Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/387c4fe7-8789-3679-b8a4-d3578b008689.roa
File:                     387c4fe7-8789-3679-b8a4-d3578b008689.roa (raw, json)
Hash identifier:          QWmofSPcn+v/aOnaasBd3u/QND1a6GbIwmn1iRZnioo=
Subject key identifier:   33:7A:D9:15:76:AC:FC:83:8B:0B:67:70:71:B1:78:93:1A:CE:F0:48
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285844193E8BB1D13C9436928E3C80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/387c4fe7-8789-3679-b8a4-d3578b008689.roa
Signing time:             Mon 04 Dec 2023 02:00:15 +0000
ROA not before:           Mon 04 Dec 2023 02:00:15 +0000
ROA not after:            Sun 03 Mar 2024 02:00:15 +0000
asID:                     12287
IP address blocks:        2001:470:13b::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:19:3e:8b:b1:d1:3c:94:36:92:8e:3c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Dec  4 02:00:15 2023 GMT
            Not After : Mar  3 02:00:15 2024 GMT
        Subject: CN=13cecf44-7860-4eb9-9c40-e8b23039900c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:68:d8:aa:e6:de:7d:e1:a7:ef:41:34:69:bc:
                    19:0b:4e:eb:1f:44:d6:53:eb:53:4e:99:07:30:58:
                    15:2e:5b:e3:8f:38:27:8e:72:da:a8:dd:3c:92:27:
                    2e:ed:51:fe:ee:3c:ed:fd:7f:a1:39:29:b9:a9:7b:
                    3d:2b:bb:3e:45:68:18:2e:69:f4:b5:ad:97:e4:b7:
                    7e:73:47:87:8b:37:1b:de:e4:c6:a8:2b:89:1b:93:
                    7e:92:dd:9d:c7:c9:02:92:8b:bb:06:a9:ad:d6:00:
                    76:f2:dd:6b:cc:89:02:3b:b6:07:89:a1:ad:27:d8:
                    5e:10:9b:84:45:1b:0b:56:dd:1f:02:15:80:ef:19:
                    b3:f9:fa:e5:e2:c4:3a:14:31:8c:d9:c6:30:88:3d:
                    85:3f:6f:be:ff:13:d5:be:33:5a:e8:e7:36:c1:ba:
                    3e:e8:46:04:3a:68:1e:19:40:94:40:3c:66:40:ed:
                    f1:62:77:99:5d:fc:5d:5b:b6:ef:dc:f6:2d:db:ec:
                    3b:85:14:5a:13:35:dd:b5:47:03:cf:1c:b7:2e:5b:
                    6c:11:cc:99:b7:8d:79:7c:aa:0c:f5:b8:f9:ff:8e:
                    de:b8:20:37:75:1b:85:a7:6e:c6:d1:de:4c:37:56:
                    9a:96:ae:93:1a:d1:57:91:3b:3a:ac:7e:7f:6b:92:
                    fa:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:7A:D9:15:76:AC:FC:83:8B:0B:67:70:71:B1:78:93:1A:CE:F0:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/387c4fe7-8789-3679-b8a4-d3578b008689.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:13b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:d7:91:b1:c0:f4:30:cc:0f:77:37:dd:a3:a6:c1:07:9a:9f:
         7c:88:a4:84:d6:b7:88:7f:2e:da:cd:c8:a6:be:fa:6f:73:03:
         a6:43:98:6e:c9:da:dc:88:09:fb:ed:b4:a0:bd:9b:6c:e9:aa:
         e5:46:d2:b1:7b:9e:25:ce:de:ae:8b:5e:fd:5c:9b:af:8f:db:
         a6:fe:04:3c:73:09:31:e2:ca:66:73:5c:38:c1:0a:d5:e2:3d:
         92:d3:db:87:93:bd:a1:8f:db:6a:38:6f:4f:42:db:63:bc:25:
         65:5d:67:f9:e8:ee:b9:2a:d6:91:4f:de:26:94:4f:89:1c:a6:
         2e:f2:89:b2:1e:2e:09:f2:c1:6c:4e:e9:12:83:fc:1e:86:df:
         ff:89:ef:21:ab:08:99:ed:7d:22:c2:e1:15:3b:e3:cc:cb:b4:
         60:91:9e:2d:8b:1d:27:7d:54:33:f7:88:c1:58:de:31:7d:43:
         8b:56:86:f9:60:47:a8:a6:d8:b5:c1:3a:52:0c:f7:3c:cc:ff:
         d2:d1:e2:ac:ca:f3:3d:5c:2b:2b:5c:52:ff:fe:05:a7:a1:2e:
         09:4f:30:29:df:0d:00:08:4b:96:8f:4b:81:c9:9c:8e:22:49:
         57:ed:f8:5f:8c:8f:c1:f9:3a:3b:14:95:7d:07:ef:ef:71:87:
         67:57:99:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 31 21:09:36 2023 by rpki-client on console-fra.rpki-client.org