Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/2d4f9e81-481f-3537-937b-948657ead9ab.roa
File:                     2d4f9e81-481f-3537-937b-948657ead9ab.roa (raw, json)
Hash identifier:          kHz+c8Dfqb+BqblCoUfWA+qfSPYd2Qn5tAs4HybS2Ks=
Subject key identifier:   88:0E:2A:86:17:22:06:14:AB:CD:11:1A:25:E4:D5:6D:B0:57:80:98
Certificate issuer:       /CN=c9d5fed8-9c87-4745-b68b-390b14873b57
Certificate serial:       010D0C9F43285844C0CE3623F3DEDE7C3E9C2E00
Authority key identifier: 0D:66:0C:FD:F0:EF:1F:A5:4B:9D:24:5C:B9:67:91:79:1F:EA:DB:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/2d4f9e81-481f-3537-937b-948657ead9ab.roa
Signing time:             Fri 02 Feb 2024 02:29:50 +0000
ROA not before:           Fri 02 Feb 2024 02:29:50 +0000
ROA not after:            Thu 02 May 2024 01:29:50 +0000
asID:                     14618
IP address blocks:        2607:28c0:100::/40 maxlen: 40

Validation:               Failed, certificate revoked on Fri 02 Feb 2024 14:48:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:c0:ce:36:23:f3:de:de:7c:3e:9c:2e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9d5fed8-9c87-4745-b68b-390b14873b57
        Validity
            Not Before: Feb  2 02:29:50 2024 GMT
            Not After : May  2 01:29:50 2024 GMT
        Subject: CN=71e0d4c7-b289-4cec-988c-20ae7ca6fdf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:74:30:da:34:e7:21:eb:92:61:37:16:54:e8:
                    e0:6c:0c:2c:13:1e:b2:1c:f0:31:63:98:63:c1:3a:
                    5b:a7:a6:54:2d:a0:2f:35:ad:a6:e2:1b:fe:f7:e3:
                    72:d1:95:2b:08:a1:dd:a3:dd:83:1c:ba:1b:3d:ac:
                    5f:27:80:bb:d4:1f:95:88:af:5e:b1:1a:f4:65:02:
                    e5:77:01:3a:a6:47:1b:dc:da:5d:a2:74:26:db:1a:
                    6b:a6:91:18:59:27:e5:92:49:c9:6b:30:1a:93:5e:
                    0f:e5:2c:26:5d:27:11:7e:cc:9f:69:f9:7a:be:17:
                    65:28:1f:9b:d3:09:25:f0:cb:91:cd:09:2f:61:7d:
                    29:49:03:86:a8:3e:74:47:1e:ed:13:f4:26:c0:42:
                    e1:0f:6a:53:39:71:7a:8f:05:c4:8e:85:6d:bd:06:
                    c4:43:f2:23:ff:de:b2:d4:7e:7a:ba:24:87:06:35:
                    31:f8:93:a6:fb:a6:c1:8d:dd:b7:d4:7a:37:9d:04:
                    f0:0d:fc:74:eb:90:af:db:ac:17:31:47:9a:b8:9f:
                    6d:66:06:c2:29:16:ca:58:8b:f6:2f:9d:e9:92:48:
                    d0:fc:71:e3:88:5b:16:33:be:3b:54:2d:90:bd:f1:
                    27:81:e3:d9:2e:88:a1:e0:e0:5c:eb:ee:9d:47:b5:
                    e8:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:0E:2A:86:17:22:06:14:AB:CD:11:1A:25:E4:D5:6D:B0:57:80:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/2d4f9e81-481f-3537-937b-948657ead9ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57/c9d5fed8-9c87-4745-b68b-390b14873b57.crl

            X509v3 Authority Key Identifier:
                keyid:0D:66:0C:FD:F0:EF:1F:A5:4B:9D:24:5C:B9:67:91:79:1F:EA:DB:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c9d5fed8-9c87-4745-b68b-390b14873b57.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:28c0:100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:39:95:cc:9d:ed:52:79:41:36:87:c2:a0:7f:f4:17:40:eb:
         e4:0d:f4:28:dc:0f:9c:cf:c4:cc:9a:41:fa:a1:d1:c8:62:c9:
         b8:66:c9:29:a3:8a:a8:48:6b:d3:12:d8:e0:fe:ab:3e:b3:48:
         e1:da:9c:2f:9d:5a:6a:1c:db:ed:3d:4b:a0:8a:d9:34:fe:4c:
         72:de:2a:3e:c0:91:2e:85:41:d6:bd:4b:e4:47:55:6e:87:d9:
         3e:24:a2:43:63:d3:25:52:20:ac:8e:1a:b2:73:c6:de:30:79:
         8b:57:ff:43:cc:4b:f1:ee:c2:30:cb:bd:62:6b:15:3d:9a:be:
         5a:91:18:c9:e4:d8:52:bf:05:50:7a:a8:4c:3e:6c:2c:d5:4f:
         4c:84:c3:e3:a8:2c:56:e7:26:b2:64:83:16:48:8f:64:0b:7c:
         75:9f:6f:ce:4e:8d:5e:d8:12:5f:4c:e3:e7:fb:58:1d:3b:a1:
         36:39:d5:9c:ee:83:32:3b:db:5b:3b:39:d6:e8:7c:d9:a2:38:
         52:5e:51:0b:c6:14:8a:c2:bf:0b:d4:59:84:b9:8e:34:6b:45:
         f7:05:7b:a7:d8:8f:06:58:e1:67:00:f6:02:b2:47:2f:a5:76:
         36:da:70:da:6f:8f:72:01:72:b9:33:a8:a9:01:6a:56:94:30:
         56:56:14:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 2 17:51:01 2024 by rpki-client on console-ams.rpki-client.org