Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/abf3bff7-9949-3b35-8a4c-d49a8f0dcae6.roa
File:                     abf3bff7-9949-3b35-8a4c-d49a8f0dcae6.roa (raw, json)
Hash identifier:          rBak7JmEHO9op+Aw88YETTg4zNs4g0UAK/R0AlVddy4=
Subject key identifier:   BF:61:F7:F6:0A:88:BD:53:01:7B:91:F9:8E:DD:9D:B9:6A:6C:7B:AA
Certificate issuer:       /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial:       010D0C9F432858453747FD0107FB48A982FE7D80
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/abf3bff7-9949-3b35-8a4c-d49a8f0dcae6.roa
Signing time:             Fri 15 Mar 2024 13:00:32 +0000
ROA not before:           Fri 15 Mar 2024 13:00:32 +0000
ROA not after:            Thu 13 Jun 2024 13:00:32 +0000
asID:                     11232
IP address blocks:        2605:4a80::/32 maxlen: 32

Validation:               Failed, certificate revoked on Tue 07 May 2024 17:23:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:37:47:fd:01:07:fb:48:a9:82:fe:7d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
        Validity
            Not Before: Mar 15 13:00:32 2024 GMT
            Not After : Jun 13 13:00:32 2024 GMT
        Subject: CN=2b4a7758-8692-4232-ba05-6b8c4639643f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:50:c2:1b:cd:c8:02:46:b1:98:e2:30:09:b6:
                    88:7f:c9:3f:8e:e5:48:50:f3:43:e4:fc:91:61:8e:
                    81:18:41:94:ce:9c:58:c5:6a:37:6d:ba:c2:54:09:
                    ae:77:be:65:24:ce:f3:60:8a:6f:4d:2d:72:4c:2f:
                    2e:1a:a6:b6:72:84:af:b5:f3:11:04:4a:1f:83:f0:
                    52:b1:c9:f4:4b:f3:1f:1e:d9:c9:9d:c4:67:70:b5:
                    f5:02:a4:a2:98:c2:f7:f2:15:45:01:50:9f:e0:80:
                    c2:76:59:99:7f:ff:dc:3c:da:9e:94:ac:b4:86:22:
                    0c:7b:c9:3e:46:57:7b:2b:45:4a:a9:9b:a7:3d:99:
                    99:34:49:f9:9c:5b:76:98:16:ee:8b:ab:11:00:de:
                    80:d4:d6:6b:52:4f:af:79:ca:54:d2:ed:96:91:8b:
                    67:1c:9a:ad:1f:20:08:3b:fc:69:09:93:c5:0b:06:
                    58:18:aa:65:6b:ef:ec:67:45:dd:37:73:7d:e0:8e:
                    15:1f:22:f2:dc:3b:3a:4c:19:4d:48:73:2d:72:08:
                    17:26:67:fc:4e:2b:1d:8c:af:35:7a:a5:d2:56:65:
                    b7:0e:33:5b:75:41:0e:0b:58:3d:34:39:e8:35:64:
                    82:56:37:2d:f0:88:42:5b:90:60:dc:68:86:cb:51:
                    95:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:61:F7:F6:0A:88:BD:53:01:7B:91:F9:8E:DD:9D:B9:6A:6C:7B:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/abf3bff7-9949-3b35-8a4c-d49a8f0dcae6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl

            X509v3 Authority Key Identifier:
                keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:4a80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:e1:9a:da:8a:b9:ee:d3:33:fa:f8:3d:72:0b:cf:46:7f:58:
         fe:23:95:f6:0d:66:17:30:0c:1a:cb:88:95:d0:97:b2:f6:68:
         52:26:46:31:ca:71:fd:8a:a8:ee:4f:06:14:65:46:9e:91:fb:
         05:7d:19:88:78:d6:91:13:a6:14:3d:21:21:ae:88:08:eb:3a:
         65:0b:1f:eb:e6:a0:8f:53:97:90:1e:49:2b:11:a7:03:ac:5f:
         f2:93:7a:ac:4c:cc:28:d6:96:4e:3b:73:a5:10:fd:6f:0c:87:
         05:ce:65:10:18:a6:be:f7:36:2f:e9:71:6e:21:a8:b4:d2:f9:
         f9:9a:78:8c:80:f8:47:3e:b2:02:34:60:34:5e:8b:93:75:74:
         5f:2d:b4:63:25:45:74:4c:f7:40:4b:ca:64:13:17:97:52:49:
         cb:af:dd:74:66:c6:2c:91:34:7d:30:5d:c1:40:a8:c5:33:3d:
         7e:9f:5f:2f:87:46:c6:e6:56:09:5f:bb:76:6b:e8:4e:36:bf:
         df:49:e0:7a:e5:46:e0:f6:53:60:38:b3:c4:07:e6:32:79:91:
         5b:12:93:b8:60:7f:54:1c:fb:11:97:de:f4:87:7e:b1:42:68:
         86:b0:b7:c5:73:21:0b:b2:e4:e1:70:67:2e:b0:9b:0d:5b:b3:
         64:88:60:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 20:50:39 2024 by rpki-client on console-ams.rpki-client.org