Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/0b9e7f40-13f8-37f6-80e8-d630a6f7e8ba.roa
File:                     0b9e7f40-13f8-37f6-80e8-d630a6f7e8ba.roa (raw, json)
Hash identifier:          84WJcu9Qsdzk3AHBGqAxf9HWGiPyVhbHQlbfQa5yNig=
Subject key identifier:   35:D7:5C:84:3D:61:60:22:AD:05:16:8E:E7:F7:4C:80:2A:20:2E:38
Certificate issuer:       /CN=0f19373b-2cc5-40f4-a6d0-7ccacc634857
Certificate serial:       010D0C9F432858476E010034E48950E4EA3A5FAC
Authority key identifier: A7:8E:91:58:FC:B9:59:F7:9B:89:3D:4B:D5:FB:0C:7F:90:02:FD:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/0b9e7f40-13f8-37f6-80e8-d630a6f7e8ba.roa
Signing time:             Fri 04 Oct 2024 13:00:42 +0000
ROA not before:           Fri 04 Oct 2024 13:00:42 +0000
ROA not after:            Thu 02 Jan 2025 14:00:42 +0000
asID:                     140936
IP address blocks:        2602:fbda:600::/40 maxlen: 48

Validation:               Failed, certificate revoked on Sat 02 Nov 2024 09:26:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6e:01:00:34:e4:89:50:e4:ea:3a:5f:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f19373b-2cc5-40f4-a6d0-7ccacc634857
        Validity
            Not Before: Oct  4 13:00:42 2024 GMT
            Not After : Jan  2 14:00:42 2025 GMT
        Subject: CN=2be0256d-5609-44cb-81c7-011d1363c20b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e4:48:1e:a6:08:23:81:0f:89:52:03:f7:55:
                    e9:29:e4:0f:ff:ce:ab:7a:39:8c:a8:cd:54:23:72:
                    56:3b:40:c4:2d:1d:d1:c5:75:09:d7:d6:cd:b4:9a:
                    58:a3:c0:9d:60:71:15:06:4e:75:35:cc:05:99:69:
                    30:d1:a8:20:cf:72:f3:bb:3c:f9:29:f3:76:9e:b7:
                    c5:42:85:96:ae:1c:0b:37:89:bc:09:33:34:25:90:
                    24:26:6d:72:a7:b4:96:d0:66:67:a2:04:9c:b2:39:
                    40:a4:02:d5:e8:09:7a:b1:e3:b7:41:c3:fa:f5:07:
                    c6:92:35:d8:92:fe:7e:ad:08:16:76:47:d1:6a:32:
                    e8:98:dd:e5:44:78:dc:8f:4b:60:46:79:eb:4b:07:
                    b4:60:16:b9:b9:11:e5:b8:eb:f7:04:c2:88:ea:c5:
                    cc:f9:94:ac:7b:25:79:19:02:6a:32:12:e7:d1:eb:
                    d0:79:7a:e9:55:fb:99:d6:96:c2:22:73:95:84:a5:
                    81:27:bc:a2:d9:ff:e5:23:5f:bd:7c:c3:95:3e:a4:
                    0c:f3:5b:a9:32:43:79:26:99:e3:dd:f2:6a:58:89:
                    d3:5d:33:9e:89:f6:71:cc:82:11:c5:19:98:dd:21:
                    5d:7f:74:d9:6b:6a:96:8e:a1:7e:b4:45:28:15:4b:
                    e5:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:D7:5C:84:3D:61:60:22:AD:05:16:8E:E7:F7:4C:80:2A:20:2E:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/0b9e7f40-13f8-37f6-80e8-d630a6f7e8ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/0f19373b-2cc5-40f4-a6d0-7ccacc634857.crl

            X509v3 Authority Key Identifier:
                keyid:A7:8E:91:58:FC:B9:59:F7:9B:89:3D:4B:D5:FB:0C:7F:90:02:FD:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbda:600::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:3f:db:25:e8:9b:fb:27:8f:0e:c0:30:f4:48:2e:52:54:98:
         65:4b:13:54:a0:29:0f:33:69:87:d8:ee:6a:c9:92:2f:1f:5b:
         74:5b:59:ef:80:85:26:3a:83:09:e2:88:06:a0:1f:5c:eb:a2:
         26:24:8c:c7:2c:dc:48:9c:c1:4f:b6:1a:18:8e:12:ae:10:f9:
         05:74:f4:dd:de:35:d4:7b:7e:7b:40:54:cf:d8:89:c1:7b:38:
         19:ca:7f:9d:cd:78:c2:04:a5:7c:85:70:2e:6e:d9:7d:6e:09:
         2f:3f:46:87:85:7e:ae:b4:3c:a1:d6:52:9f:f7:7f:0d:c8:ee:
         ee:f0:0d:1e:e4:fe:d4:d5:aa:c9:c0:d1:04:f9:83:d9:ba:d1:
         52:ba:25:95:32:85:cb:75:b2:44:66:a8:04:45:a7:ed:fb:d3:
         f9:ba:59:80:34:a9:e8:e4:e8:c0:72:1a:ad:64:23:47:23:81:
         b7:fc:eb:47:74:05:e9:ae:48:ba:7e:a1:03:7a:d2:d6:43:c3:
         ed:da:f3:d6:b2:ed:f4:37:86:34:3f:6c:72:ee:cf:5e:65:02:
         1f:58:81:c4:93:cc:ba:a7:b9:9a:9b:71:ca:4f:ce:64:79:9a:
         b0:50:fb:a1:01:20:e4:a0:88:31:53:67:05:0c:db:b2:c2:37:
         61:86:6e:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 2 10:26:10 2024 by rpki-client on console-ams.rpki-client.org