Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5a263ed0-45f0-3e65-a291-cc8a0635da4e.roa
File:                     5a263ed0-45f0-3e65-a291-cc8a0635da4e.roa (raw, json)
Hash identifier:          zzv5UfjupWQ9XAhLWrows0fvL5ikyhQQwhPgEiIqsec=
Subject key identifier:   8D:7A:D5:F9:67:A3:9B:A0:21:D0:98:4C:68:B9:66:A0:F9:FE:11:FC
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328576D51CC73C042CFC171E178DCC2
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5a263ed0-45f0-3e65-a291-cc8a0635da4e.roa
Signing time:             Mon 04 May 2020 20:55:26 +0000
ROA not before:           Mon 04 May 2020 04:00:00 +0000
ROA not after:            Sun 04 May 2025 04:00:00 +0000
asID:                     6939
IP address blocks:        2001:470::/32 maxlen: 48

Validation:               Failed, certificate revoked on Sun 11 Feb 2024 17:19:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:71:e1:78:dc:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May  4 04:00:00 2020 GMT
            Not After : May  4 04:00:00 2025 GMT
        Subject: CN=860b1f79-bd9c-47f8-b341-b242c1a40356
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:be:ce:f6:f6:81:55:63:0d:93:8f:fc:77:93:
                    7f:26:a4:07:f4:ca:33:34:c2:b3:e0:2a:cc:c0:7c:
                    da:cf:68:a9:3c:09:df:9f:b9:f6:77:42:85:ca:9b:
                    9f:e9:4a:b1:9a:c2:9e:f2:98:97:d4:32:62:21:e1:
                    a8:a0:8f:dd:84:bf:c8:61:9f:fa:65:ac:64:bf:a1:
                    77:48:77:17:99:02:56:f5:4e:5d:88:66:8c:f1:27:
                    4d:1d:28:32:e0:19:90:c2:79:15:66:e2:b7:f5:77:
                    46:b1:26:01:5e:20:64:b8:0e:c3:6a:8e:1e:63:bb:
                    42:9a:a3:6a:0d:2b:7f:43:68:2a:4d:c7:4a:90:4f:
                    9c:22:9f:ea:76:3d:05:a8:e1:a0:86:52:72:e3:7c:
                    56:ed:a8:5e:4d:3a:ba:99:65:30:5f:b7:f4:44:40:
                    95:95:db:82:c1:7c:b1:1c:01:77:dc:f3:70:e7:e2:
                    37:21:f8:b5:73:fc:e6:25:c8:c8:b5:5e:fe:07:0d:
                    b1:46:a9:f4:13:7e:02:79:f2:a2:61:7a:8c:6e:11:
                    50:2a:3f:7d:92:e7:3c:52:93:97:a7:01:13:0e:1d:
                    da:d3:d6:7e:e6:20:a0:b1:82:73:1d:83:8a:cc:91:
                    6d:99:f2:d8:dd:3b:3e:aa:46:74:66:75:6d:16:e3:
                    03:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:7A:D5:F9:67:A3:9B:A0:21:D0:98:4C:68:B9:66:A0:F9:FE:11:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/5a263ed0-45f0-3e65-a291-cc8a0635da4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:e3:dc:66:de:65:d2:74:26:2f:c3:84:d5:17:3c:d7:b8:78:
         59:ed:72:f5:e8:fb:9c:21:14:f6:65:e7:9f:75:c3:e7:b1:bc:
         c2:0e:16:9a:3a:e3:26:aa:70:03:93:2f:bd:05:74:0f:dc:48:
         9a:5a:db:d4:ba:bc:91:f3:71:db:0a:3c:c9:06:29:65:0b:cc:
         6e:41:cd:75:a2:14:f1:68:94:47:48:ab:3d:fa:f4:84:8b:98:
         9c:c6:da:c4:08:4b:69:7e:63:c1:60:8e:3d:33:31:77:6d:62:
         92:b8:d3:91:4b:c8:27:8f:af:23:c1:ee:fe:c2:fa:24:2d:4c:
         a6:db:6c:09:d6:b8:22:73:cc:6e:d6:7e:a4:9e:f8:c1:33:8b:
         63:bc:45:88:60:2a:c5:14:ba:3a:bd:48:63:72:1b:f3:a6:ff:
         3d:c3:e2:9a:70:23:53:75:d0:bd:ab:05:1d:a6:c2:2e:58:06:
         4c:31:85:c5:e3:43:3c:51:73:89:28:04:9e:87:81:6b:7b:47:
         1e:02:28:58:08:ec:1d:64:9e:bf:87:a2:0b:22:ca:b8:8a:02:
         7b:a6:d3:91:7f:f1:b6:b7:be:3d:8e:0c:5d:d6:99:42:86:5a:
         23:80:e7:f7:42:6e:c8:87:9c:4f:40:68:2d:37:13:d9:27:0f:
         03:28:02:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 11 18:16:40 2024 by rpki-client on console-fra.rpki-client.org