Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5f886d4a-74e0-4cee-83ea-7f75a6c71c53/636b2224-db47-3cba-89e9-14bdcd272d78.roa
File:                     636b2224-db47-3cba-89e9-14bdcd272d78.roa (raw, json)
Hash identifier:          iXOPu9eVT9y/DzauQ8e23c1G/hIDUF7LdF/fZzvp0X4=
Subject key identifier:   0E:6E:4F:18:2D:E2:53:1A:DB:AD:CC:CC:36:14:B4:41:F2:3A:08:2D
Certificate issuer:       /CN=5f886d4a-74e0-4cee-83ea-7f75a6c71c53
Certificate serial:       010D0C9F432858453421EC90307FD351FDED9200
Authority key identifier: 6A:A5:CC:B3:80:BC:8D:39:D5:C9:30:F4:6C:E8:7B:DB:26:1C:AE:46
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5f886d4a-74e0-4cee-83ea-7f75a6c71c53.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5f886d4a-74e0-4cee-83ea-7f75a6c71c53/636b2224-db47-3cba-89e9-14bdcd272d78.roa
Signing time:             Thu 14 Mar 2024 09:56:28 +0000
ROA not before:           Thu 14 Mar 2024 09:56:28 +0000
ROA not after:            Wed 12 Jun 2024 09:56:28 +0000
asID:                     25862
IP address blocks:        2602:2e0::/48 maxlen: 48

Validation:               Failed, certificate revoked on Fri 12 Apr 2024 06:15:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:34:21:ec:90:30:7f:d3:51:fd:ed:92:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f886d4a-74e0-4cee-83ea-7f75a6c71c53
        Validity
            Not Before: Mar 14 09:56:28 2024 GMT
            Not After : Jun 12 09:56:28 2024 GMT
        Subject: CN=3425b076-7b17-456e-8e0c-564b61cfea4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:bd:26:b9:96:ea:4c:5c:63:0c:2b:a0:0c:64:
                    78:ce:3b:1d:24:97:8a:be:48:48:24:aa:fa:a5:2f:
                    e7:55:68:62:58:48:64:f2:95:5f:d6:09:05:e9:74:
                    7f:02:1b:a8:c8:3a:74:74:87:a9:dd:52:8d:13:b3:
                    74:55:ff:87:ee:c8:78:2c:39:1d:54:1d:8a:8d:1e:
                    2f:b7:ae:00:69:a0:d4:30:86:f5:be:5d:66:65:7a:
                    a5:e7:f3:b8:77:65:aa:03:38:67:85:b1:55:09:25:
                    cd:30:da:f1:44:59:ff:56:8c:d1:4f:db:ce:a6:91:
                    23:5e:50:50:92:65:55:5a:7c:18:7c:85:e7:b4:9e:
                    e8:52:a2:db:6f:4a:ed:27:fe:8a:4b:1e:cf:23:9c:
                    84:e4:b4:fc:6d:7b:09:d2:86:02:3a:57:5a:5e:1f:
                    7e:8e:f4:b6:b1:a9:94:bd:d6:d4:2b:5f:5a:2c:aa:
                    09:8d:29:86:0a:33:aa:e1:b4:92:ac:90:ab:e3:75:
                    76:74:16:82:62:d4:0c:97:cf:63:63:01:00:78:90:
                    52:cd:62:e6:87:c1:94:c7:c0:db:e5:f1:28:53:8d:
                    5c:b7:b2:00:8f:87:8d:0b:d9:4a:8e:65:67:ac:e2:
                    16:f8:10:43:d6:a3:d4:44:a6:e3:49:6c:4a:65:c4:
                    db:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:6E:4F:18:2D:E2:53:1A:DB:AD:CC:CC:36:14:B4:41:F2:3A:08:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5f886d4a-74e0-4cee-83ea-7f75a6c71c53/636b2224-db47-3cba-89e9-14bdcd272d78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5f886d4a-74e0-4cee-83ea-7f75a6c71c53/5f886d4a-74e0-4cee-83ea-7f75a6c71c53.crl

