Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/ba896493-700c-373d-a932-16b4b2503aaf.roa
File:                     ba896493-700c-373d-a932-16b4b2503aaf.roa (raw, json)
Hash identifier:          EauyRvdOLySK2yKOSl9SBlJOw+FL+uL9JXv8jrlfj48=
Subject key identifier:   69:1D:D2:25:9B:A8:09:54:A9:82:C2:E6:6A:41:8F:1D:24:BE:78:6D
Certificate issuer:       /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial:       010D0C9F43285847A6065F89465ACDAA2FFA9140
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/ba896493-700c-373d-a932-16b4b2503aaf.roa
Signing time:             Thu 24 Oct 2024 14:36:59 +0000
ROA not before:           Thu 24 Oct 2024 14:36:59 +0000
ROA not after:            Wed 22 Jan 2025 15:36:59 +0000
asID:                     22781
IP address blocks:        2607:fb50:1000::/40 maxlen: 40

Validation:               Failed, certificate revoked on Thu 24 Oct 2024 15:55:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a6:06:5f:89:46:5a:cd:aa:2f:fa:91:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
        Validity
            Not Before: Oct 24 14:36:59 2024 GMT
            Not After : Jan 22 15:36:59 2025 GMT
        Subject: CN=6c76f563-21a0-4805-8016-f3242fa388c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f8:89:65:3b:39:f1:89:e3:c5:a5:95:d8:e7:
                    83:b0:1c:1d:04:6b:bb:7b:2f:15:04:bc:f1:ee:98:
                    35:4c:ca:75:d7:30:08:68:5b:54:be:b7:a0:42:01:
                    84:1a:08:b3:81:cf:d0:5c:89:21:99:42:0a:34:94:
                    8d:1e:fc:29:16:7c:f3:6a:67:f0:32:70:bb:8f:e3:
                    54:6e:df:83:0a:43:51:a7:af:32:72:b1:a7:f7:0f:
                    dc:59:c0:9e:8a:f7:6f:78:18:cf:bc:bd:0b:92:af:
                    45:d1:e7:f8:97:9c:69:31:fd:1e:0c:eb:92:d6:81:
                    54:4d:38:f0:3f:4d:e1:83:79:ea:5d:29:65:dd:1a:
                    74:80:35:d3:11:dd:41:7e:72:67:91:6a:e0:c5:4d:
                    34:46:fb:89:33:4b:d3:8d:eb:4c:de:07:37:b8:31:
                    a2:71:f6:79:88:e1:02:46:bb:c5:67:a3:50:2a:5b:
                    69:4b:49:f5:52:c5:78:62:60:c7:c1:ff:6a:09:38:
                    98:cd:bb:2e:72:1d:75:10:e4:f9:2d:d2:27:6d:fc:
                    d6:80:dd:ed:89:23:78:81:fc:bd:de:68:bd:f8:23:
                    d9:fc:f3:08:13:0d:9e:e0:2b:69:dd:cd:01:7c:71:
                    e0:9e:35:4b:2e:ef:f0:2e:76:dc:70:37:2e:0d:3a:
                    fb:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:1D:D2:25:9B:A8:09:54:A9:82:C2:E6:6A:41:8F:1D:24:BE:78:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/ba896493-700c-373d-a932-16b4b2503aaf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl

            X509v3 Authority Key Identifier:
                keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fb50:1000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:ed:42:ad:e9:91:31:3e:ad:40:37:32:97:25:99:6a:88:59:
         a9:f8:2f:93:2a:52:0d:01:cd:db:ef:4c:63:23:20:bb:b1:97:
         73:82:91:1c:8e:66:6c:20:3b:8c:1d:e9:37:7e:38:cd:61:57:
         93:94:e5:2e:cd:c9:d4:a6:97:cb:01:ad:81:de:81:dc:d3:6b:
         88:61:93:fe:36:07:ab:d3:68:e2:22:53:5d:fa:46:85:08:23:
         5b:66:ce:77:ec:83:27:50:4a:0e:22:3f:e1:3b:50:67:d3:7d:
         f7:42:58:7c:fe:bd:de:f8:ef:12:53:35:2c:8d:09:05:bb:e8:
         15:09:eb:4d:18:71:4c:65:37:1e:9d:07:b0:48:e0:0b:86:ef:
         79:e9:ce:d5:d3:37:74:36:0f:4a:6e:52:89:c9:b1:5f:5f:08:
         98:20:fd:d1:49:cb:2b:71:91:6d:ba:53:ff:c6:0e:c3:df:8b:
         6c:6b:29:b4:41:0e:5a:8e:c6:0a:3c:1d:3a:50:cb:66:c9:0b:
         2f:1b:59:be:fc:c4:5b:72:42:62:ca:05:14:96:d5:f0:c4:1d:
         30:ef:82:b2:50:a6:d4:64:76:25:8f:4d:9f:39:d4:44:3a:32:
         22:35:34:fd:fc:83:74:d9:12:c7:e4:84:d4:46:88:92:fe:1f:
         f7:da:18:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----