Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc4f47a4-5d19-4615-bc02-3360aba2322a/5e9d05f9-7dbe-3492-af8a-3716a9550f7e.roa
File:                     5e9d05f9-7dbe-3492-af8a-3716a9550f7e.roa (raw, json)
Hash identifier:          M5xWkL8eHSLhPUF/eQFpcYckg+F04MESwMLJlnTriZU=
Subject key identifier:   A5:45:7C:C7:01:9D:1A:4C:A2:4D:33:4A:D9:9A:6C:9E:2C:DA:5B:E9
Certificate issuer:       /CN=fc4f47a4-5d19-4615-bc02-3360aba2322a
Certificate serial:       010D0C9F4328584420394DAA9766EB5F0C272C40
Authority key identifier: A1:B5:FF:00:D7:55:06:57:CE:6A:7C:7D:5D:50:1C:C3:D5:93:1B:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc4f47a4-5d19-4615-bc02-3360aba2322a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc4f47a4-5d19-4615-bc02-3360aba2322a/5e9d05f9-7dbe-3492-af8a-3716a9550f7e.roa
Signing time:             Wed 06 Dec 2023 14:00:20 +0000
ROA not before:           Wed 06 Dec 2023 14:00:20 +0000
ROA not after:            Tue 05 Mar 2024 14:00:20 +0000
asID:                     212276
IP address blocks:        2602:fb40:90::/48 maxlen: 48

Validation:               Failed, certificate revoked on Sat 20 Jan 2024 22:44:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:20:39:4d:aa:97:66:eb:5f:0c:27:2c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc4f47a4-5d19-4615-bc02-3360aba2322a
        Validity
            Not Before: Dec  6 14:00:20 2023 GMT
            Not After : Mar  5 14:00:20 2024 GMT
        Subject: CN=6502be70-925a-4dbf-84c2-e8d55504e7d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:2e:9a:d3:39:40:cf:5c:f3:6b:d7:a0:99:2d:
                    26:75:91:c6:0a:5a:4d:26:73:2f:29:ff:fd:04:52:
                    9d:e0:e6:d3:18:82:47:2f:ca:07:1f:ef:35:b1:15:
                    69:55:12:be:7d:d0:69:12:2c:24:1e:1e:ad:c9:41:
                    5e:d8:7b:5f:90:30:94:0e:70:db:a3:80:ce:23:ff:
                    ac:c7:5f:ce:4d:a1:ff:f8:92:b9:4e:99:f7:40:47:
                    49:ca:17:94:05:d1:d0:bd:90:55:ad:e8:8d:23:32:
                    c8:9e:ba:47:2e:e3:ff:74:73:46:8f:9b:41:27:47:
                    d3:5d:85:a8:30:ae:57:5d:82:c2:2d:28:e7:77:2c:
                    c0:ad:ad:7d:bc:91:ce:09:37:ab:24:21:c0:c0:f1:
                    a2:ad:c1:90:b4:20:68:df:02:34:c7:b8:90:c8:f2:
                    74:50:f7:22:a8:2e:7f:eb:33:2b:97:ce:50:af:ba:
                    e7:e9:89:58:ce:96:d3:88:ad:4e:88:65:72:3b:86:
                    a2:f3:71:56:00:eb:3d:1a:a9:04:b5:b0:94:5d:5e:
                    f8:db:3e:9c:cc:96:2d:41:63:a9:f9:42:48:62:cd:
                    ea:b5:62:a3:f5:db:89:74:90:35:8a:99:0e:59:93:
                    74:dd:ab:c1:9b:d3:2b:3b:47:97:4b:97:76:fd:5c:
                    ea:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:45:7C:C7:01:9D:1A:4C:A2:4D:33:4A:D9:9A:6C:9E:2C:DA:5B:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc4f47a4-5d19-4615-bc02-3360aba2322a/5e9d05f9-7dbe-3492-af8a-3716a9550f7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc4f47a4-5d19-4615-bc02-3360aba2322a/fc4f47a4-5d19-4615-bc02-3360aba2322a.crl

            X509v3 Authority Key Identifier:
                keyid:A1:B5:FF:00:D7:55:06:57:CE:6A:7C:7D:5D:50:1C:C3:D5:93:1B:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc4f47a4-5d19-4615-bc02-3360aba2322a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb40:90::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:93:5c:2a:45:01:02:6e:9b:ab:88:ed:19:51:1b:2f:f3:0c:
         6c:0c:d4:63:65:5e:94:85:22:cd:eb:21:49:c8:a3:36:18:cf:
         07:d8:de:5b:03:8c:89:ba:e6:bf:11:de:48:b8:ef:25:c0:12:
         7d:45:45:e0:2e:df:4e:ce:28:bf:8c:14:fd:37:27:b9:a6:c0:
         ea:96:ac:d1:98:2e:8c:c8:f0:bf:7c:67:cb:5f:f9:67:c5:58:
         05:95:ec:db:d3:7c:59:64:7e:58:94:be:0f:84:63:8a:90:f1:
         9e:75:f5:4b:1c:c8:d1:af:ef:71:4b:5b:e7:ea:60:c4:11:a1:
         da:9a:bc:ed:4f:49:97:bd:ba:2d:67:2c:5f:5e:1c:2f:62:bb:
         ae:c1:0a:66:99:19:5a:70:ba:a6:b0:f0:b5:fb:7b:de:19:b3:
         11:98:f5:a3:16:7f:e3:26:0d:62:3e:fc:a7:f5:66:67:80:e2:
         32:0f:e0:f3:5f:ed:76:9e:99:4d:bf:9b:82:e3:24:8d:fc:72:
         95:4c:72:b3:d3:a5:ef:9e:e9:62:d7:e0:82:2b:41:ce:2e:59:
         e8:8b:1c:43:61:f6:f2:ab:0a:a7:d7:e0:da:dc:75:35:0b:17:
         d1:66:86:d3:fc:7f:42:22:59:4b:f7:a1:59:f3:32:5d:e8:20:
         dd:26:ee:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 21 01:35:44 2024 by rpki-client on console-fra.rpki-client.org