Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d778ad8e-2d4e-3bf1-8220-65d364e7a6eb.roa
File:                     d778ad8e-2d4e-3bf1-8220-65d364e7a6eb.roa (raw, json)
Hash identifier:          pgf7zb9m/CpGOQgQyAFwpz11aqxhcdj224kv7ZDwLHY=
Subject key identifier:   C1:74:7E:B3:E4:86:76:16:1B:3C:29:04:FB:5F:77:D5:DD:06:D1:84
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584173CB5B6F38FE0CFED1FBE380
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d778ad8e-2d4e-3bf1-8220-65d364e7a6eb.roa
Signing time:             Tue 04 Apr 2023 12:00:00 +0000
ROA not before:           Tue 04 Apr 2023 12:00:00 +0000
ROA not after:            Sat 05 Apr 2025 04:00:00 +0000
asID:                     21342
IP address blocks:        2600:1480:c800::/48 maxlen: 48

Validation:               Failed, certificate revoked on Wed 26 Apr 2023 15:48:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:73:cb:5b:6f:38:fe:0c:fe:d1:fb:e3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr  4 12:00:00 2023 GMT
            Not After : Apr  5 04:00:00 2025 GMT
        Subject: CN=f23a4cdb-c7de-4344-9e1b-7125b8d1eb30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:db:d2:56:66:c9:a6:54:31:ce:c7:a7:95:b7:
                    bb:a9:f6:1f:c8:0b:0b:31:7e:7f:ab:94:85:cb:4b:
                    cb:4a:72:00:a6:5e:16:a7:d2:57:c9:cf:83:bf:80:
                    87:0e:ba:e7:81:75:40:db:21:0d:bf:eb:3b:66:0b:
                    b1:dd:36:20:e7:30:04:1c:c0:7a:53:0c:7b:5b:94:
                    68:dd:40:86:9c:37:8f:c7:58:08:f1:9d:38:58:f1:
                    b1:aa:d0:35:e4:14:37:9d:25:46:9b:0a:8a:ca:f2:
                    cb:4e:6b:e2:6e:92:6c:95:f2:f6:68:9f:8d:d2:d0:
                    df:86:3b:98:76:30:d4:48:3d:ae:e1:50:95:11:39:
                    e2:bf:80:2f:dc:4c:0d:98:f4:d9:7a:94:84:67:ae:
                    91:37:50:39:32:cb:a0:87:da:e6:0b:2b:d2:7a:ae:
                    a0:90:b1:31:dd:5f:04:9b:7c:ea:30:9a:d6:32:c0:
                    37:e5:b0:a3:5d:e4:25:d9:af:01:c9:55:16:b3:51:
                    c7:01:50:11:41:f0:f5:a7:28:e8:88:9e:dd:2d:5b:
                    1c:4c:c2:11:8f:e2:9d:cf:31:1a:39:d2:1c:c4:05:
                    64:e7:1c:a0:c3:3d:90:1a:c7:e3:2c:3b:2e:fe:7a:
                    2d:f5:57:c7:dd:fa:5c:90:1e:2c:d5:c4:d1:ca:df:
                    32:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:74:7E:B3:E4:86:76:16:1B:3C:29:04:FB:5F:77:D5:DD:06:D1:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d778ad8e-2d4e-3bf1-8220-65d364e7a6eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1480:c800::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:8b:3a:38:1e:af:82:1a:3a:d0:ef:93:94:1b:ac:6e:6e:13:
         90:86:b3:7c:31:ad:70:e0:b7:62:54:df:99:50:ab:7b:a5:2d:
         af:f0:83:97:d7:44:ad:b4:2c:94:ed:ca:a0:11:bc:6d:e8:63:
         36:2d:a0:4d:74:34:a2:37:a5:4a:02:74:1e:3c:b7:1a:1e:02:
         80:0e:1f:9a:e6:65:0f:8b:ad:24:0b:64:b1:a3:b4:47:6a:b2:
         04:71:97:a3:79:0b:08:94:83:aa:dd:08:95:54:85:92:47:07:
         0d:a9:f7:c9:cd:b3:51:6b:77:2f:8e:29:9d:25:02:73:7d:7f:
         7b:40:db:eb:f6:2d:cd:94:ea:4f:05:1e:8b:f8:d4:4d:72:19:
         07:9f:9e:6c:7e:a0:32:56:82:72:5d:c3:90:01:38:a8:03:31:
         5e:59:8c:d0:0b:b8:8e:63:52:49:27:8a:77:79:78:f1:92:15:
         31:cc:b5:45:be:c4:8e:74:af:50:49:a1:48:a3:00:0d:39:89:
         bc:bb:33:4c:9b:97:a3:d0:2f:3d:97:e2:ae:13:fd:2b:77:50:
         2a:15:46:53:5c:81:55:b4:20:8b:9b:1f:f7:2f:71:94:33:ff:
         8d:31:2b:d7:a3:47:7b:0c:3f:cc:32:d0:98:00:bc:00:ff:17:
         4b:0c:09:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:27 2024 by rpki-client on console-fra.rpki-client.org