Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ce9f3bf2-5a47-37d3-8d0c-fa5eacd6ebed.roa
File:                     ce9f3bf2-5a47-37d3-8d0c-fa5eacd6ebed.roa (raw, json)
Hash identifier:          Sj0V4UqaXLvldxny8Bd/KYZYC7t4o+/SxmlLBEcvol4=
Subject key identifier:   1E:4D:BB:B4:EF:4E:94:49:21:C3:49:48:7F:00:A4:B8:62:64:74:5C
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F43285845A9BE14A39BAD63C6F7AAA440
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ce9f3bf2-5a47-37d3-8d0c-fa5eacd6ebed.roa
Signing time:             Thu 25 Apr 2024 13:00:33 +0000
ROA not before:           Thu 25 Apr 2024 13:00:33 +0000
ROA not after:            Wed 24 Jul 2024 13:00:33 +0000
asID:                     396828
IP address blocks:        2620:74:92::/48 maxlen: 48

Validation:               Failed, certificate revoked on Wed 15 May 2024 14:54:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a9:be:14:a3:9b:ad:63:c6:f7:aa:a4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Apr 25 13:00:33 2024 GMT
            Not After : Jul 24 13:00:33 2024 GMT
        Subject: CN=c6790949-7bf0-45be-a534-c600af8da9eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c0:6c:6f:1a:0d:81:ee:b7:ca:bc:88:83:e8:
                    f6:75:0f:6d:d6:0a:48:d4:17:db:27:d9:ba:30:31:
                    8d:9d:f4:02:44:c8:5f:9d:ae:8c:c8:33:c1:b1:08:
                    c9:64:f7:ef:2a:39:5c:0a:75:7f:5c:51:46:f5:04:
                    a8:c4:f8:be:0e:93:a9:55:25:2a:58:7e:98:2a:e0:
                    73:71:bc:b4:4c:75:16:4b:e1:9d:23:89:e7:53:4b:
                    ab:2a:07:57:98:6d:cd:3f:2c:e2:14:96:59:6d:01:
                    4e:4c:75:09:5c:4b:8a:0b:5c:1f:f5:3f:9c:17:0e:
                    80:41:13:ed:17:22:9f:44:69:85:2f:f7:a9:a7:e6:
                    8e:cc:fd:ff:ba:2d:df:5d:4b:2a:0f:94:90:f2:d4:
                    11:d9:e2:d0:ad:d3:e5:ac:4d:39:ce:4b:03:38:56:
                    14:ee:dd:32:7c:d7:98:7a:9e:7b:d0:3d:2f:c7:1e:
                    58:0f:93:37:7f:1c:60:72:93:d7:25:ed:7f:23:cc:
                    cd:25:b7:30:c2:d3:96:78:a9:18:2e:6e:e8:d0:f6:
                    29:97:9a:26:94:2b:62:21:84:b6:60:a7:18:28:a8:
                    34:e2:a8:59:31:9f:b5:3e:4d:53:53:d8:ff:6b:d4:
                    5a:33:d7:af:83:07:5e:68:4b:32:24:a1:27:3f:b4:
                    e1:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:4D:BB:B4:EF:4E:94:49:21:C3:49:48:7F:00:A4:B8:62:64:74:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/ce9f3bf2-5a47-37d3-8d0c-fa5eacd6ebed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:74:92::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:3d:07:f7:c8:92:10:62:06:c1:49:00:c1:48:1f:ee:fe:12:
         a1:1f:65:11:35:8f:5d:3e:c8:dc:73:ad:31:c2:59:93:ed:0b:
         1e:12:ce:12:33:a6:be:e8:66:ec:1f:b1:63:b0:ac:4d:49:a4:
         37:6f:fc:4a:c6:0f:6b:54:87:e1:37:47:ee:9e:3d:94:1f:f5:
         c0:f5:18:c7:be:fe:f2:20:1d:54:3c:14:46:cf:d8:60:a8:c6:
         b5:ab:12:54:78:36:67:fa:fd:d4:d7:89:d2:d0:4f:fa:16:ff:
         8b:74:35:f0:94:1a:9f:6a:72:36:43:7a:52:26:88:eb:de:1e:
         c1:6d:d8:64:ed:4d:33:73:a9:46:5e:ca:90:4d:a5:7c:33:df:
         21:0d:c9:9a:a5:41:79:29:40:ab:2d:3c:ae:7a:6b:86:71:c7:
         9b:8e:06:78:40:83:bd:11:35:c0:87:eb:26:56:29:07:bb:c1:
         ab:13:ab:3e:ca:25:27:d3:b2:50:4e:31:ed:2b:78:1c:15:1f:
         35:02:9c:28:b9:23:21:d1:b0:3a:59:63:6e:3c:b3:0a:37:7d:
         ee:35:36:91:73:4c:04:95:e7:45:7f:ca:9b:7a:72:30:07:9f:
         32:07:0c:3c:d3:16:02:57:6f:07:27:a7:3f:17:77:45:cb:be:
         30:d8:01:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----