1:1::/64 maxlen: 64

Validation:               Failed, certificate revoked on Tue 04 Jun 2024 20:09:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:17:73:88:9e:d4:47:51:f1:75:bb:85:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d08de7cb-e67f-4f6e-abd5-77329e7dffd5
        Validity
            Not Before: Jun  3 20:09:23 2024 GMT
            Not After : Sep  1 20:09:23 2024 GMT
        Subject: CN=55aeb162-dafb-4f9e-9b04-d44339e7cc25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:c7:60:e3:07:41:d6:54:79:74:0a:53:78:f3:
                    71:51:da:b8:c2:11:22:4d:45:0d:c2:d0:a6:a3:85:
                    a7:1b:08:44:26:c9:60:fc:1d:66:e7:79:a9:7f:28:
                    95:51:32:d3:57:40:15:0f:4c:8e:a0:d9:db:c8:c9:
                    a2:e6:43:45:c4:18:7a:45:ce:24:af:15:9f:13:6e:
                    cb:1b:57:0c:bf:24:df:81:2a:e9:10:10:ed:79:38:
                    b5:f0:62:43:bf:98:39:d6:a7:bf:c6:b6:05:33:88:
                    2b:df:21:3e:12:18:4d:d4:83:ed:7a:c7:93:3f:41:
                    fe:65:1e:96:5e:37:84:75:dc:50:d0:ca:44:16:b0:
                    8b:e4:6d:03:d7:91:cf:ee:3f:57:b4:78:e9:7d:80:
                    50:18:7e:a4:04:8f:ee:25:e1:11:3d:24:93:d2:30:
                    39:09:ac:27:90:b2:a2:0e:d4:db:e5:7c:8b:2b:d8:
                    14:1f:08:f6:5c:91:9b:74:23:49:1d:60:b6:5a:77:
                    ec:22:ee:28:e1:03:05:d4:7a:20:6b:0d:d7:51:99:
                    fa:f1:bc:23:18:42:2f:67:10:7e:bc:1e:1e:35:2f:
                    f2:8b:d7:06:79:64:7b:d8:1c:b6:a2:44:a3:67:3f:
                    aa:00:65:c3:c4:1e:b4:0d:9a:94:c4:06:57:ae:c1:
                    91:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:76:EC:F6:F4:38:13:07:78:7E:FF:43:52:93:59:61:D1:BE:BD:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d08de7cb-e67f-4f6e-abd5-77329e7dffd5/9133abe3-2856-37da-9ca2-e33f4f6fbe18.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d08de7cb-e67f-4f6e-abd5-77329e7dffd5/d08de7cb-e67f-4f6e-abd5-77329e7dffd5.crl

            X509v3 Authority Key Identifier:
                keyid:BB:24:51:CB:D7:50:EE:17:2C:3B:31:5D:BF:8C:41:FD:FA:96:2C:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d08de7cb-e67f-4f6e-abd5-77329e7dffd5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fe65:1:1::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:3f:13:69:32:c4:a2:1f:c7:7b:d8:16:4a:61:fd:15:9a:93:
         69:1a:48:07:c0:e9:1f:24:d8:07:8a:f8:04:ea:80:b9:17:ec:
         7d:67:e4:8f:91:68:b8:1e:f3:64:00:47:39:ea:72:84:75:b4:
         f2:76:75:03:39:42:bf:4b:48:80:fe:02:66:4b:35:27:67:f2:
