Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d41ab67f-35a7-4489-ad3d-ff5b73ab0447/fbd60424-dd97-3f54-a09f-fb8b9829a1ec.roa
File:                     fbd60424-dd97-3f54-a09f-fb8b9829a1ec.roa (raw, json)
Hash identifier:          ckhEwtLr7BrDLYzhrOrdJP/pJ4XVmw7TuGF1XTPrcq0=
Subject key identifier:   57:21:3D:A2:77:49:1E:01:46:11:47:0E:9F:77:5B:97:21:CF:01:7A
Certificate issuer:       /CN=d41ab67f-35a7-4489-ad3d-ff5b73ab0447
Certificate serial:       010D0C9F43285846B8FC4234F8FF53AE4C415F80
Authority key identifier: BD:FA:2A:56:43:4A:7C:92:11:8A:D4:8E:A2:97:D5:C2:BF:94:35:67
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d41ab67f-35a7-4489-ad3d-ff5b73ab0447.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d41ab67f-35a7-4489-ad3d-ff5b73ab0447/fbd60424-dd97-3f54-a09f-fb8b9829a1ec.roa
Signing time:             Wed 31 Jul 2024 16:50:01 +0000
ROA not before:           Wed 31 Jul 2024 16:50:01 +0000
ROA not after:            Tue 29 Oct 2024 16:50:01 +0000
asID:                     7018
IP address blocks:        2607:f2d0::/32 maxlen: 32

Validation:               Failed, certificate revoked on Wed 31 Jul 2024 20:51:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:b8:fc:42:34:f8:ff:53:ae:4c:41:5f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d41ab67f-35a7-4489-ad3d-ff5b73ab0447
        Validity
            Not Before: Jul 31 16:50:01 2024 GMT
            Not After : Oct 29 16:50:01 2024 GMT
        Subject: CN=d89eb5fa-993c-4064-b02a-5ef7e0da8df8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d0:68:70:62:bb:ec:86:a8:7a:80:89:af:7d:
                    c4:ec:46:4d:d0:78:75:c7:55:4d:d5:6c:44:d9:00:
                    25:b6:14:5e:b1:5e:89:98:6d:c4:e2:0c:e3:36:25:
                    85:65:e5:0a:32:78:73:1d:da:d8:62:05:97:8c:26:
                    b2:9d:b2:b4:a6:41:86:56:48:3f:c9:36:c0:b1:14:
                    49:f0:95:f1:e2:a9:0e:dc:07:3d:f5:c2:71:5d:3b:
                    4e:da:9d:d2:2b:3d:94:b1:c1:f3:2d:7e:ba:e8:71:
                    f7:16:40:7c:07:6e:c8:bb:96:2f:cf:dd:47:bc:e3:
                    ff:05:0f:6a:48:5b:ca:40:a6:6d:68:a4:43:94:61:
                    4e:3d:ff:c4:d4:39:ec:fc:47:81:da:18:6f:10:92:
                    4b:8e:3f:f5:34:39:21:9e:8a:d4:06:78:49:e7:c3:
                    ca:cc:02:de:c1:4f:2f:61:f1:fa:62:dd:08:82:c1:
                    57:df:a2:dd:b8:8f:e2:0c:19:f8:1b:25:bf:8b:6c:
                    ac:0b:ad:13:c1:ec:e9:de:0b:f0:51:15:ab:81:99:
                    1c:c9:7b:d1:9a:35:7e:89:ef:00:f8:54:f7:8a:e8:
                    e7:ba:ee:35:bf:d5:fc:6c:36:6f:7f:12:6f:f1:40:
                    7b:35:83:23:bf:0b:a5:e3:fa:3a:9b:c5:7c:af:cb:
                    a3:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:21:3D:A2:77:49:1E:01:46:11:47:0E:9F:77:5B:97:21:CF:01:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d41ab67f-35a7-4489-ad3d-ff5b73ab0447/fbd60424-dd97-3f54-a09f-fb8b9829a1ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d41ab67f-35a7-4489-ad3d-ff5b73ab0447/d41ab67f-35a7-4489-ad3d-ff5b73ab0447.crl

            X509v3 Authority Key Identifier:
                keyid:BD:FA:2A:56:43:4A:7C:92:11:8A:D4:8E:A2:97:D5:C2:BF:94:35:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d41ab67f-35a7-4489-ad3d-ff5b73ab0447.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f2d0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:1c:17:4e:26:56:eb:fb:2c:8a:3a:6c:b2:8c:2e:e8:8f:a7:
         c4:e0:38:e1:15:9a:27:ed:89:06:53:94:c8:ce:b6:f5:0e:16:
         86:e1:02:ab:0f:0f:c6:69:10:3f:83:f0:73:75:06:96:13:d3:
         c9:10:67:a5:75:61:e0:f2:a3:86:6b:5b:5c:1e:b8:d1:5a:f2:
         a9:a4:ca:19:6a:0f:2b:f1:c0:7a:fc:51:3f:66:98:f9:c1:a9:
         72:83:3a:04:cb:62:f0:26:89:83:97:1a:ca:c4:39:09:ce:7c:
         3a:d7:6a:29:a7:78:49:a3:66:07:45:99:3e:d4:e9:5b:96:0d:
         3e:41:f9:ee:cb:53:d5:90:8e:c5:c3:84:b1:12:65:09:6a:a7:
         54:85:76:bf:70:89:2f:31:4c:de:36:31:f2:82:b4:25:d0:0f:
         bb:13:19:97:bc:16:0e:1e:27:5e:98:98:03:ee:87:34:e0:0e:
         a8:bd:db:72:fe:b1:9a:d4:e9:62:d8:7c:f3:4c:24:82:70:ea:
         45:c5:37:cf:1b:50:e6:bc:fb:2d:5f:96:a5:cc:6c:fb:3a:4c:
         e0:fa:9a:bc:f6:49:36:19:cd:09:59:63:9d:07:aa:07:97:73:
         ba:df:38:24:17:5b:4f:47:80:50:b9:28:15:68:2f:ff:4e:96:
         75:d6:72:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 31 22:25:19 2024 by rpki-client on console-ams.rpki-client.org