Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/99495b1b-b935-3f06-ac63-8b927a701534.roa
File:                     99495b1b-b935-3f06-ac63-8b927a701534.roa (raw, json)
Hash identifier:          XReOH5Og+cR+Z42Ns8r5m2Wqnwb+JzTSayu5IuUj8L8=
Subject key identifier:   19:86:EB:61:49:00:CE:A6:05:62:EF:6A:63:0F:F8:C4:AF:EE:A0:8F
Certificate issuer:       /CN=f375140c-52cc-401f-b3a0-476ffa367076
Certificate serial:       010D0C9F4328584425CEA6A3BB8466228903BF00
Authority key identifier: 44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/99495b1b-b935-3f06-ac63-8b927a701534.roa
Signing time:             Fri 08 Dec 2023 14:00:20 +0000
ROA not before:           Fri 08 Dec 2023 14:00:20 +0000
ROA not after:            Thu 07 Mar 2024 14:00:20 +0000
asID:                     399976
IP address blocks:        2602:80c:20de::/48 maxlen: 48
                          2602:80c:20d0::/48 maxlen: 48
                          2602:80c:20dd::/48 maxlen: 48
                          2602:80c:20d0::/44 maxlen: 48
                          2602:80c:20dc::/48 maxlen: 48
                          2602:80c:20d2::/48 maxlen: 48
                          2602:80c:20db::/48 maxlen: 48
                          2602:80c:20d7::/48 maxlen: 48
                          2602:80c:20d6::/48 maxlen: 48
                          2602:80c:20d5::/48 maxlen: 48
                          2602:80c:20d4::/48 maxlen: 48
                          2602:80c:20df::/48 maxlen: 48
                          2602:80c:20d3::/48 maxlen: 48
                          2602:80c:20d1::/48 maxlen: 48
                          2602:80c:20da::/48 maxlen: 48
                          2602:80c:20d9::/48 maxlen: 48
                          2602:80c:20d8::/48 maxlen: 48

Validation:               Failed, certificate revoked on Fri 09 Feb 2024 04:56:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:25:ce:a6:a3:bb:84:66:22:89:03:bf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f375140c-52cc-401f-b3a0-476ffa367076
        Validity
            Not Before: Dec  8 14:00:20 2023 GMT
            Not After : Mar  7 14:00:20 2024 GMT
        Subject: CN=c1472948-a722-42ac-808d-55e584bd4b2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b9:d3:b4:d3:96:9b:38:94:52:7a:e2:16:23:
                    37:bd:3a:5a:df:95:28:9e:4a:18:10:ba:c8:f1:78:
                    45:45:4b:7b:ba:31:24:55:15:c9:c6:df:a2:fa:44:
                    95:47:af:ba:b9:5c:24:11:37:24:17:f9:1d:36:0e:
                    0e:a1:d0:2b:be:33:15:49:7a:d7:fb:df:d9:e7:49:
                    42:d0:a8:4e:c1:72:39:0e:db:b2:57:ac:ab:0f:ff:
                    88:b6:8e:77:45:bd:9e:da:8c:55:ab:f8:46:06:9d:
                    99:e3:ea:2f:c6:1b:35:92:fc:9e:c3:76:1e:b7:df:
                    16:2d:77:23:6b:74:1d:47:51:4e:ba:1f:06:0f:ff:
                    11:75:eb:0e:7d:25:80:5d:af:b6:aa:11:9a:f2:ae:
                    f5:9a:57:e2:f3:a2:3d:6a:68:1d:e6:e3:1e:b9:bc:
                    32:97:d7:e8:10:c1:4e:97:b9:0c:d7:47:e8:ed:7c:
                    b3:a0:2b:01:b5:48:7a:c2:6f:d6:78:97:a0:0c:f9:
                    d7:75:a8:45:7d:ff:41:4b:b8:4f:8b:7f:5b:57:f9:
                    6e:97:2f:e8:b1:48:7c:3d:c1:78:35:7c:02:1d:af:
                    75:da:45:cc:ac:e2:6e:85:ef:df:90:e8:74:54:9e:
                    9a:d9:05:c1:9f:bc:b5:94:db:ac:69:e8:3e:52:77:
                    a0:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:86:EB:61:49:00:CE:A6:05:62:EF:6A:63:0F:F8:C4:AF:EE:A0:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/99495b1b-b935-3f06-ac63-8b927a701534.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076/f375140c-52cc-401f-b3a0-476ffa367076.crl

            X509v3 Authority Key Identifier:
                keyid:44:EA:00:A7:AC:0D:83:8E:EC:A5:10:EE:B1:42:FF:0B:98:5E:06:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f375140c-52cc-401f-b3a0-476ffa367076.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:80c:20d0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:8d:01:b0:c5:75:61:dc:85:f8:33:40:27:40:0c:83:48:f8:
         53:26:54:c3:b5:e8:48:d3:70:c4:ce:a2:90:03:9b:04:48:89:
         fa:73:0b:92:87:94:b7:62:27:f6:aa:66:a5:de:22:4f:4a:d0:
         e8:df:17:67:58:6c:59:41:87:bf:c7:ec:e4:c8:26:58:57:70:
         ab:71:5f:f9:49:c7:65:22:8a:de:84:fd:90:79:ae:ea:ff:46:
         89:e8:24:15:20:5b:41:13:85:6f:39:8e:80:c6:13:79:7f:e8:
         f5:5f:8f:44:d2:29:bb:d0:1a:1a:e9:f9:4f:c3:08:ea:55:16:
         c1:ff:a8:4d:fe:1e:7d:3f:02:56:43:d3:93:47:b1:16:3b:5f:
         63:09:88:f0:58:fa:d5:05:5b:55:d7:73:b6:af:22:35:1b:ba:
         1a:80:9c:b0:89:f9:7a:58:f5:d3:41:39:b5:a6:e9:f0:40:c3:
         b8:f8:20:48:03:38:62:29:10:ad:84:96:e9:0a:da:ae:2e:40:
         24:00:d0:31:82:43:5e:8f:a6:f4:ff:24:d0:1b:e2:90:25:55:
         41:31:1f:90:61:6a:21:4f:4e:ad:92:a6:98:83:42:f4:47:d0:
         a1:66:78:d4:2f:23:94:60:9f:18:2f:a3:64:7a:29:f4:b7:ea:
         e9:53:3d:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 9 06:12:23 2024 by rpki-client on console-ams.rpki-client.org