Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0/78d71d93-c06c-33f1-bccd-e78abbd136a9.roa
File:                     78d71d93-c06c-33f1-bccd-e78abbd136a9.roa (raw, json)
Hash identifier:          9SfbTzzoDZCrCdyciYlBVWe8oPLL4leefvQ3IxRlU4Q=
Subject key identifier:   2F:80:04:78:57:77:83:E3:B3:6A:C0:F1:92:92:0D:CA:F5:F1:82:F3
Certificate issuer:       /CN=816b4d34-3880-4b72-b786-365fbdec8ba0
Certificate serial:       010D0C9F43285846C760D2C8F36473923C6AF780
Authority key identifier: 9F:28:B5:EB:07:38:72:8A:FF:F9:24:FC:0C:51:16:18:58:D5:40:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0/78d71d93-c06c-33f1-bccd-e78abbd136a9.roa
Signing time:             Mon 05 Aug 2024 20:33:58 +0000
ROA not before:           Mon 05 Aug 2024 20:33:58 +0000
ROA not after:            Sun 03 Nov 2024 21:33:58 +0000
asID:                     19740
IP address blocks:        2606:1b40:100::/40 maxlen: 40
                          2606:1b40:200::/40 maxlen: 40
                          2606:1b40:300::/40 maxlen: 40
                          2606:1b40:500::/40 maxlen: 40
                          2606:1b40:600::/40 maxlen: 40
                          2606:1b40:700::/40 maxlen: 40
                          2606:1b40:800::/40 maxlen: 40
                          2606:1b40:900::/40 maxlen: 40
                          2606:1b40:a00::/40 maxlen: 40
                          2606:1b40:b00::/40 maxlen: 40
                          2606:1b40:c00::/40 maxlen: 40
                          2606:1b40:d00::/40 maxlen: 40
                          2606:1b40:e00::/40 maxlen: 40
                          2606:1b40:f00::/40 maxlen: 40

Validation:               Failed, certificate revoked on Mon 05 Aug 2024 20:45:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:c7:60:d2:c8:f3:64:73:92:3c:6a:f7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=816b4d34-3880-4b72-b786-365fbdec8ba0
        Validity
            Not Before: Aug  5 20:33:58 2024 GMT
            Not After : Nov  3 21:33:58 2024 GMT
        Subject: CN=00f1e23a-7905-486b-a198-b7cb1638d43e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:18:c3:e0:22:b7:e7:97:c0:24:66:bf:8e:a6:
                    59:95:11:e4:28:72:e9:2a:42:c8:54:4b:87:de:f7:
                    9e:e2:b9:e7:d9:70:34:d2:b7:57:3c:9f:19:9a:9e:
                    02:26:c8:51:f1:26:a0:5f:8e:90:f9:20:1d:6d:47:
                    e9:8b:4f:c2:4f:04:12:64:df:64:34:36:8a:a9:a1:
                    9f:80:f4:2b:7c:5a:70:2f:6b:3c:0f:72:92:f7:10:
                    93:53:15:31:a5:7a:63:76:ad:fb:48:4a:5f:e2:4a:
                    e6:65:da:dd:30:8a:30:58:76:b1:68:98:be:40:d8:
                    1b:5b:75:c0:fb:b3:86:be:57:09:35:1c:44:4b:44:
                    92:6d:e4:49:c1:e6:49:0c:66:a1:89:62:86:6e:82:
                    39:29:ab:d8:9d:3a:01:02:5c:b3:1b:c3:ed:16:af:
                    0f:1e:d1:4c:73:06:23:8e:cf:4f:7d:8f:15:67:aa:
                    c7:4e:5b:73:e3:d4:c9:f6:70:ac:54:8a:08:92:90:
                    77:3a:5c:86:99:f6:22:47:cd:88:f5:a7:a4:8e:16:
                    ec:09:89:81:38:68:87:95:72:f3:d7:cd:80:2e:12:
                    85:b6:6d:15:2d:97:0c:ca:a6:0e:01:ca:1a:9e:d0:
                    35:7c:4d:3e:7b:c2:3d:9c:bb:e7:eb:4d:66:9b:d4:
                    27:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:80:04:78:57:77:83:E3:B3:6A:C0:F1:92:92:0D:CA:F5:F1:82:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0/78d71d93-c06c-33f1-bccd-e78abbd136a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0/816b4d34-3880-4b72-b786-365fbdec8ba0.crl

            X509v3 Authority Key Identifier:
                keyid:9F:28:B5:EB:07:38:72:8A:FF:F9:24:FC:0C:51:16:18:58:D5:40:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:1b40:100::-2606:1b40:3ff:ffff:ffff:ffff:ffff:ffff
                  2606:1b40:500::-2606:1b40:fff:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:a1:14:1c:48:7b:d3:c0:16:8b:d1:09:ee:33:58:7a:dc:a8:
         87:a8:5c:80:c7:0a:33:88:84:c0:c5:4c:4a:19:fb:b6:0c:fb:
         51:a3:99:22:4d:35:27:0d:af:e9:8f:99:ca:15:62:2f:ea:bc:
         c3:76:25:2f:f7:92:7c:0d:2b:98:0a:7e:ab:6c:55:b9:18:45:
         75:a6:21:13:e7:08:5a:2a:20:b4:1e:f4:46:d5:97:cb:81:9a:
         34:b7:3c:7e:6c:d6:9c:97:b5:dc:86:c4:77:0a:4c:d4:af:89:
         58:92:f0:72:df:7f:22:b5:83:54:de:68:fb:05:25:02:36:a4:
         0c:be:ac:91:dc:69:29:37:83:f6:2d:50:8f:81:a9:04:8c:44:
         5b:98:51:f1:e1:d3:d4:8e:48:50:1e:13:96:8b:21:2f:15:be:
         ae:55:60:1f:f2:fa:f5:3f:a9:12:c3:85:03:23:c0:68:77:dd:
         75:ad:0b:4e:03:2d:80:36:ec:e1:74:d2:b2:4e:70:74:f0:ac:
         e2:8d:90:2c:53:b4:14:a5:4c:88:a5:f9:d8:9e:9b:d8:73:8b:
         2f:7e:a1:b6:ce:aa:21:53:80:ee:99:ec:c5:3d:9d:0e:7b:98:
         6b:9f:11:28:8d:e6:c7:b0:7a:4d:65:99:0a:38:c9:a7:f9:7d:
         84:f2:f4:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 5 23:27:27 2024 by rpki-client on console-ams.rpki-client.org