         82:7d:44:dd:e9:b5:24:55:c2:47:df:29:c5:08:21:47:82:b6:
         be:a8:7e:fc:e1:15:2f:cd:f0:2d:da:c0:b3:51:07:f4:4e:76:
         29:16:a3:68:ff:d5:96:ac:03:f6:0c:bb:0a:00:56:6c:54:ed:
         11:6c:9a:9f:61:72:e4:ec:2d:b7:11:9b:80:f2:a5:47:3b:89:
         d2:6d:5d:4e:5b:ed:89:b4:4f:90:f4:f8:30:c8:55:f4:b7:7c:
         cd:ae:64:0b:30:b7:eb:1a:e9:93:6d:63:4f:09:f0:24:e9:f0:
         ff:5c:79:3d:f9:82:15:cd:e3:c7:26:9b:0d:06:52:20:54:8a:
         02:d5:53:10:d2:90:72:17:1a:2c:3d:5d:93:5e:f3:39:e3:5d:
         82:93:55:0e:94:7a:cf:a9:b7:08:fc:3c:ac:ac:6c:6e:6d:f7:
         ac:49:f6:11:ae:eb:79:95:ab:a2:e6:8b:5d:a6:6d:b6:df:06:
         26:dd:6c:6e
-----BEGIN CERTIFICATE-----
MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWEYXc4ie1EdR8XW7hYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDA4ZGU3Y2ItZTY3Zi00ZjZlLWFiZDUtNzczMjllN2Rm
ZmQ1MB4XDTI0MDYwMzIwMDkyM1oXDTI0MDkwMTIwMDkyM1owLzEtMCsGA1UEAxMk
NTVhZWIxNjItZGFmYi00ZjllLTliMDQtZDQ0MzM5ZTdjYzI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7sdg4wdB1lR5dApTePNxUdq4whEiTUUNwtCm
o4WnGwhEJslg/B1m53mpfyiVUTLTV0AVD0yOoNnbyMmi5kNFxBh6Rc4krxWfE27L
G1cMvyTfgSrpEBDteTi18GJDv5g51qe/xrYFM4gr3yE+EhhN1IPteseTP0H+ZR6W
XjeEddxQ0MpEFrCL5G0D15HP7j9XtHjpfYBQGH6kBI/uJeERPSST0jA5CawnkLKi
DtTb5XyLK9gUHwj2XJGbdCNJHWC2WnfsIu4o4QMF1Hogaw3XUZn68bwjGEIvZxB+
vB4eNS/yi9cGeWR72By2okSjZz+qAGXDxB60DZqUxAZXrsGR8QIDAQABo4IDWjCC
A1YwHQYDVR0OBBYEFNR27Pb0OBMHeH7/Q1KTWWHRvr1fMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9kMDhk
ZTdjYi1lNjdmLTRmNmUtYWJkNS03NzMyOWU3ZGZmZDUvOTEzM2FiZTMtMjg1Ni0z
N2RhLTljYTItZTMzZjRmNmZiZTE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZDA4ZGU3Y2ItZTY3Zi00ZjZlLWFi
ZDUtNzczMjllN2RmZmQ1L2QwOGRlN2NiLWU2N2YtNGY2ZS1hYmQ1LTc3MzI5ZTdk
ZmZkNS5jcmwwHwYDVR0jBBgwFoAUuyRRy9dQ7hcsOzFdv4xB/fqWLMowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9kMDhkZTdjYi1lNjdmLTRmNmUtYWJkNS03NzMy
OWU3ZGZmZDUuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAJgL+ZQAB
AAEwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw
czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG
9w0BAQsFAAOCAQEAtD8TaTLEoh/He9gWSmH9FZqTaRpIB8DpHyTYB4r4BOqAuRfs
fWfkj5FouB7zZABHOepyhHW08nZ1AzlCv0tIgP4CZks1J2fygn1E3em1JFXCR98p
xQghR4K2vqh+/OEVL83wLdrAs1EH9E52KRajaP/VlqwD9gy7CgBWbFTtEWyan2Fy
5OwttxGbgPKlRzuJ0m1dTlvtibRPkPT4MMhV9Ld8za5kCzC36xrpk21jTwnwJOnw
/1x5PfmCFc3jxyabDQZSIFSKAtVTENKQchcaLD1dk17zOeNdgpNVDpR6z6m3CPw8
rKxsbm33rEn2Ea7reZWrouaLXaZttt8GJt1sbg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:56 2024 by rpki-client on console-ams.rpki-client.org