Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4b306c94-fbdb-3b40-9baf-3f25ec76ee78.roa
File:                     4b306c94-fbdb-3b40-9baf-3f25ec76ee78.roa (raw, json)
Hash identifier:          Eu2pUnHG+GZ3B2O2nPUFofj0bIujNDLbsXHSVP0qcvk=
Subject key identifier:   BE:F9:C4:E8:D9:F3:67:34:13:44:C7:0B:8F:A9:99:F0:82:36:DC:D4
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285844D459702B5C85228BA079CBC0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4b306c94-fbdb-3b40-9baf-3f25ec76ee78.roa
Signing time:             Fri 09 Feb 2024 02:30:43 +0000
ROA not before:           Fri 09 Feb 2024 02:30:43 +0000
ROA not after:            Thu 09 May 2024 01:30:43 +0000
asID:                     11990
IP address blocks:        2001:470:1eb::/48 maxlen: 48

Validation:               Failed, certificate revoked on Sun 25 Feb 2024 20:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:d4:59:70:2b:5c:85:22:8b:a0:79:cb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb  9 02:30:43 2024 GMT
            Not After : May  9 01:30:43 2024 GMT
        Subject: CN=d65ca3e5-a233-4e62-be93-c09ea3ab6607
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ea:7e:14:f0:3a:a1:cc:41:59:8a:3c:71:74:
                    6b:7a:30:43:e5:4a:ce:98:c9:be:9a:e9:6f:46:f2:
                    30:c2:2f:ae:ac:a1:ac:29:37:76:79:b4:f7:4e:96:
                    eb:b0:e3:3c:54:fd:4c:e6:19:53:81:32:0f:aa:95:
                    49:b9:7f:ef:23:b3:bf:e9:14:96:97:d7:d6:ba:05:
                    ff:73:a9:f3:d4:2a:46:b8:81:82:ac:3d:da:78:55:
                    f8:ca:94:9d:91:60:39:41:14:41:b5:63:94:6f:ef:
                    6f:00:7f:fe:06:c7:b3:37:90:82:b9:44:1b:f4:d2:
                    88:5b:63:fc:bf:6b:4a:f7:83:18:0c:3f:77:30:13:
                    c0:36:d8:2d:6b:c5:06:9a:b2:94:9c:7d:30:7c:5a:
                    9a:95:32:9d:e7:4a:f6:4f:55:64:66:e0:3a:e4:de:
                    c3:19:4b:48:c5:d2:c3:9b:53:ce:d9:96:90:f2:88:
                    42:d9:40:c0:e9:e8:48:91:7f:92:08:b6:0f:d6:29:
                    3a:b0:24:95:27:f1:e5:50:f4:f5:ee:9e:55:cb:7e:
                    c7:c9:8e:63:f3:7c:63:0b:9a:02:8a:bc:ab:5d:fa:
                    d1:40:b8:38:a0:3d:c6:64:87:96:d9:25:15:08:13:
                    9a:ef:d4:e4:83:16:7d:61:09:1e:4f:5f:2e:3e:c9:
                    62:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:F9:C4:E8:D9:F3:67:34:13:44:C7:0B:8F:A9:99:F0:82:36:DC:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4b306c94-fbdb-3b40-9baf-3f25ec76ee78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:1eb::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:81:4e:e5:0a:07:8a:ca:25:35:67:2b:e2:90:02:03:9e:ac:
         b5:af:ce:b4:29:b4:92:e1:54:6c:7a:ef:34:2a:e6:0a:e9:a1:
         04:0e:a2:c0:74:71:6b:ac:2b:50:f1:e6:55:92:52:82:ff:bc:
         b4:44:03:46:3a:34:04:55:28:8b:fa:b4:c8:21:05:ce:33:3c:
         e5:13:9d:43:90:6f:ec:95:54:6f:59:2b:90:dc:65:b2:f7:ed:
         41:8b:7a:32:73:e4:89:4a:e5:05:c1:d9:79:83:80:19:7b:9f:
         19:58:62:fa:bc:1b:78:fa:e5:36:47:b1:44:c4:bc:c7:17:ea:
         dd:c9:a1:eb:cd:4e:47:29:7e:78:a0:50:0f:18:d7:ec:ab:ef:
         58:51:33:77:82:9f:6b:00:a5:a7:4c:8d:11:09:52:e9:98:9a:
         88:8b:b1:b9:7c:aa:3a:25:af:33:7a:b1:2d:4f:94:01:42:c9:
         20:6c:a0:00:d9:06:83:84:4b:61:f9:18:07:38:53:8f:f4:b3:
         ab:1e:60:ca:9a:21:7b:3d:4b:ad:08:d0:75:c3:87:09:72:ed:
         14:60:e5:7c:87:aa:ff:2f:eb:9d:74:9d:13:94:93:8a:e5:6b:
         d2:8f:d8:79:fa:4d:3e:60:da:36:3a:57:c5:bc:47:4a:b0:9e:
         32:b3:96:14
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWETUWXArXIUii6B5y8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI0MDIwOTAyMzA0M1oXDTI0MDUwOTAxMzA0M1owLzEtMCsGA1UEAxMk
ZDY1Y2EzZTUtYTIzMy00ZTYyLWJlOTMtYzA5ZWEzYWI2NjA3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwep+FPA6ocxBWYo8cXRrejBD5UrOmMm+mulv
RvIwwi+urKGsKTd2ebT3TpbrsOM8VP1M5hlTgTIPqpVJuX/vI7O/6RSWl9fWugX/
c6nz1CpGuIGCrD3aeFX4ypSdkWA5QRRBtWOUb+9vAH/+BsezN5CCuUQb9NKIW2P8
v2tK94MYDD93MBPANtgta8UGmrKUnH0wfFqalTKd50r2T1VkZuA65N7DGUtIxdLD
m1PO2ZaQ8ohC2UDA6ehIkX+SCLYP1ik6sCSVJ/HlUPT17p5Vy37HyY5j83xjC5oC
iryrXfrRQLg4oD3GZIeW2SUVCBOa79TkgxZ9YQkeT18uPsliTQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFL75xOjZ82c0E0THC4+pmfCCNtzUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNGIzMDZjOTQtZmJkYi0z
YjQwLTliYWYtM2YyNWVjNzZlZTc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAHr
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAImBTuUKB4rKJTVnK+KQAgOerLWvzrQptJLhVGx67zQq5grpoQQO
osB0cWusK1Dx5lWSUoL/vLREA0Y6NARVKIv6tMghBc4zPOUTnUOQb+yVVG9ZK5Dc
ZbL37UGLejJz5IlK5QXB2XmDgBl7nxlYYvq8G3j65TZHsUTEvMcX6t3JoevNTkcp
fnigUA8Y1+yr71hRM3eCn2sApadMjREJUumYmoiLsbl8qjolrzN6sS1PlAFCySBs
oADZBoOES2H5GAc4U4/0s6seYMqaIXs9S60I0HXDhwly7RRg5XyHqv8v6510nROU
k4rla9KP2Hn6TT5g2jY6V8W8R0qwnjKzlhQ=
-----END CERTIFICATE-----
Generated at Sun Feb 25 23:46:08 2024 by rpki-client on console-ams.rpki-client.org