Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/f6d67161-d5d5-3bda-b4aa-7a2748c92fd3.roa
File:                     f6d67161-d5d5-3bda-b4aa-7a2748c92fd3.roa (raw, json)
Hash identifier:          3oP1XOBleJCO7DaU/Pbwwd0h1jFIUeglhkoVnWFJIgA=
Subject key identifier:   EE:46:31:79:C2:D2:AE:DE:93:49:70:B6:3E:98:FA:E1:65:D3:B2:A5
Certificate issuer:       /CN=caf392a1-07e9-49f4-9a03-df5005333708
Certificate serial:       010D0C9F4328584793F36FE19784A0CC3E4D39C0
Authority key identifier: 44:2F:11:CB:79:DB:4D:95:5C:46:F5:8D:92:CB:7D:12:C3:2A:19:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/f6d67161-d5d5-3bda-b4aa-7a2748c92fd3.roa
Signing time:             Fri 18 Oct 2024 03:14:16 +0000
ROA not before:           Fri 18 Oct 2024 03:14:16 +0000
ROA not after:            Thu 16 Jan 2025 04:14:16 +0000
asID:                     46962
IP address blocks:        2606:2ac0::/32 maxlen: 48

Validation:               Failed, certificate revoked on Sat 19 Oct 2024 14:30:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:93:f3:6f:e1:97:84:a0:cc:3e:4d:39:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=caf392a1-07e9-49f4-9a03-df5005333708
        Validity
            Not Before: Oct 18 03:14:16 2024 GMT
            Not After : Jan 16 04:14:16 2025 GMT
        Subject: CN=20cf0e9c-cf40-47fa-883d-ddf17a4209fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:97:b9:35:74:f0:07:15:1c:9e:05:02:1a:96:
                    c3:8a:30:ac:a5:28:e8:35:07:aa:b6:64:41:57:8a:
                    05:c3:81:8c:49:52:a5:48:21:fb:1d:5a:08:1a:a7:
                    8f:b1:3a:01:43:82:b8:f9:dc:25:05:21:59:41:a2:
                    19:f0:4e:dd:88:0a:60:ac:ca:0f:c9:84:c6:05:0f:
                    8a:15:2a:5a:e6:27:3d:5f:6e:9d:e0:23:38:99:04:
                    fd:44:ba:26:84:14:2e:49:92:63:9f:96:34:ae:a3:
                    d4:ac:cf:f7:fe:3d:b2:e9:ef:73:f3:58:a3:a0:75:
                    a3:eb:98:50:6f:68:68:51:87:46:92:19:d9:15:dc:
                    f3:4a:79:4a:fc:f0:d6:b8:46:bd:be:f3:d5:a7:4c:
                    f0:41:0a:39:81:48:c3:b5:46:f1:ce:25:94:92:04:
                    05:69:b4:7e:7f:15:86:6f:20:d8:39:09:0c:3e:84:
                    b9:0f:ab:cf:ba:7d:17:91:c1:c2:fa:ef:6d:e7:b6:
                    0d:10:21:d0:75:86:a1:a0:56:93:df:96:06:af:67:
                    f0:d8:65:d3:bc:19:68:00:b6:50:7f:6a:8e:43:d4:
                    c5:4a:32:22:01:74:81:4c:a0:0a:bf:ea:83:07:09:
                    32:f9:5c:49:66:d7:1b:07:fe:69:d2:ef:49:68:0c:
                    00:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:46:31:79:C2:D2:AE:DE:93:49:70:B6:3E:98:FA:E1:65:D3:B2:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/f6d67161-d5d5-3bda-b4aa-7a2748c92fd3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/caf392a1-07e9-49f4-9a03-df5005333708.crl

            X509v3 Authority Key Identifier:
                keyid:44:2F:11:CB:79:DB:4D:95:5C:46:F5:8D:92:CB:7D:12:C3:2A:19:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:2ac0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:be:29:2f:ee:38:d0:d0:94:ef:7a:06:1d:ef:25:c3:fc:f6:
         4d:29:af:55:f0:21:c6:54:5d:8f:09:fb:e6:55:d4:08:33:50:
         d3:c8:c3:b4:82:1e:74:95:34:85:31:14:8a:81:54:f5:a5:09:
         98:f1:c4:cf:dd:34:10:88:cf:a8:fd:21:97:37:b6:60:d7:95:
         71:b3:28:42:27:ab:3a:9e:28:18:63:45:db:3c:3a:0a:83:73:
         4d:2a:12:fb:b6:f8:92:32:e3:3e:53:3d:90:9a:0d:66:ad:26:
         06:6a:41:03:92:69:f9:91:94:66:b9:55:1c:53:bc:a7:4b:a1:
         c9:ce:14:bb:2a:f4:ae:a1:c7:35:c6:71:ff:c2:8d:97:e7:d4:
         9f:2b:fb:e9:d2:2b:e6:e0:21:a1:4b:e9:99:b4:86:37:1e:74:
         d9:e2:18:7c:ee:e8:c2:b7:c0:eb:30:6e:5a:d9:16:a5:50:2b:
         e8:51:cb:57:7e:d1:a9:81:c1:17:a5:2a:d2:23:e5:40:14:a7:
         46:7a:a0:19:f7:b5:a2:6f:1c:c0:4b:76:07:3f:6b:f6:99:4d:
         3b:5f:c8:a3:c5:43:3b:22:eb:86:08:fc:fe:29:5f:bc:28:ba:
         e4:ec:ce:a3:ef:f1:1f:01:3c:22:51:c8:1f:3f:0e:bb:91:1d:
         e0:37:b7:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----