Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/791d2f8e-6aeb-3286-ad11-5fd783f7bde8.roa
File:                     791d2f8e-6aeb-3286-ad11-5fd783f7bde8.roa (raw, json)
Hash identifier:          oTl+9udEwPDYgK+vFgGGmNbDHWagmhpCKHQfbqHC/zc=
Subject key identifier:   C0:15:C1:C9:7C:8D:47:61:AE:BA:11:03:9B:AD:C8:4A:C0:24:B9:98
Certificate issuer:       /CN=18a928eb-48a5-4560-a217-36cb1ea32648
Certificate serial:       010D0C9F43285845A428CE02B203A5BA65099440
Authority key identifier: F4:7E:B1:DC:2E:8F:E5:FD:14:8F:7A:A2:C4:C6:46:75:B4:30:AB:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/791d2f8e-6aeb-3286-ad11-5fd783f7bde8.roa
Signing time:             Tue 23 Apr 2024 13:00:34 +0000
ROA not before:           Tue 23 Apr 2024 13:00:34 +0000
ROA not after:            Mon 22 Jul 2024 13:00:34 +0000
asID:                     23470
IP address blocks:        2602:f988:40::/42 maxlen: 42

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 02:12:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a4:28:ce:02:b2:03:a5:ba:65:09:94:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18a928eb-48a5-4560-a217-36cb1ea32648
        Validity
            Not Before: Apr 23 13:00:34 2024 GMT
            Not After : Jul 22 13:00:34 2024 GMT
        Subject: CN=2f905335-d27b-4446-9594-31bfc767873a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:a8:ac:fb:27:6d:31:b8:48:cc:9b:e0:a5:92:
                    ff:f2:19:8a:f1:5a:db:b2:02:4c:51:cc:66:f4:d0:
                    17:ea:ad:78:c6:c0:ae:c3:f1:0e:bf:22:0c:25:25:
                    f9:bf:9a:8e:31:7b:53:17:94:01:93:af:4d:fa:a0:
                    36:c9:a5:c5:12:8b:4d:2b:8c:12:9b:50:76:60:7f:
                    49:93:45:8b:54:2b:74:37:3e:27:5c:46:bc:8e:f9:
                    29:fb:e5:5a:69:6a:d6:8a:92:29:f5:a0:2b:4d:15:
                    21:9e:d7:d5:5b:b4:1a:e3:4a:63:3e:63:26:1d:ed:
                    23:ef:98:90:b4:a2:ea:bc:6d:a4:03:76:30:87:a8:
                    ab:d5:37:e6:2b:a5:7f:5b:45:b3:c0:b1:a8:d9:24:
                    4c:f7:56:33:e1:17:48:8e:b8:99:ce:83:27:3e:5b:
                    7b:7d:65:f2:dd:d6:14:2a:2e:de:45:6b:e4:36:93:
                    5f:7b:f8:37:d6:a2:fb:4e:76:e0:f7:77:ae:23:11:
                    13:4c:84:23:01:b1:98:25:b4:42:35:e3:8b:b9:b1:
                    ba:b5:f2:8b:14:60:d6:06:f7:af:74:ee:56:3a:f8:
                    d5:e3:dc:bf:eb:7c:66:49:08:6e:76:f4:36:68:5d:
                    bb:4b:81:ff:59:04:64:d2:67:1a:96:10:67:65:db:
                    da:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:15:C1:C9:7C:8D:47:61:AE:BA:11:03:9B:AD:C8:4A:C0:24:B9:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/791d2f8e-6aeb-3286-ad11-5fd783f7bde8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648/18a928eb-48a5-4560-a217-36cb1ea32648.crl

            X509v3 Authority Key Identifier:
