Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87/7df02710-7389-32ac-bf77-33cb273a0135.roa
File:                     7df02710-7389-32ac-bf77-33cb273a0135.roa (raw, json)
Hash identifier:          11Clcv5PlLzuIuAfW5Pe6PFvO41YsbqH5elchBzJCIs=
Subject key identifier:   11:08:52:09:04:55:89:C1:5D:D2:10:FC:9C:22:6A:32:A0:F8:A1:83
Certificate issuer:       /CN=813aad25-25fa-4b5c-bb84-15fabea23f87
Certificate serial:       010D0C9F432858447F249981E4FEBBEE56F21A00
Authority key identifier: 5E:97:21:19:44:A8:9C:ED:47:8B:39:3B:EB:C7:36:9C:33:01:CB:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87/7df02710-7389-32ac-bf77-33cb273a0135.roa
Signing time:             Tue 09 Jan 2024 14:00:29 +0000
ROA not before:           Tue 09 Jan 2024 14:00:29 +0000
ROA not after:            Mon 08 Apr 2024 13:00:29 +0000
asID:                     17024
IP address blocks:        2602:2d1::/36 maxlen: 128

Validation:               Failed, certificate revoked on Fri 23 Feb 2024 07:14:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:7f:24:99:81:e4:fe:bb:ee:56:f2:1a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=813aad25-25fa-4b5c-bb84-15fabea23f87
        Validity
            Not Before: Jan  9 14:00:29 2024 GMT
            Not After : Apr  8 13:00:29 2024 GMT
        Subject: CN=82c29ee8-8532-4ead-b22b-f75867bd6c62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:6a:c8:dc:9c:3a:dc:c5:95:4b:ee:c8:05:1f:
                    c0:57:15:9d:67:62:a8:fe:d0:3e:17:b5:75:53:05:
                    5c:1d:30:c8:b3:14:e1:47:5e:96:eb:ba:61:32:b0:
                    e3:e2:8e:a0:83:60:54:9f:54:c1:8b:0b:a1:13:a8:
                    81:b8:ba:a5:f7:da:23:d7:39:7f:46:52:bc:8b:44:
                    fe:ff:16:21:71:bc:07:d9:8f:41:fc:d7:fa:4e:f6:
                    1d:57:00:74:8f:bd:69:30:17:c1:c4:56:d3:b7:03:
                    e3:d0:f5:8f:df:a9:70:e0:db:62:8e:37:09:56:f4:
                    74:3d:08:f2:23:27:81:b8:1d:c3:83:70:88:b8:01:
                    55:d5:58:3d:50:f1:69:c5:a3:61:02:11:4f:f9:27:
                    9f:2e:cd:9a:e6:dd:8f:01:4a:12:57:51:ab:0a:02:
                    3f:29:ac:65:93:97:02:7c:db:b0:17:eb:f4:e1:d3:
                    31:ec:f2:35:7c:3c:72:b1:e9:a6:63:49:05:83:30:
                    0b:29:58:a1:1d:6a:98:e4:a0:50:25:16:07:3a:24:
                    f7:bd:9c:08:52:8c:e5:e8:d8:9e:f3:34:9a:8f:b9:
                    a7:71:fc:bb:a6:eb:e2:71:7b:47:d4:88:0f:43:fb:
                    a2:da:d4:9c:6f:c4:6e:8b:da:65:c4:7e:30:c6:8f:
                    b1:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:08:52:09:04:55:89:C1:5D:D2:10:FC:9C:22:6A:32:A0:F8:A1:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87/7df02710-7389-32ac-bf77-33cb273a0135.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87/813aad25-25fa-4b5c-bb84-15fabea23f87.crl

            X509v3 Authority Key Identifier:
