Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/4dc3df0e-f5d2-3dac-814f-8d1f15afde29.roa
File:                     4dc3df0e-f5d2-3dac-814f-8d1f15afde29.roa (raw, json)
Hash identifier:          mx2iRFrMH0gTkIpBE+SQGqeBGjlxvef+zwqRNmpo2+U=
Subject key identifier:   35:17:65:5B:80:76:66:84:12:CF:E3:AE:95:18:83:E1:79:AE:AC:3A
Certificate issuer:       /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial:       010D0C9F43285841718BA87A9A493F0E3EBEA780
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/4dc3df0e-f5d2-3dac-814f-8d1f15afde29.roa
Signing time:             Thu 30 Mar 2023 12:00:00 +0000
ROA not before:           Thu 30 Mar 2023 12:00:00 +0000
ROA not after:            Sun 01 Jun 2025 04:00:00 +0000
asID:                     11232
IP address blocks:        2604:7a00:c000::/34 maxlen: 34

Validation:               Failed, certificate revoked on Tue 02 May 2023 12:52:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:71:8b:a8:7a:9a:49:3f:0e:3e:be:a7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
        Validity
            Not Before: Mar 30 12:00:00 2023 GMT
            Not After : Jun  1 04:00:00 2025 GMT
        Subject: CN=85422519-63ba-4dab-92e8-78447ef15321
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:af:c9:c8:6c:24:32:6f:54:b7:36:ef:ae:ab:
                    f9:ea:dd:0d:63:20:86:16:71:83:a1:9c:ca:df:62:
                    fc:2e:2e:f6:7d:17:46:40:ff:42:4b:79:62:de:c2:
                    6e:78:14:ee:0e:26:f0:d1:41:b4:0a:c2:7c:57:5b:
                    f1:ab:5a:6a:58:fd:e7:a9:f1:11:cd:44:a6:3b:72:
                    c9:29:db:6f:7c:e5:a8:a5:66:78:f2:cd:7c:39:53:
                    3f:10:ad:08:b4:0c:9b:ec:3a:fe:8e:c0:98:ed:05:
                    b4:d5:dd:6e:f8:52:3c:60:6c:86:8d:40:c3:36:8e:
                    7f:0f:9f:49:00:ab:57:59:02:d9:21:b8:41:c1:ba:
                    94:be:69:d4:5f:33:e3:b3:6a:03:39:a1:3d:42:43:
                    a2:9b:c8:37:67:e3:09:c9:0f:d3:cc:a9:6d:18:57:
                    2e:d3:4d:d9:6b:dd:8d:c8:19:ba:fc:13:6f:fd:03:
                    37:b9:c6:ae:24:7a:06:5a:3b:12:5a:dd:78:a4:51:
                    d3:7d:87:50:63:92:76:9b:86:77:be:6e:2f:cf:95:
                    e5:a6:00:f0:2c:0a:4e:9b:4e:36:7b:67:df:36:e2:
                    0a:30:c2:9b:b5:94:18:a7:61:23:aa:84:74:72:3b:
                    3f:c4:ae:29:9e:f9:7e:7c:39:20:a8:f0:09:06:95:
                    8c:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:17:65:5B:80:76:66:84:12:CF:E3:AE:95:18:83:E1:79:AE:AC:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/4dc3df0e-f5d2-3dac-814f-8d1f15afde29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl

            X509v3 Authority Key Identifier:
                keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:7a00:c000::/34

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:3b:ee:16:a3:7d:36:26:fc:22:e7:0f:30:6a:75:f0:6a:ed:
         03:a7:52:d1:75:4f:bf:32:07:8f:d2:ab:1b:ff:3c:30:f6:da:
         87:ef:ac:c1:66:2f:9e:ce:82:86:19:e6:69:63:2a:a1:ee:72:
         9e:76:cd:84:56:01:63:02:d2:98:18:1f:1d:a7:61:35:92:c2:
         35:36:6d:24:ac:00:6d:79:fa:c0:83:2b:04:e6:c6:47:b9:ab:
         3b:dc:46:df:2b:2d:d5:23:87:2b:3e:c1:5a:a0:cb:e9:c7:7d:
         d4:f4:11:99:17:5a:6d:37:f8:f5:3f:3d:11:96:ce:b7:85:f6:
         c6:82:77:27:c6:fd:2b:0a:42:0a:93:f9:8b:00:17:48:ca:2b:
         35:91:b7:15:0d:c2:c2:eb:a9:ab:27:3a:a2:1f:f2:9e:25:dc:
         67:5d:e2:ba:ff:90:d4:2d:ea:c9:ea:9f:08:df:ca:d5:5b:76:
         9b:71:18:86:97:76:64:bb:b2:b0:8f:52:58:21:24:46:5e:cd:
         0a:77:b3:f1:11:7a:a5:9c:74:0b:97:98:32:61:56:73:03:03:
         58:7b:ef:71:87:d3:dd:88:da:32:06:02:aa:19:bd:35:d6:d9:
         01:54:ce:65:2b:40:52:e0:7b:3d:c4:4d:68:d7:a2:8b:38:50:
         40:01:47:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:10:00 2024 by rpki-client on console-fra.rpki-client.org