Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/61b3919f-4993-3d60-94e4-4fd0bc00e1e9.roa
File:                     61b3919f-4993-3d60-94e4-4fd0bc00e1e9.roa (raw, json)
Hash identifier:          0p+z8tBKOPc38dCVkSb9pkDdOpynWgPtmrEijywM0X4=
Subject key identifier:   F7:A3:8C:C3:03:B8:84:F2:4A:C6:D5:AB:32:60:B8:1B:79:27:2B:40
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285845025AC68E8090FF5229CE5300
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/61b3919f-4993-3d60-94e4-4fd0bc00e1e9.roa
Signing time:             Sun 25 Feb 2024 14:00:34 +0000
ROA not before:           Sun 25 Feb 2024 14:00:34 +0000
ROA not after:            Sat 25 May 2024 13:00:34 +0000
asID:                     28910
IP address blocks:        2001:470:23d::/48 maxlen: 48

Validation:               Failed, certificate revoked on Sun 31 Mar 2024 19:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:02:5a:c6:8e:80:90:ff:52:29:ce:53:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Feb 25 14:00:34 2024 GMT
            Not After : May 25 13:00:34 2024 GMT
        Subject: CN=feb11a4c-74c7-4be9-ae20-f2649384c825
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:62:51:02:e2:5e:99:ab:9a:d7:35:39:23:13:
                    97:76:dd:e3:1d:4c:88:8a:d6:8a:80:54:eb:73:c3:
                    92:e7:77:9d:a9:ab:82:75:83:4a:a1:62:58:44:6b:
                    74:a1:51:c1:27:c9:8b:76:30:1e:ab:89:74:32:10:
                    c0:a4:ea:63:42:19:bb:76:f9:ee:54:a8:d8:32:fe:
                    b0:c6:33:c6:86:51:d2:b6:73:98:61:47:d6:72:05:
                    cb:ab:48:df:44:40:db:de:ef:f8:b0:47:eb:26:c5:
                    85:fd:de:70:ab:98:24:da:35:9c:9c:82:24:4d:01:
                    f2:eb:81:cf:e7:f9:22:84:b2:98:bd:55:92:2a:bc:
                    c2:41:f2:7c:ff:8f:24:bc:d5:d7:0c:4f:42:af:4c:
                    07:cf:ab:9c:cf:0a:3f:38:71:b6:e9:01:1d:27:e3:
                    a5:a5:04:d8:cf:44:83:bd:34:a9:66:45:53:55:ea:
                    c4:97:cb:db:a7:14:c2:4d:7c:83:48:e4:a2:01:60:
                    49:05:55:6c:44:78:97:31:94:02:6b:29:47:04:6c:
                    41:04:8e:c4:19:02:53:d9:1f:50:c9:ff:37:24:c4:
                    2e:ac:13:52:cc:e1:bd:f5:eb:84:a5:f3:9e:33:28:
                    37:4f:17:d2:f3:0a:59:c0:98:6b:89:36:ea:5a:99:
                    af:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:A3:8C:C3:03:B8:84:F2:4A:C6:D5:AB:32:60:B8:1B:79:27:2B:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/61b3919f-4993-3d60-94e4-4fd0bc00e1e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:23d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:a7:db:b2:2e:23:3d:69:09:4c:c7:89:e9:e3:2b:d9:fe:b5:
         4d:c8:83:f6:37:fa:82:5d:fd:17:06:06:b3:48:58:30:d5:1e:
         06:32:41:66:17:99:63:0e:20:c9:dc:b9:c8:fa:8b:72:f9:4b:
         db:04:69:8b:19:10:c9:bc:39:af:74:6f:f0:25:d2:06:d1:06:
         4a:33:e9:9a:9a:6f:1b:bc:91:e7:14:b8:10:84:62:b6:38:bc:
         bf:e4:85:2d:92:5c:af:3b:c9:c2:67:05:21:4c:af:ea:70:03:
         be:ba:9e:a8:25:23:7b:36:22:d5:20:03:f4:2b:d0:be:09:5b:
         e2:8b:e6:0f:d7:54:6c:ae:5d:80:b2:fd:b5:d7:c4:1c:c5:aa:
         10:c5:76:f3:14:91:db:86:08:57:f7:0c:92:81:38:42:0f:9d:
         65:85:9d:a7:08:6b:2e:d6:7a:b1:27:8d:8a:9a:97:ac:b9:66:
         d2:7b:77:e1:7f:0a:ec:59:28:a9:90:be:37:ff:28:b3:94:b0:
         aa:82:30:cc:cb:cf:c4:5c:d6:6c:03:39:78:98:81:56:59:3f:
         0f:d4:32:29:8a:18:71:8f:9d:a4:49:d5:79:ee:02:27:ae:88:
         46:c7:c6:fc:76:65:6f:75:b8:22:29:0e:ed:4f:dc:7f:a8:d3:
         0f:ae:aa:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 31 22:39:44 2024 by rpki-client on console-fra.rpki-client.org