Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/06092d6b-dbee-3d78-b952-b9aad75deb54.roa
File:                     06092d6b-dbee-3d78-b952-b9aad75deb54.roa (raw, json)
Hash identifier:          khP3Qk+7R7HuHfS+20wOJMCIm49qGYVCJlgKr+HXlzA=
Subject key identifier:   73:85:F9:45:B4:25:85:4C:6E:E2:E1:30:8E:C7:5F:A9:AB:80:48:91
Certificate issuer:       /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff
Certificate serial:       010D0C9F43285847C1DF5A1A5DF2348B3AC9DA80
Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/06092d6b-dbee-3d78-b952-b9aad75deb54.roa
Signing time:             Sun 03 Nov 2024 14:00:49 +0000
ROA not before:           Sun 03 Nov 2024 14:00:49 +0000
ROA not after:            Sat 01 Feb 2025 14:00:49 +0000
asID:                     7181
IP address blocks:        2607:fdb8:4::/48 maxlen: 48

Validation:               Failed, certificate revoked on Thu 21 Nov 2024 00:33:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c1:df:5a:1a:5d:f2:34:8b:3a:c9:da:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff
        Validity
            Not Before: Nov  3 14:00:49 2024 GMT
            Not After : Feb  1 14:00:49 2025 GMT
        Subject: CN=44011469-970f-424e-a81f-fe76bbd035d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:c3:59:2d:7e:d8:5a:95:1a:ba:aa:25:47:a5:
                    34:19:12:f7:ae:2e:10:af:ae:fc:60:0c:dd:d1:95:
                    53:12:b7:7e:c0:cb:9f:c5:a5:83:26:67:d4:ae:37:
                    59:22:13:a7:4e:9f:42:d1:e8:b4:cc:10:32:e4:bb:
                    24:c1:f7:77:a4:a0:6c:15:df:fb:67:3d:f6:d4:de:
                    1b:39:bc:1e:33:84:62:e8:e3:13:8e:7b:3d:82:38:
                    f6:aa:79:80:df:3f:1b:c2:f1:38:93:6d:b7:3d:a7:
                    49:a6:3e:50:a9:53:c2:4c:d7:d0:13:66:dd:ac:92:
                    e3:c1:d9:4b:38:ef:19:e9:d5:19:34:12:50:33:d8:
                    db:f4:f0:db:8f:d0:3b:3e:ec:3c:37:74:cb:de:50:
                    1f:b8:8f:c0:0a:80:89:43:87:3c:7a:51:f9:ef:b3:
                    08:01:9b:08:6b:68:a8:20:ac:24:62:12:e6:b7:d2:
                    0a:91:b5:a0:e9:04:82:36:ed:e6:82:da:c0:ec:81:
                    38:29:a2:c1:74:b9:9b:1e:fb:ca:70:ae:87:85:fa:
                    f7:23:2c:ba:43:9e:04:08:0d:60:49:c7:a9:f1:3c:
                    ef:9e:73:74:94:03:4c:9e:73:1c:6d:98:1e:9c:f6:
                    82:76:e2:31:17:8f:af:61:06:c1:ca:82:16:60:50:
                    b4:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:85:F9:45:B4:25:85:4C:6E:E2:E1:30:8E:C7:5F:A9:AB:80:48:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/06092d6b-dbee-3d78-b952-b9aad75deb54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl

            X509v3 Authority Key Identifier:
                keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fdb8:4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:bd:9a:4b:ff:57:27:78:b8:49:99:64:db:2f:92:91:20:fc:
         c3:02:d3:3e:e9:55:ae:33:22:3a:7d:02:46:0e:ef:3d:dd:0e:
         48:c0:28:37:f2:2a:71:e2:84:49:2a:fe:bd:8f:ef:ec:99:bb:
         a2:b0:64:9f:19:9f:fc:66:38:32:db:03:6a:65:37:00:f6:d6:
         f7:8e:1b:c9:6c:3a:61:f1:9e:b0:14:76:cc:11:e8:06:8e:1d:
         d8:42:d5:7a:15:5d:a9:03:e2:ec:c2:c6:be:cb:8f:c7:e9:70:
         3a:1a:4f:dd:26:72:11:90:92:2c:68:63:1c:67:90:8d:39:4e:
         e4:8e:af:dd:dc:c3:14:1a:50:d2:9c:4e:34:11:90:28:ec:bf:
         35:d3:e4:3e:ae:4c:08:55:88:09:22:f7:dc:eb:0a:d3:37:ae:
         b7:a2:b3:f0:1a:e9:cd:da:bd:79:47:a6:35:2a:8f:92:7e:66:
         cf:ce:c1:45:06:6c:75:b9:f3:32:ea:e6:28:4f:dd:2a:ad:d0:
         58:97:0f:ba:5d:c7:79:df:97:4e:f7:95:18:3b:f7:17:b4:a4:
         ca:e7:30:9b:cf:3b:56:12:a5:6c:d9:b8:d3:81:fe:1a:60:f4:
         c5:ac:aa:19:b2:09:8b:28:50:0c:e3:f3:84:69:d9:2d:34:7b:
         7d:0a:3b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 02:02:35 2024 by rpki-client on console-ams.rpki-client.org