Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d6079eed-a495-405f-87a5-c0ee09e31c75/26e8b4d4-d7dc-3709-9f4e-98e9c0c856f0.roa
File:                     26e8b4d4-d7dc-3709-9f4e-98e9c0c856f0.roa (raw, json)
Hash identifier:          MRY6VCzmYuHimArUPEnxVP8HmtQzc2RQywuJIi1JC4Q=
Subject key identifier:   E9:6B:7B:25:05:E9:14:21:41:41:26:0B:9A:C3:81:6F:AB:04:A9:9A
Certificate issuer:       /CN=d6079eed-a495-405f-87a5-c0ee09e31c75
Certificate serial:       010D0C9F432858447C59D87EBCFB342316888760
Authority key identifier: DC:6E:92:F8:0A:29:39:C2:7E:9A:03:AB:B6:BD:31:BD:D3:CB:72:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d6079eed-a495-405f-87a5-c0ee09e31c75.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d6079eed-a495-405f-87a5-c0ee09e31c75/26e8b4d4-d7dc-3709-9f4e-98e9c0c856f0.roa
Signing time:             Mon 08 Jan 2024 14:00:20 +0000
ROA not before:           Mon 08 Jan 2024 14:00:20 +0000
ROA not after:            Sun 07 Apr 2024 13:00:20 +0000
asID:                     200952
IP address blocks:        2602:faa5:f00::/48 maxlen: 48

Validation:               Failed, certificate revoked on Wed 31 Jan 2024 02:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:7c:59:d8:7e:bc:fb:34:23:16:88:87:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6079eed-a495-405f-87a5-c0ee09e31c75
        Validity
            Not Before: Jan  8 14:00:20 2024 GMT
            Not After : Apr  7 13:00:20 2024 GMT
        Subject: CN=c7198705-7908-44cb-baf4-e0faece98f55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:ad:a0:3d:0c:e8:9e:57:be:c8:4b:84:67:01:
                    97:1e:df:e5:28:0d:f4:3f:e6:b8:71:83:6a:e1:a5:
                    3a:5c:8a:b1:4e:ef:4c:00:c3:2a:71:43:c1:34:13:
                    f4:e1:29:8e:b8:56:5b:0a:1b:20:a4:78:5c:e4:ee:
                    04:8b:37:35:1d:4e:c5:a9:59:52:61:1d:f1:08:1f:
                    26:7b:5b:8d:b3:07:ab:a9:c3:f0:83:e7:c1:8a:34:
                    ca:c9:a3:9c:db:ae:d8:f0:c8:4e:43:dd:63:19:9f:
                    f9:da:26:99:0a:f4:91:36:69:52:6c:a8:71:ff:ec:
                    20:c3:2e:b0:89:22:fa:25:f1:76:8e:05:db:71:03:
                    11:d7:da:6d:e7:cf:03:4b:23:07:3d:ab:55:dd:d3:
                    b4:4b:d1:32:33:8e:7a:a7:15:94:a2:e2:f5:83:44:
                    8b:60:89:78:0f:bb:db:a4:cb:f1:fd:ad:03:86:2d:
                    02:4b:ae:ae:ae:4a:fe:f6:a5:cb:8f:a0:9b:e5:9f:
                    e5:bd:4e:63:6e:97:0d:c9:4f:67:e4:23:c6:d8:56:
                    e7:4d:2a:31:06:af:a8:60:b4:15:5f:b6:af:cd:b9:
                    6d:95:e3:6a:3f:09:94:0b:25:e5:2f:6a:b5:fb:0f:
                    94:e0:70:2c:f0:a5:cc:35:00:49:6e:dc:86:5f:b7:
                    3a:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:6B:7B:25:05:E9:14:21:41:41:26:0B:9A:C3:81:6F:AB:04:A9:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d6079eed-a495-405f-87a5-c0ee09e31c75/26e8b4d4-d7dc-3709-9f4e-98e9c0c856f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d6079eed-a495-405f-87a5-c0ee09e31c75/d6079eed-a495-405f-87a5-c0ee09e31c75.crl

            X509v3 Authority Key Identifier:
                keyid:DC:6E:92:F8:0A:29:39:C2:7E:9A:03:AB:B6:BD:31:BD:D3:CB:72:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d6079eed-a495-405f-87a5-c0ee09e31c75.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:faa5:f00::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:8f:4c:53:93:64:b9:11:83:44:a6:d9:3c:4b:ac:ac:ab:a6:
         7e:94:e1:ec:70:b4:fe:76:21:e9:a9:0f:cc:c3:e1:5d:9e:5e:
         b2:79:a6:69:70:00:ac:a1:01:5c:fa:84:fc:eb:95:f1:e3:86:
         c8:ed:c2:d2:71:85:27:0d:7c:6f:00:d1:17:34:be:1e:ca:24:
         e4:83:d0:ed:6b:53:d2:23:19:18:3e:e3:35:d5:c8:eb:90:70:
         26:40:a5:e5:8c:8b:65:68:be:2b:bc:e7:f6:54:81:a9:b3:ae:
         d2:b1:f2:69:ad:b2:ff:eb:5d:e3:16:04:51:a9:01:55:60:9d:
         0c:d5:25:1c:71:d5:29:1f:58:eb:b0:3d:86:0a:30:f2:3f:a1:
         04:73:ea:e4:24:68:2b:02:44:c0:d3:1f:40:8a:34:78:c5:db:
         46:4f:e6:7d:e4:42:36:d3:17:d8:cb:f4:55:df:52:59:8d:b7:
         60:21:3d:71:4e:e5:60:c1:38:28:24:60:ae:02:8c:27:9b:c2:
         81:b0:6c:12:01:e4:a9:60:3d:d3:71:4b:20:63:49:2b:ac:63:
         87:22:01:b6:0a:ba:2e:f9:26:c6:b5:af:74:14:d7:b4:bd:07:
         63:bc:df:2c:83:62:74:2f:e9:e7:14:34:e7:c1:2e:3e:d9:ff:
         f4:f8:a3:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 31 04:14:19 2024 by rpki-client on console-fra.rpki-client.org