                keyid:5E:97:21:19:44:A8:9C:ED:47:8B:39:3B:EB:C7:36:9C:33:01:CB:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2d1::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:5d:04:f2:3f:ee:1f:01:62:37:b2:0c:6a:7b:b4:79:a3:a1:
         61:8a:eb:0b:c2:bf:0d:ae:b9:2f:f3:71:86:20:01:5d:e6:6e:
         75:bc:1a:21:0b:dc:05:35:c2:be:61:51:03:09:ef:80:37:e8:
         f9:85:a1:f0:b0:db:46:e3:f5:aa:4b:34:99:9f:d2:1a:c2:59:
         aa:38:42:a5:d5:31:6e:15:dd:ed:35:a8:e1:dd:e1:a8:c3:0b:
         1f:5c:3b:b6:a6:34:d0:c2:98:76:86:8c:3a:7d:f0:6f:7d:6a:
         33:a6:29:01:f2:69:b7:84:a0:c2:8b:36:c0:57:34:9a:2b:9c:
         24:81:12:47:44:8b:a8:b6:39:de:4f:5e:90:37:56:f5:16:9c:
         c6:d8:65:0e:d7:ce:60:cf:14:c6:ed:23:de:55:5c:1e:52:92:
         99:ea:bb:8b:4c:41:2c:a5:4c:f6:97:14:db:a1:b0:6a:81:91:
         16:60:61:8c:23:3e:b9:f9:47:35:f3:2a:a7:4c:49:a0:a7:7e:
         92:88:70:b8:98:0c:d4:bc:c0:de:dc:fb:be:a3:be:23:19:61:
         de:9f:23:ae:c2:72:ef:98:de:57:e1:fb:24:a7:74:97:7a:42:
         09:1b:0e:19:a9:79:0a:1b:ef:e8:b2:43:e7:8f:60:d6:7b:2e:
         44:b7:e7:ec
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWER/JJmB5P677lbyGgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODEzYWFkMjUtMjVmYS00YjVjLWJiODQtMTVmYWJlYTIz
Zjg3MB4XDTI0MDEwOTE0MDAyOVoXDTI0MDQwODEzMDAyOVowLzEtMCsGA1UEAxMk
ODJjMjllZTgtODUzMi00ZWFkLWIyMmItZjc1ODY3YmQ2YzYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGrI3Jw63MWVS+7IBR/AVxWdZ2Ko/tA+F7V1
UwVcHTDIsxThR16W67phMrDj4o6gg2BUn1TBiwuhE6iBuLql99oj1zl/RlK8i0T+
/xYhcbwH2Y9B/Nf6TvYdVwB0j71pMBfBxFbTtwPj0PWP36lw4NtijjcJVvR0PQjy
IyeBuB3Dg3CIuAFV1Vg9UPFpxaNhAhFP+SefLs2a5t2PAUoSV1GrCgI/Kaxlk5cC
fNuwF+v04dMx7PI1fDxysemmY0kFgzALKVihHWqY5KBQJRYHOiT3vZwIUozl6Nie
8zSaj7mncfy7puvicXtH1IgPQ/ui2tScb8Rui9plxH4wxo+xUwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFBEIUgkEVYnBXdIQ/JwiajKg+KGDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84MTNh
YWQyNS0yNWZhLTRiNWMtYmI4NC0xNWZhYmVhMjNmODcvN2RmMDI3MTAtNzM4OS0z
MmFjLWJmNzctMzNjYjI3M2EwMTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODEzYWFkMjUtMjVmYS00YjVjLWJi
ODQtMTVmYWJlYTIzZjg3LzgxM2FhZDI1LTI1ZmEtNGI1Yy1iYjg0LTE1ZmFiZWEy
M2Y4Ny5jcmwwHwYDVR0jBBgwFoAUXpchGUSonO1Hizk768c2nDMBy4owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS84MTNhYWQyNS0yNWZhLTRiNWMtYmI4NC0xNWZh
YmVhMjNmODcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgIC0QAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAPV0E8j/uHwFiN7IManu0eaOhYYrrC8K/Da65L/NxhiABXeZudbwa
IQvcBTXCvmFRAwnvgDfo+YWh8LDbRuP1qks0mZ/SGsJZqjhCpdUxbhXd7TWo4d3h
qMMLH1w7tqY00MKYdoaMOn3wb31qM6YpAfJpt4Sgwos2wFc0miucJIESR0SLqLY5
3k9ekDdW9RacxthlDtfOYM8Uxu0j3lVcHlKSmeq7i0xBLKVM9pcU26GwaoGRFmBh
jCM+uflHNfMqp0xJoKd+kohwuJgM1LzA3tz7vqO+Ixlh3p8jrsJy75jeV+H7JKd0
l3pCCRsOGal5Chvv6LJD549g1nsuRLfn7A==
-----END CERTIFICATE-----
Generated at Fri Feb 23 10:44:38 2024 by rpki-client on console-ams.rpki-client.org