Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/771d5d5b-d813-33fe-9b58-d7b940c5d007.roa
File:                     771d5d5b-d813-33fe-9b58-d7b940c5d007.roa (raw, json)
Hash identifier:          x4bHRECLjFyqzclA1GKsfyRcKR/8MCYVDrydyQ42hHY=
Subject key identifier:   4A:89:EE:ED:E6:1E:35:E9:C0:95:75:1F:51:07:4A:20:E6:8D:05:33
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F43285842B065A43F60DBE0C248261CC0
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/771d5d5b-d813-33fe-9b58-d7b940c5d007.roa
Signing time:             Wed 26 Jul 2023 12:00:00 +0000
ROA not before:           Wed 26 Jul 2023 12:00:00 +0000
ROA not after:            Mon 29 Jul 2024 04:00:00 +0000
asID:                     43515
IP address blocks:        2620:11a:a000::/40 maxlen: 40

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:23:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:b0:65:a4:3f:60:db:e0:c2:48:26:1c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Jul 26 12:00:00 2023 GMT
            Not After : Jul 29 04:00:00 2024 GMT
        Subject: CN=991d2e3b-cf7d-41f7-9cee-af77e15d7d61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:ed:f2:32:01:2a:43:a0:bf:33:91:91:9c:de:
                    56:62:8d:e5:3f:ef:77:c1:de:d5:81:2f:ad:8e:8d:
                    b3:f1:55:7f:12:19:2a:13:09:c1:4f:33:34:24:2e:
                    87:c7:d5:52:25:ca:e9:39:d1:44:00:4d:bd:92:f6:
                    42:b0:cd:fb:bc:1e:2c:0d:ca:18:8b:b6:84:a4:23:
                    2e:a8:fe:f9:17:b6:9f:c1:23:c3:0b:44:f1:3a:73:
                    32:4f:fe:0b:7b:d4:bd:23:92:fc:e9:fc:d4:67:34:
                    71:d2:71:40:c8:13:f4:a9:d6:9e:0f:66:7d:a5:d7:
                    e7:e3:fd:8e:d5:8a:6a:07:9c:b7:4d:ff:42:96:99:
                    9e:90:50:bb:75:c2:ad:c6:6b:fe:51:e7:74:c0:6f:
                    5c:8e:96:68:f1:6b:c9:38:68:35:e2:2b:e1:c0:95:
                    99:16:34:35:59:b3:cc:46:0c:8e:78:3d:50:2a:96:
                    a8:cb:70:5e:18:b1:e3:73:3f:7b:16:07:7c:af:88:
                    32:25:eb:94:32:ce:52:dc:b9:31:37:a4:73:a0:d3:
                    39:58:55:4d:6c:72:8b:af:9a:be:25:81:2e:27:1e:
                    6f:d2:8b:f6:3c:40:5a:78:ba:a7:a6:27:c5:2c:88:
                    e2:d8:b1:c2:29:55:bf:d6:b0:34:67:37:15:63:02:
                    11:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:89:EE:ED:E6:1E:35:E9:C0:95:75:1F:51:07:4A:20:E6:8D:05:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/771d5d5b-d813-33fe-9b58-d7b940c5d007.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:11a:a000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:50:c9:da:b3:26:f1:e3:b5:77:c4:a3:f3:c0:38:3b:8a:00:
         52:ac:95:8f:19:7e:a5:25:a7:5b:7a:8f:f3:da:3a:29:3d:4d:
         5c:70:94:7e:16:9d:9f:01:51:09:28:c1:d6:9f:a4:93:84:30:
         5b:cf:11:ac:d7:77:a1:80:b9:64:9f:71:2a:eb:17:00:b8:12:
         83:ef:0c:3a:96:c5:3f:4c:be:94:55:f9:6d:72:49:f3:e1:01:
         18:08:09:15:d8:5b:44:a4:15:0b:44:3c:cf:1a:f7:13:55:b8:
         f5:21:3a:55:03:ca:fb:f2:ff:e6:b4:66:5e:fa:39:dc:f9:74:
         38:fb:94:ff:56:04:48:83:d7:4a:9a:d5:fc:5c:79:ee:82:90:
         97:9c:56:26:e9:ce:c8:99:55:ed:4e:57:64:ee:02:74:13:a5:
         4b:49:49:b8:09:36:8d:f1:28:fb:e8:44:13:91:8c:d5:ef:00:
         c2:64:f8:fc:76:d7:0d:63:27:88:45:c5:1a:03:cf:36:73:4f:
         a5:06:9a:fe:99:dd:16:4e:50:81:c0:0f:d0:e6:1e:c4:3b:cd:
         c2:c7:9c:7d:ba:dd:9e:64:6d:47:d3:2f:91:ba:9e:68:21:07:
         1a:d8:7e:ee:e7:c2:6b:c4:7b:d3:ef:60:d5:de:cb:87:4e:96:
         34:36:fe:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----