Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/9077a96b-4983-315b-a24a-9e951e9c856f.roa
File:                     9077a96b-4983-315b-a24a-9e951e9c856f.roa (raw, json)
Hash identifier:          9B1jsMX02zI1+80jbmFUJAbcc50ddtyy0ZMLNVyoDME=
Subject key identifier:   26:F1:90:47:7E:B0:05:FA:70:67:19:DC:2E:F7:57:A3:26:1A:33:39
Certificate issuer:       /CN=1ae9796a-5f3d-4f47-b117-42360a213e37
Certificate serial:       010D0C9F43285846AA951814C6AAB72B47BFD900
Authority key identifier: 4E:CB:3A:FE:5F:05:1E:AC:06:DD:59:CE:47:A6:DE:B3:29:7F:41:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/9077a96b-4983-315b-a24a-9e951e9c856f.roa
Signing time:             Fri 26 Jul 2024 13:00:41 +0000
ROA not before:           Fri 26 Jul 2024 13:00:41 +0000
ROA not after:            Thu 24 Oct 2024 13:00:41 +0000
asID:                     1004
IP address blocks:        2602:fba3:400::/40 maxlen: 40

Validation:               Failed, certificate revoked on Sun 11 Aug 2024 15:32:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:aa:95:18:14:c6:aa:b7:2b:47:bf:d9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ae9796a-5f3d-4f47-b117-42360a213e37
        Validity
            Not Before: Jul 26 13:00:41 2024 GMT
            Not After : Oct 24 13:00:41 2024 GMT
        Subject: CN=1bdfec0f-bf59-4267-91ad-5f910056f770
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d3:a0:b4:3d:22:52:44:71:6f:05:95:99:c5:
                    55:fa:62:c6:e8:b8:e1:8e:e0:4e:f3:eb:c8:68:54:
                    3c:92:4d:22:8d:79:cf:1e:f0:8c:73:ca:27:e8:9e:
                    54:7c:27:04:bc:2e:74:f1:ea:68:5b:1e:dd:8a:3f:
                    6e:8f:91:7c:59:63:01:e8:5e:8b:fc:8b:d0:8e:90:
                    5a:03:d5:57:58:1f:d5:ac:41:ca:62:0f:fa:77:1a:
                    c3:fa:b8:9c:20:f5:2d:76:a9:95:22:7d:39:8b:b3:
                    a0:d3:77:4d:42:21:08:62:9e:31:6a:07:67:fa:a1:
                    ec:a1:31:11:f5:d8:bf:19:68:24:0e:ee:03:bb:27:
                    0f:76:49:c6:9a:03:88:49:28:2f:2c:80:1e:75:64:
                    2e:ad:28:e6:9a:28:7e:63:b4:d9:49:4b:c9:f5:34:
                    d4:4b:10:4f:f2:e6:6f:14:c5:e2:b6:c6:5e:67:de:
                    a1:6f:cf:44:aa:18:6d:53:c0:c9:a9:df:45:09:cf:
                    6f:9f:22:9c:8f:3d:01:32:14:c5:d3:a9:ef:38:85:
                    ec:67:43:17:cf:92:4c:95:f6:56:77:b7:f3:a0:e8:
                    33:38:41:27:09:e7:4e:05:f1:5a:af:b4:f0:2a:e2:
                    3d:f5:c7:64:99:5c:ca:2c:1e:56:23:5f:a0:51:e0:
                    89:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:F1:90:47:7E:B0:05:FA:70:67:19:DC:2E:F7:57:A3:26:1A:33:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/9077a96b-4983-315b-a24a-9e951e9c856f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/1ae9796a-5f3d-4f47-b117-42360a213e37.crl

            X509v3 Authority Key Identifier:
                keyid:4E:CB:3A:FE:5F:05:1E:AC:06:DD:59:CE:47:A6:DE:B3:29:7F:41:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fba3:400::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:31:43:5f:1b:ba:4a:7f:c9:43:6e:88:af:f8:60:e9:93:07:
         a7:43:17:c4:cb:06:86:e8:85:9a:58:b7:92:a9:ae:da:c4:fb:
         6c:68:54:1f:f5:d5:ad:42:8a:21:19:e0:f1:fd:f6:85:3b:6a:
         c0:33:00:98:bc:19:6e:c3:83:b2:ea:10:78:b3:d6:b2:56:44:
         f2:f6:7b:9c:3d:af:f7:ae:67:92:8b:1d:36:4a:ce:06:28:bc:
         7a:0f:3a:34:fe:47:80:f0:5b:2c:0a:e9:7b:dc:d4:a3:11:33:
         23:8a:90:57:b5:99:18:d6:47:12:27:05:94:90:31:c4:0f:c2:
         01:cb:e9:97:5b:f9:c2:68:a5:c6:e8:64:9a:1b:3e:c1:3b:c2:
         de:55:7d:4f:c2:e4:ee:df:74:58:ea:a4:69:98:9e:b8:37:17:
         a6:89:ad:7b:66:e0:70:28:78:d4:81:af:40:88:81:75:31:b7:
         a3:0d:89:09:09:c2:be:d8:e1:ff:61:d1:20:79:1c:86:bc:ad:
         8f:1c:8e:82:36:58:0e:80:fd:a8:59:6f:79:db:4b:33:fc:f0:
         ff:01:7f:92:8a:55:7a:2f:6c:12:80:ec:d3:bc:aa:c0:99:c1:
         05:ad:20:1a:94:72:3b:16:3b:38:4a:c9:e3:c2:7f:81:68:c8:
         95:d5:75:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----