Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/1c51aefc-fc74-3a7a-9d7c-01d3e50b1843.roa
File:                     1c51aefc-fc74-3a7a-9d7c-01d3e50b1843.roa (raw, json)
Hash identifier:          ZjXBK15yho/DQ+d3HiLciMmTGyrDMjTU6CtN5swcv5Q=
Subject key identifier:   75:63:8F:79:49:54:57:D6:54:AB:0B:7D:5B:65:D1:12:5A:77:D3:D7
Certificate issuer:       /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial:       010D0C9F43285846B2F515D0DF229DD941465400
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/1c51aefc-fc74-3a7a-9d7c-01d3e50b1843.roa
Signing time:             Mon 29 Jul 2024 13:00:38 +0000
ROA not before:           Mon 29 Jul 2024 13:00:38 +0000
ROA not after:            Sun 27 Oct 2024 13:00:38 +0000
asID:                     54203
IP address blocks:        2604:fc80::/32 maxlen: 32

Validation:               Failed, certificate revoked on Mon 12 Aug 2024 13:23:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:b2:f5:15:d0:df:22:9d:d9:41:46:54:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
        Validity
            Not Before: Jul 29 13:00:38 2024 GMT
            Not After : Oct 27 13:00:38 2024 GMT
        Subject: CN=475184e9-1511-4eab-835a-437be2198432
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:21:18:b0:de:bd:64:d7:86:5d:25:1a:7a:72:
                    b0:3f:41:f1:e9:3a:a5:2c:34:29:20:53:95:01:2e:
                    20:52:ae:38:b9:96:4c:12:46:c3:d6:35:d8:e2:02:
                    5c:77:f3:85:c3:20:16:0f:57:19:07:6e:a0:2f:3c:
                    bf:d3:32:7c:39:3e:bb:ac:a7:d3:81:aa:05:a0:83:
                    d4:37:17:91:e1:d8:21:37:14:58:8b:69:08:d7:ee:
                    1c:ab:0a:fc:32:a3:38:22:7d:b8:41:75:fe:67:ae:
                    8b:37:c6:64:a8:33:64:74:6e:72:5c:0e:82:1d:7f:
                    6b:af:c6:dc:7f:5d:1f:bc:13:4f:90:c5:31:5f:fd:
                    95:39:6d:a8:2a:76:39:0d:4e:b7:7b:22:8b:38:91:
                    e7:03:a9:94:37:f9:f5:b0:1b:25:43:41:5a:44:a8:
                    42:f9:3f:47:13:67:f0:95:c8:4f:3e:d6:91:30:1a:
                    60:94:34:d3:7c:a0:c6:a8:14:8a:95:c3:d5:6c:10:
                    4b:c7:f1:1b:9b:fb:87:a7:e9:d7:c1:bc:fa:1e:e5:
                    c9:59:cc:e8:d3:ae:ad:16:3c:4b:d0:71:95:6e:b0:
                    8b:0a:72:90:7b:cc:89:5c:93:66:d5:63:68:cc:95:
                    9d:ea:e8:52:82:66:2d:b4:55:a1:7e:03:ac:86:52:
                    94:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:63:8F:79:49:54:57:D6:54:AB:0B:7D:5B:65:D1:12:5A:77:D3:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/1c51aefc-fc74-3a7a-9d7c-01d3e50b1843.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl

            X509v3 Authority Key Identifier:
                keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:fc80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:bf:68:41:81:66:55:cb:c8:78:8c:a4:59:11:78:10:bd:e4:
         d5:65:19:a6:bc:96:98:c7:af:52:83:64:74:e0:49:c7:b6:01:
         e6:2e:50:3c:16:6d:68:b4:16:59:e7:29:d1:a1:ab:90:46:e9:
         6a:50:f8:87:36:7b:7d:42:8a:ca:d3:1c:c7:00:f6:a4:59:09:
         97:62:87:37:8a:01:81:5f:47:ce:32:6e:d8:b3:d5:88:1a:46:
         ac:40:5f:51:c8:69:da:ab:8c:40:2b:b4:b7:97:aa:28:25:7a:
         68:0a:d2:68:18:b2:8e:60:27:96:07:1e:8d:73:4c:aa:b5:7d:
         c7:aa:95:3e:3a:f5:ce:5d:82:fe:0b:d1:2e:1c:00:45:d5:a7:
         a0:77:2c:c0:9b:d6:ba:31:22:17:16:ce:30:bd:d6:14:6a:d0:
         e3:87:3a:c1:70:17:04:83:92:9c:97:c9:ba:f0:92:0b:72:f4:
         53:58:f2:35:67:2e:97:5c:80:7b:7b:3d:dc:1f:63:f0:50:fa:
         7b:e2:86:1f:e4:62:e1:78:82:f2:29:6e:89:e1:c7:22:11:05:
         b0:be:52:65:f1:0f:2d:7c:e2:96:14:d8:d2:3f:33:da:75:2a:
         75:84:06:2f:66:a0:86:d0:78:75:b9:fa:51:51:b8:7d:60:36:
         d1:3d:6f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----