Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/1a141d76-3f88-33dd-aaef-c8e371d6c972.roa
File:                     1a141d76-3f88-33dd-aaef-c8e371d6c972.roa (raw, json)
Hash identifier:          Waqi9pbzPyMhKzYJr8wRT4Ux3tf8UGwNKEaYG6U92G8=
Subject key identifier:   9E:99:2A:0B:B6:08:95:7A:37:51:C3:C4:74:45:8C:D8:7F:0E:E6:9F
Certificate issuer:       /CN=4d80daa5-79dc-4c2a-8879-248a3f3e339c
Certificate serial:       010D0C9F432858474E7CB31A9BDDBD6D93C2B1C0
Authority key identifier: 45:24:B4:3E:8E:13:30:ED:D5:96:0D:39:A0:C5:0D:3D:96:C0:56:FA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/1a141d76-3f88-33dd-aaef-c8e371d6c972.roa
Signing time:             Mon 23 Sep 2024 06:04:15 +0000
ROA not before:           Mon 23 Sep 2024 06:04:15 +0000
ROA not after:            Sun 22 Dec 2024 07:04:15 +0000
asID:                     14618
IP address blocks:        2607:d540:2::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 24 Sep 2024 17:29:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4e:7c:b3:1a:9b:dd:bd:6d:93:c2:b1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d80daa5-79dc-4c2a-8879-248a3f3e339c
        Validity
            Not Before: Sep 23 06:04:15 2024 GMT
            Not After : Dec 22 07:04:15 2024 GMT
        Subject: CN=0d149477-45f7-461a-989e-3edc08aedb76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:77:8c:26:27:30:4b:4f:cd:d3:be:43:55:78:
                    f6:d0:39:b5:58:ce:cd:39:13:0d:15:0f:3c:c2:6e:
                    d0:a2:07:cf:a2:12:27:1e:8c:35:df:d3:c0:51:19:
                    0c:30:dd:05:1d:86:95:07:37:cc:66:f7:09:09:fb:
                    33:e6:8d:b2:5f:dd:1f:29:78:74:96:72:f1:55:32:
                    94:ad:df:3d:bf:77:22:2c:b1:92:f7:c3:8e:93:83:
                    fa:97:26:12:42:2f:55:79:b8:5a:c2:a9:8d:69:46:
                    2e:bc:c3:e4:e5:e9:1e:ab:7e:72:30:43:6c:55:2e:
                    03:f3:49:9f:19:31:81:9f:af:f5:9d:59:f3:84:64:
                    87:af:24:28:1e:53:62:fc:29:c2:28:bc:c4:c3:d9:
                    35:17:a3:ed:a4:ad:9e:73:19:0e:fe:00:b7:7a:c6:
                    cc:3a:b6:50:e8:05:48:20:ba:03:4f:19:a6:a0:f4:
                    ff:c3:34:a0:36:3a:63:11:95:57:28:f7:50:44:7a:
                    1d:cc:c7:96:39:86:a6:cb:63:61:05:90:b6:5b:68:
                    55:13:16:7d:11:44:6a:32:62:31:c4:37:47:62:bf:
                    f8:06:0b:90:09:cf:1c:a9:9d:97:95:8f:81:87:16:
                    fc:ac:2e:9c:b0:1e:ac:e7:b5:4a:f8:92:ca:24:8c:
                    76:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:99:2A:0B:B6:08:95:7A:37:51:C3:C4:74:45:8C:D8:7F:0E:E6:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/1a141d76-3f88-33dd-aaef-c8e371d6c972.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/4d80daa5-79dc-4c2a-8879-248a3f3e339c.crl

            X509v3 Authority Key Identifier:
                keyid:45:24:B4:3E:8E:13:30:ED:D5:96:0D:39:A0:C5:0D:3D:96:C0:56:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:d540:2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d3:ea:e0:f3:73:86:68:a2:30:90:ff:52:29:6d:fa:6f:8e:66:
         a1:fd:52:04:75:6a:83:ea:0b:1f:1f:f3:f5:a9:5a:88:3a:90:
         55:00:d1:c5:d9:35:b2:46:ce:5e:22:91:81:2f:8c:10:38:d3:
         cf:78:e9:e7:1d:d7:81:53:5f:fd:d7:80:6c:91:74:3c:9c:17:
         1f:ea:b5:36:31:47:6a:02:fa:68:a7:f0:1d:bf:98:5e:ef:a4:
         0e:b9:a1:e7:ca:af:51:af:32:d3:1d:fb:02:3e:6e:c6:f9:1d:
         0c:24:96:b4:fe:39:b8:dc:d4:9f:c1:f1:19:3d:ec:01:7c:96:
         a3:fe:1c:c1:60:fb:c0:e3:d1:53:fb:c6:d7:46:51:f7:d5:38:
         97:cb:1d:05:09:5b:46:ac:4b:12:1c:a4:41:a8:77:a9:ea:fe:
         d2:fd:39:20:5d:48:87:27:1c:13:aa:78:4c:df:81:f7:fa:ad:
         e9:10:98:f2:3d:d2:1e:7e:5a:34:eb:6d:f8:17:fd:ed:41:a1:
         70:c7:0d:72:60:2a:f3:18:14:8a:ad:86:1c:cb:0d:8d:17:b7:
         ca:f7:cc:90:91:72:e0:ba:6c:5c:0d:67:97:bd:df:d6:18:62:
         2c:16:57:f7:28:35:d7:74:42:46:76:66:94:01:80:04:f4:7d:
         59:d8:61:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----