                keyid:F4:7E:B1:DC:2E:8F:E5:FD:14:8F:7A:A2:C4:C6:46:75:B4:30:AB:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18a928eb-48a5-4560-a217-36cb1ea32648.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f988:40::/42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:25:af:1a:92:66:14:bb:29:45:26:68:6a:e3:e0:e8:20:36:
         ce:9a:5a:64:43:63:31:1e:a4:9d:01:fc:a9:3c:1e:7b:a4:07:
         0a:8b:cc:a8:df:f8:8b:c1:ff:0e:ba:36:9c:fc:7f:7f:7f:aa:
         e7:f9:b2:c3:2b:a6:08:c4:fa:e5:15:84:28:98:d8:5d:fe:48:
         28:85:4a:e6:24:1a:93:60:7e:6d:83:52:26:bf:08:ef:3b:9c:
         af:b0:81:b7:ec:8b:25:00:61:09:eb:03:60:54:60:0b:bb:8d:
         43:22:8c:1a:62:7d:fa:8b:62:7b:60:25:42:bf:68:26:3b:d0:
         f7:40:65:5c:21:02:43:bb:f5:49:85:8e:cd:2e:c7:3c:75:de:
         09:1c:39:14:65:d2:45:a6:f5:ba:4d:51:70:7a:ef:59:a1:46:
         dc:6b:b8:81:da:06:42:f7:9e:29:03:2d:f0:7a:f3:b6:17:6d:
         99:2e:1b:f5:2b:30:ec:4f:e0:18:0e:c7:8f:60:28:53:9b:41:
         17:c0:8e:84:bc:4e:fc:0c:5b:b9:59:37:22:6f:c5:dd:b1:a0:
         3e:03:08:96:a6:87:b2:8b:e2:d5:e2:0a:da:c9:27:7f:e7:56:
         6a:c7:27:7c:33:4b:5e:ac:bc:57:64:21:df:48:41:9c:d2:1b:
         d4:f4:36:98
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEWkKM4CsgOlumUJlEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMThhOTI4ZWItNDhhNS00NTYwLWEyMTctMzZjYjFlYTMy
NjQ4MB4XDTI0MDQyMzEzMDAzNFoXDTI0MDcyMjEzMDAzNFowLzEtMCsGA1UEAxMk
MmY5MDUzMzUtZDI3Yi00NDQ2LTk1OTQtMzFiZmM3Njc4NzNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqis+ydtMbhIzJvgpZL/8hmK8VrbsgJMUcxm
9NAX6q14xsCuw/EOvyIMJSX5v5qOMXtTF5QBk69N+qA2yaXFEotNK4wSm1B2YH9J
k0WLVCt0Nz4nXEa8jvkp++VaaWrWipIp9aArTRUhntfVW7Qa40pjPmMmHe0j75iQ
tKLqvG2kA3Ywh6ir1TfmK6V/W0WzwLGo2SRM91Yz4RdIjriZzoMnPlt7fWXy3dYU
Ki7eRWvkNpNfe/g31qL7Tnbg93euIxETTIQjAbGYJbRCNeOLubG6tfKLFGDWBvev
dO5WOvjV49y/63xmSQhudvQ2aF27S4H/WQRk0mcalhBnZdvaHQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFMAVwcl8jUdhrroRA5utyErAJLmYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xOGE5
MjhlYi00OGE1LTQ1NjAtYTIxNy0zNmNiMWVhMzI2NDgvNzkxZDJmOGUtNmFlYi0z
Mjg2LWFkMTEtNWZkNzgzZjdiZGU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMThhOTI4ZWItNDhhNS00NTYwLWEy
MTctMzZjYjFlYTMyNjQ4LzE4YTkyOGViLTQ4YTUtNDU2MC1hMjE3LTM2Y2IxZWEz
MjY0OC5jcmwwHwYDVR0jBBgwFoAU9H6x3C6P5f0Uj3qixMZGdbQwqzgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8xOGE5MjhlYi00OGE1LTQ1NjAtYTIxNy0zNmNi
MWVhMzI2NDguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcGJgL5iABA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAF0lrxqSZhS7KUUmaGrj4OggNs6aWmRDYzEepJ0B/Kk8HnukBwqL
zKjf+IvB/w66Npz8f39/quf5ssMrpgjE+uUVhCiY2F3+SCiFSuYkGpNgfm2DUia/
CO87nK+wgbfsiyUAYQnrA2BUYAu7jUMijBpiffqLYntgJUK/aCY70PdAZVwhAkO7
9UmFjs0uxzx13gkcORRl0kWm9bpNUXB671mhRtxruIHaBkL3nikDLfB687YXbZku
G/UrMOxP4BgOx49gKFObQRfAjoS8TvwMW7lZNyJvxd2xoD4DCJamh7KL4tXiCtrJ
J3/nVmrHJ3wzS16svFdkId9IQZzSG9T0Npg=
-----END CERTIFICATE-----