Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/ce6482af-7760-3ff1-8293-6ec7ba5a335c.roa
File:                     ce6482af-7760-3ff1-8293-6ec7ba5a335c.roa (raw, json)
Hash identifier:          LtSWwDkt2d/eNTWIXE4rUqzpS2Tg5pdX1pGqt+JSkIA=
Subject key identifier:   08:5D:AE:0A:11:8F:B1:A0:3F:1B:0C:B4:5E:01:14:9A:78:0B:13:24
Certificate issuer:       /CN=90a5fac0-b985-4c6c-ab51-6cdbd5e6651d
Certificate serial:       010D0C9F432858464FACA6853289D805302ABE80
Authority key identifier: 93:16:D8:66:8E:B6:C3:BE:EA:45:CD:0D:D0:38:FA:A9:59:19:4E:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/ce6482af-7760-3ff1-8293-6ec7ba5a335c.roa
Signing time:             Sun 23 Jun 2024 23:29:44 +0000
ROA not before:           Sun 23 Jun 2024 23:29:44 +0000
ROA not after:            Sat 21 Sep 2024 23:29:44 +0000
asID:                     30399
IP address blocks:        2606:ae40::/32 maxlen: 48

Validation:               Failed, certificate revoked on Tue 27 Aug 2024 17:30:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:4f:ac:a6:85:32:89:d8:05:30:2a:be:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90a5fac0-b985-4c6c-ab51-6cdbd5e6651d
        Validity
            Not Before: Jun 23 23:29:44 2024 GMT
            Not After : Sep 21 23:29:44 2024 GMT
        Subject: CN=59710e3c-b9df-456c-ab61-139d71134bd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:9c:f7:d3:b1:1a:68:28:de:2f:f9:aa:19:bd:
                    e7:47:2c:60:86:95:b4:3b:0b:c6:dc:a2:6c:ca:cb:
                    c3:13:be:be:53:52:87:bf:4c:1f:2c:cc:bb:87:07:
                    f1:b0:5d:ce:46:14:db:b5:78:9e:9a:6f:60:ff:cb:
                    1f:55:f3:a2:f9:2d:92:7b:56:e7:30:d8:a6:e7:63:
                    fd:d9:22:fc:ff:e0:83:9d:81:f0:65:98:03:a5:e8:
                    c2:bf:7e:6e:e8:d3:c6:3d:cb:f6:2d:f5:29:36:3c:
                    9b:bf:a3:28:0f:53:19:a8:f0:c7:5f:f2:69:1a:43:
                    45:3b:34:3d:92:3e:bc:ba:cc:1e:8d:81:07:e9:14:
                    da:4e:18:9f:8a:70:99:cd:a6:f7:75:47:e8:c4:c5:
                    b4:22:5b:91:4d:02:ff:27:ce:4b:2a:06:d1:c8:44:
                    a3:f3:45:1e:33:73:66:88:82:89:a3:cf:9f:6a:35:
                    1d:f6:f3:95:6c:0e:60:c2:ab:19:b3:ae:f1:08:f0:
                    88:9f:93:fa:93:ad:12:ee:93:e6:52:21:83:3d:ef:
                    81:3c:4e:ab:b9:48:9c:c4:3e:f1:5d:a9:9d:f7:c4:
                    53:95:b0:cc:58:5e:fe:9f:98:93:7a:4a:89:37:c9:
                    b5:47:c6:f1:5d:43:32:44:42:42:2a:de:2c:e6:66:
                    a3:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:5D:AE:0A:11:8F:B1:A0:3F:1B:0C:B4:5E:01:14:9A:78:0B:13:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/ce6482af-7760-3ff1-8293-6ec7ba5a335c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.crl

            X509v3 Authority Key Identifier:
                keyid:93:16:D8:66:8E:B6:C3:BE:EA:45:CD:0D:D0:38:FA:A9:59:19:4E:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:ae40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:b4:c0:94:14:9c:73:e4:72:f5:57:84:07:23:4d:f2:ff:c2:
         0b:fb:ed:a8:a2:5d:4c:b6:ed:3d:2b:42:1d:96:53:cb:6d:d7:
         f8:89:80:01:fb:bd:59:da:ec:9e:73:54:3e:d3:80:5e:16:27:
         29:7f:27:e9:8e:0c:54:31:00:a7:14:e4:0e:29:58:9b:cb:13:
         a7:d9:90:81:5e:6f:99:53:14:99:ea:53:cf:ea:f9:7a:3a:73:
         1f:76:2e:12:af:da:3d:7d:31:4c:c1:91:fd:b7:48:42:8e:8d:
         16:23:c1:03:d1:48:bf:d2:6a:16:bc:63:80:b5:12:81:6f:2c:
         9c:c6:f7:eb:12:18:45:63:e8:0b:56:d2:0c:b1:cb:e4:eb:d3:
         5c:fa:e5:d1:fd:d6:68:e2:8c:25:0f:81:27:ad:89:08:0f:03:
         4a:6d:1e:4b:91:5f:08:30:a2:01:04:96:32:7f:2f:0d:89:f8:
         e4:7d:b5:44:c5:9b:e3:1b:93:8c:b4:00:3a:3a:6f:4b:d0:37:
         bc:62:93:ec:d8:11:36:f5:f3:27:f5:fa:5f:35:f3:26:20:0a:
         c9:64:c0:55:1c:fe:8b:61:90:4c:0f:30:c6:d6:9a:7b:ee:f8:
         86:db:e5:0c:e0:f2:b0:d0:1c:9c:46:61:16:ac:f3:c5:5f:43:
         e0:59:d1:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 27 21:33:35 2024 by rpki-client on console-ams.rpki-client.org