Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/5e0c4ec1-36b9-3a76-af03-bc66108ebded.roa
File:                     5e0c4ec1-36b9-3a76-af03-bc66108ebded.roa (raw, json)
Hash identifier:          0WaXT7XvE0WtoJLB26Jx1ItQE8MXQ+/0BeaaYLXISXI=
Subject key identifier:   0F:2C:2D:3E:6A:93:5D:65:89:10:91:80:09:D7:AE:D3:1D:3F:2E:C7
Certificate issuer:       /CN=caf392a1-07e9-49f4-9a03-df5005333708
Certificate serial:       010D0C9F4328584798198C0CA091216C5C652E80
Authority key identifier: 44:2F:11:CB:79:DB:4D:95:5C:46:F5:8D:92:CB:7D:12:C3:2A:19:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/5e0c4ec1-36b9-3a76-af03-bc66108ebded.roa
Signing time:             Sat 19 Oct 2024 14:54:18 +0000
ROA not before:           Sat 19 Oct 2024 14:54:18 +0000
ROA not after:            Fri 17 Jan 2025 15:54:18 +0000
asID:                     46962
IP address blocks:        2606:2ac0::/33 maxlen: 48
                          2606:2ac0:8000::/48 maxlen: 48
                          2606:2ac0:8001::/48 maxlen: 48
                          2606:2ac0:8002::/48 maxlen: 48

Validation:               Failed, certificate revoked on Sat 19 Oct 2024 22:22:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:98:19:8c:0c:a0:91:21:6c:5c:65:2e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=caf392a1-07e9-49f4-9a03-df5005333708
        Validity
            Not Before: Oct 19 14:54:18 2024 GMT
            Not After : Jan 17 15:54:18 2025 GMT
        Subject: CN=436ca53d-6256-4344-b3e6-b505ac4a16f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:73:8d:fb:34:4e:0c:3f:e0:63:0b:b8:20:8e:
                    49:50:96:c0:d6:ce:76:a0:45:fe:63:33:4e:15:2a:
                    94:e7:7c:8d:bd:0d:72:c8:cb:c2:66:4a:a8:0e:11:
                    3a:8f:c9:b0:a5:09:d1:a3:55:f4:97:e9:23:e9:9b:
                    13:31:a4:aa:1e:26:0c:b0:24:10:52:0b:d3:0e:50:
                    10:b2:80:5e:ee:ab:f3:16:76:3f:b5:a0:d0:ca:47:
                    ac:64:ba:4f:08:ca:15:cc:5e:7c:a2:7b:2b:94:45:
                    48:a7:bf:b4:4d:ea:75:26:4c:6d:ad:b1:4c:6a:ad:
                    13:f6:24:fe:5d:8c:fd:31:f0:e0:5a:78:a8:17:ad:
                    01:94:3a:7b:b3:44:e6:b3:94:3d:b4:ec:a8:8b:07:
                    9a:b8:7f:b4:4a:59:7e:32:c5:70:f0:8e:46:83:82:
                    f4:30:d1:f4:33:75:58:fd:f8:29:a5:2e:29:b1:3c:
                    1b:54:26:fe:db:ed:9a:de:88:28:73:71:dd:7b:9c:
                    18:7c:c7:50:2c:0d:d3:51:5e:4a:c8:39:fd:99:46:
                    d9:21:c0:32:8d:1b:1f:e1:ae:34:ad:55:b0:4a:2d:
                    44:7a:6a:20:56:e5:fb:28:97:84:2f:99:13:7f:6a:
                    c5:de:45:40:1b:27:c6:d8:e8:70:96:ef:e4:df:5e:
                    27:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:2C:2D:3E:6A:93:5D:65:89:10:91:80:09:D7:AE:D3:1D:3F:2E:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/5e0c4ec1-36b9-3a76-af03-bc66108ebded.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/caf392a1-07e9-49f4-9a03-df5005333708.crl

            X509v3 Authority Key Identifier:
                keyid:44:2F:11:CB:79:DB:4D:95:5C:46:F5:8D:92:CB:7D:12:C3:2A:19:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:2ac0::-2606:2ac0:8002:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:6e:7b:95:01:c9:35:81:35:08:35:82:77:29:30:a9:35:3d:
         65:b9:33:25:20:60:0f:7b:f2:38:7b:36:2d:fc:dc:45:97:c3:
         db:3e:4f:fe:5e:93:34:73:a2:3d:e7:70:52:83:ea:6b:93:32:
         fa:ee:59:8f:0d:5b:6e:fd:cf:0a:22:0c:73:88:64:5e:0c:d7:
         95:0c:d3:d0:bf:15:7f:a8:06:83:90:4d:8d:bb:3b:ce:64:d2:
         bb:8f:0b:84:8e:bb:f0:4b:2d:39:2c:1c:f5:fb:00:22:b2:20:
         c3:06:7a:dd:e6:2f:cb:d2:73:69:ca:e7:78:13:bc:2f:a6:7f:
         6e:12:49:4a:33:e3:4f:1a:8e:ab:c7:6e:34:62:f8:40:87:19:
         b7:7c:d0:31:d1:ea:ee:17:98:7b:06:f6:84:8d:c2:50:df:d8:
         77:47:93:69:63:08:59:0d:29:b7:dd:7e:e1:aa:fe:05:3d:c1:
         27:fb:14:88:a8:2b:f7:98:3a:9e:34:e1:2d:59:e2:2a:75:e9:
         77:f9:40:4b:53:dd:58:1d:4f:37:79:8a:ff:a7:8f:10:c6:7b:
         16:ff:4a:0d:83:a7:a2:57:ea:f9:1c:e0:f6:5d:28:f5:2a:32:
         24:7a:a0:5d:b6:71:8c:c3:72:66:75:53:6f:a7:da:9b:1b:aa:
         0d:a6:b2:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 19 23:22:43 2024 by rpki-client on console-ams.rpki-client.org