Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cd7304e1-3bc1-43c1-b035-93ee027063db/b4424ea1-635e-3bc0-97bc-22fa665c1412.roa
File:                     b4424ea1-635e-3bc0-97bc-22fa665c1412.roa (raw, json)
Hash identifier:          mtO5DJ1k5JNfpJ8tJJIzdWOjgQDuYt+8JtzaJ7Ij8bo=
Subject key identifier:   5C:37:1B:7F:E4:94:B3:B9:09:E1:65:4E:8E:4C:98:F9:15:68:05:42
Certificate issuer:       /CN=cd7304e1-3bc1-43c1-b035-93ee027063db
Certificate serial:       010D0C9F432858445F09A394C120A532DB61B880
Authority key identifier: EE:B9:9D:64:D5:ED:F5:00:51:8C:63:71:C7:9D:1F:7C:AA:C5:1D:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cd7304e1-3bc1-43c1-b035-93ee027063db.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cd7304e1-3bc1-43c1-b035-93ee027063db/b4424ea1-635e-3bc0-97bc-22fa665c1412.roa
Signing time:             Fri 29 Dec 2023 02:00:15 +0000
ROA not before:           Fri 29 Dec 2023 02:00:15 +0000
ROA not after:            Thu 28 Mar 2024 01:00:15 +0000
asID:                     48231
IP address blocks:        2602:fa93::/40 maxlen: 48

Validation:               Failed, certificate revoked on Sat 03 Feb 2024 01:53:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:5f:09:a3:94:c1:20:a5:32:db:61:b8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd7304e1-3bc1-43c1-b035-93ee027063db
        Validity
            Not Before: Dec 29 02:00:15 2023 GMT
            Not After : Mar 28 01:00:15 2024 GMT
        Subject: CN=0fef3df1-c18e-482a-a565-723296115779
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:4d:97:63:53:24:c5:af:6f:69:ca:0e:7d:25:
                    90:e1:e3:fe:b1:63:87:18:e6:0f:cf:83:0e:d1:f7:
                    2d:89:35:41:68:37:ae:1b:9b:51:b9:3e:a8:ea:dc:
                    38:d9:ac:b8:c4:60:5a:c9:a4:b1:58:f0:11:02:d2:
                    0e:ff:cd:b8:c2:b2:d4:a3:01:56:e5:fe:c8:2b:e6:
                    3a:ef:25:06:fe:f7:1a:3a:be:3f:18:43:04:c9:b0:
                    f4:0a:9d:e1:d4:b9:cb:19:f8:86:8e:e2:0d:97:e5:
                    6c:02:a7:74:3c:ae:62:a2:79:d3:0b:7e:ab:c1:81:
                    f3:7b:1e:89:08:dd:4c:2e:ef:4f:b2:18:87:d4:89:
                    bb:5e:2b:c0:2c:e7:b6:b2:35:74:a8:9f:72:40:ca:
                    c8:e2:7c:68:9a:4c:e9:a1:fd:10:60:94:65:76:18:
                    11:b2:fc:a6:5c:e7:9a:0d:af:9d:53:53:78:52:f4:
                    8a:8b:80:87:63:c9:b1:89:6f:a4:24:21:d5:35:62:
                    ae:90:79:8b:64:9c:d5:34:0e:86:91:61:f8:58:e7:
                    98:ba:ef:ab:97:62:30:8a:7d:73:bb:e0:2a:0b:f3:
                    b4:1e:4a:16:10:95:36:e3:19:1c:08:c4:eb:3a:bd:
                    b8:bd:57:88:1f:b2:9c:33:b6:a1:28:46:06:a5:62:
                    45:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:37:1B:7F:E4:94:B3:B9:09:E1:65:4E:8E:4C:98:F9:15:68:05:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cd7304e1-3bc1-43c1-b035-93ee027063db/b4424ea1-635e-3bc0-97bc-22fa665c1412.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cd7304e1-3bc1-43c1-b035-93ee027063db/cd7304e1-3bc1-43c1-b035-93ee027063db.crl

            X509v3 Authority Key Identifier:
                keyid:EE:B9:9D:64:D5:ED:F5:00:51:8C:63:71:C7:9D:1F:7C:AA:C5:1D:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cd7304e1-3bc1-43c1-b035-93ee027063db.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa93::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:aa:28:35:0c:dc:39:1c:21:78:22:ec:17:de:e6:fe:00:31:
         a0:32:4a:98:53:48:94:00:3b:5e:2f:43:26:6f:4a:e7:80:ad:
         7d:5b:07:71:e2:33:29:48:63:b0:00:9c:ca:b0:f1:e3:a4:2f:
         e5:08:8f:13:b7:6a:d4:a1:ab:7e:7b:a6:ed:12:4b:f6:7f:1a:
         a7:9d:47:77:b2:7b:55:4b:c9:f1:8b:25:fa:dd:40:70:6b:8a:
         4f:97:f4:a9:65:9d:44:ec:fb:56:a3:03:c5:e5:e3:e2:56:ef:
         8e:8a:ba:8a:48:53:f2:68:70:e5:4f:cb:69:5a:a5:22:f0:45:
         f6:8a:61:33:19:91:43:3d:a9:18:c0:a1:f4:20:7d:bf:6a:05:
         fc:8c:0e:6c:08:a8:66:a4:78:0e:77:b7:af:a7:e5:4a:89:f7:
         4c:23:df:e8:26:82:ee:28:61:8f:ef:23:74:ed:28:fa:71:8b:
         c1:79:17:21:cc:a3:be:97:ed:db:4b:04:38:14:97:e1:a6:27:
         a3:15:1e:b3:83:5e:d3:72:db:f5:4e:14:d3:6f:8b:1f:6e:f7:
         65:24:f1:64:b4:6e:4c:d1:74:71:c8:68:bf:11:8c:f7:b8:4e:
         3c:a7:68:10:31:26:c8:24:bf:ab:b7:c7:69:89:fe:cb:6b:3e:
         f9:3c:b7:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----