            X509v3 Authority Key Identifier:
                keyid:6A:A5:CC:B3:80:BC:8D:39:D5:C9:30:F4:6C:E8:7B:DB:26:1C:AE:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5f886d4a-74e0-4cee-83ea-7f75a6c71c53.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2e0::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:f3:7e:82:28:90:c2:88:3f:18:cb:1c:7b:60:b7:2d:72:4e:
         aa:83:4f:55:7b:52:3d:ba:26:df:b0:20:8d:ab:be:b7:60:c0:
         aa:eb:66:20:fa:fa:0f:4e:b1:fe:52:ab:b9:da:5e:24:99:a1:
         54:21:f2:03:ba:57:a0:ce:5d:27:75:09:f2:52:6e:2b:78:82:
         cb:30:ca:f2:39:fe:33:5c:5c:48:df:76:ca:8f:c9:a8:02:09:
         62:df:6c:a4:d3:d3:ee:b3:68:73:7e:35:e1:51:c1:c7:59:24:
         cb:7a:83:88:85:3e:67:e7:4c:78:ea:66:00:b9:8a:9e:78:09:
         2b:f2:f6:5d:3b:e3:71:d9:15:61:6f:36:ac:8a:40:85:72:54:
         97:32:4a:65:a2:92:77:1c:a2:6d:4e:4c:a5:dd:22:18:5b:20:
         55:9b:36:75:83:e3:b6:64:aa:11:db:09:75:60:e2:35:a3:dd:
         ae:3e:a6:27:3c:45:ba:cc:31:e3:4e:c7:27:33:47:25:9f:6c:
         86:aa:25:ea:41:05:1b:0b:3b:2d:cd:9d:6c:21:44:6e:62:4c:
         38:62:5c:72:7b:39:d9:8e:87:33:c8:6d:b5:86:de:08:3c:d1:
         e0:d5:e9:d9:21:8f:4e:e9:eb:b2:d8:34:ed:bc:00:88:8c:68:
         ab:d8:05:8c
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEU0IeyQMH/TUf3tkgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWY4ODZkNGEtNzRlMC00Y2VlLTgzZWEtN2Y3NWE2Yzcx
YzUzMB4XDTI0MDMxNDA5NTYyOFoXDTI0MDYxMjA5NTYyOFowLzEtMCsGA1UEAxMk
MzQyNWIwNzYtN2IxNy00NTZlLThlMGMtNTY0YjYxY2ZlYTRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5L0muZbqTFxjDCugDGR4zjsdJJeKvkhIJKr6
pS/nVWhiWEhk8pVf1gkF6XR/AhuoyDp0dIep3VKNE7N0Vf+H7sh4LDkdVB2KjR4v
t64AaaDUMIb1vl1mZXql5/O4d2WqAzhnhbFVCSXNMNrxRFn/VozRT9vOppEjXlBQ
kmVVWnwYfIXntJ7oUqLbb0rtJ/6KSx7PI5yE5LT8bXsJ0oYCOldaXh9+jvS2samU
vdbUK19aLKoJjSmGCjOq4bSSrJCr43V2dBaCYtQMl89jYwEAeJBSzWLmh8GUx8Db
5fEoU41ct7IAj4eNC9lKjmVnrOIW+BBD1qPURKbjSWxKZcTb1wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFA5uTxgt4lMa263MzDYUtEHyOggtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81Zjg4
NmQ0YS03NGUwLTRjZWUtODNlYS03Zjc1YTZjNzFjNTMvNjM2YjIyMjQtZGI0Ny0z
Y2JhLTg5ZTktMTRiZGNkMjcyZDc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNWY4ODZkNGEtNzRlMC00Y2VlLTgz
ZWEtN2Y3NWE2YzcxYzUzLzVmODg2ZDRhLTc0ZTAtNGNlZS04M2VhLTdmNzVhNmM3
MWM1My5jcmwwHwYDVR0jBBgwFoAUaqXMs4C8jTnVyTD0bOh72yYcrkYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS81Zjg4NmQ0YS03NGUwLTRjZWUtODNlYS03Zjc1
YTZjNzFjNTMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgIC4AAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBALnzfoIokMKIPxjLHHtgty1yTqqDT1V7Uj26Jt+wII2rvrdgwKrr
ZiD6+g9Osf5Sq7naXiSZoVQh8gO6V6DOXSd1CfJSbit4gsswyvI5/jNcXEjfdsqP
yagCCWLfbKTT0+6zaHN+NeFRwcdZJMt6g4iFPmfnTHjqZgC5ip54CSvy9l0743HZ
FWFvNqyKQIVyVJcySmWiknccom1OTKXdIhhbIFWbNnWD47ZkqhHbCXVg4jWj3a4+
pic8RbrMMeNOxyczRyWfbIaqJepBBRsLOy3NnWwhRG5iTDhiXHJ7OdmOhzPIbbWG
3gg80eDV6dkhj07p67LYNO28AIiMaKvYBYw=
-----END CERTIFICATE-----
Generated at Fri Apr 12 09:55:48 2024 by rpki-client on console-fra.rpki-client.org