Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/ecd49b9f-4bcc-39d7-a5d1-972f07cb0c2a.roa
File:                     ecd49b9f-4bcc-39d7-a5d1-972f07cb0c2a.roa (raw, json)
Hash identifier:          kLeh8TdT/HH+W3Mx/kC0a1LrT9tnXGEr3cbuWlYH2QE=
Subject key identifier:   63:E1:96:11:19:FA:7B:92:D2:83:EF:D0:03:29:E1:8B:CE:2A:E5:27
Certificate issuer:       /CN=4d80daa5-79dc-4c2a-8879-248a3f3e339c
Certificate serial:       010D0C9F432858474E7AF36C7BCE664A991D0680
Authority key identifier: 45:24:B4:3E:8E:13:30:ED:D5:96:0D:39:A0:C5:0D:3D:96:C0:56:FA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/ecd49b9f-4bcc-39d7-a5d1-972f07cb0c2a.roa
Signing time:             Mon 23 Sep 2024 06:00:44 +0000
ROA not before:           Mon 23 Sep 2024 06:00:44 +0000
ROA not after:            Sun 22 Dec 2024 07:00:44 +0000
asID:                     14618
IP address blocks:        2607:d540::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 24 Sep 2024 17:29:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4e:7a:f3:6c:7b:ce:66:4a:99:1d:06:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d80daa5-79dc-4c2a-8879-248a3f3e339c
        Validity
            Not Before: Sep 23 06:00:44 2024 GMT
            Not After : Dec 22 07:00:44 2024 GMT
        Subject: CN=7ff4e481-c94b-4cf2-b2d5-d2c1902b9ba9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:be:c8:d6:d0:a1:17:39:3b:2b:5f:27:56:a7:
                    11:25:7d:bd:a7:49:27:61:12:18:60:3c:c8:35:5d:
                    18:5f:61:ea:aa:85:84:a8:9d:3d:b7:1c:3f:67:b8:
                    40:c8:6b:66:e2:30:d1:20:17:71:fc:96:8c:a1:5b:
                    f4:fd:71:04:27:ca:b3:6b:a8:ad:0f:96:05:29:d7:
                    93:d1:35:98:d9:35:ca:b8:a3:27:f7:6a:a6:ef:0e:
                    e4:57:35:09:cd:7b:8e:cc:c6:d5:63:b2:5d:65:da:
                    78:02:c8:1a:6e:fe:90:72:8e:5e:8b:c0:30:4c:e8:
                    c3:26:6f:ef:3e:cc:64:1b:47:ff:74:23:d1:af:73:
                    f8:f2:af:1c:60:70:c4:05:69:16:43:e4:14:ec:51:
                    fc:af:4e:c8:d2:e9:7b:a3:7e:35:f7:77:e2:69:35:
                    1e:1e:b1:e1:db:9b:5c:dc:ed:15:7a:e6:59:a6:5b:
                    53:55:3f:14:51:4b:b5:ed:5a:6e:d0:0e:4c:a7:18:
                    a9:f1:02:d6:85:c3:ad:5a:1f:06:4f:25:29:d6:27:
                    70:a1:41:29:e3:89:6f:76:b8:1a:38:e1:98:46:a9:
                    91:6d:41:37:c5:56:e1:63:65:b2:f2:a7:3e:70:13:
                    08:c8:0a:68:51:41:bd:38:de:93:9c:a9:4f:e0:8a:
                    3c:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:E1:96:11:19:FA:7B:92:D2:83:EF:D0:03:29:E1:8B:CE:2A:E5:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/ecd49b9f-4bcc-39d7-a5d1-972f07cb0c2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/4d80daa5-79dc-4c2a-8879-248a3f3e339c.crl

            X509v3 Authority Key Identifier:
                keyid:45:24:B4:3E:8E:13:30:ED:D5:96:0D:39:A0:C5:0D:3D:96:C0:56:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:d540::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d4:8e:65:98:00:6c:24:f8:16:73:97:bb:b7:d8:a5:99:fe:59:
         70:e5:56:4c:4e:79:20:58:49:50:3d:2f:fe:a1:64:c6:8a:13:
         27:15:f4:91:44:08:71:68:95:a6:c3:05:44:98:b8:45:39:b3:
         66:fd:f8:b4:c4:d4:07:be:06:f8:88:99:aa:80:ca:5f:c7:e4:
         ae:01:79:d9:a8:72:27:e1:88:24:4d:32:db:e7:ea:92:5b:a9:
         d3:0f:39:71:f3:a0:30:3e:09:e8:40:52:e2:d4:20:21:7e:df:
         e5:dd:f1:8b:eb:68:48:e5:7d:a0:16:2f:41:19:e1:6c:4b:c2:
         7c:b5:f0:ed:f7:f9:9f:8b:82:a6:38:cb:ea:08:33:33:a8:cb:
         65:db:58:96:35:74:b4:ef:60:7d:96:fd:69:42:e1:ac:33:99:
         a0:46:fb:3d:a4:26:53:32:e0:e0:55:e6:28:65:c8:ad:7c:9e:
         90:97:c0:49:75:2b:a8:d4:31:d3:d7:1d:19:d2:16:7e:96:83:
         f7:cf:15:70:e0:80:da:2c:34:06:6f:de:96:a4:57:46:6d:b8:
         0d:a9:27:fc:45:57:51:28:e9:e4:c5:be:26:d2:94:af:3c:a7:
         68:81:6e:0e:69:55:e4:da:dc:e3:af:04:d3:31:b4:be:40:68:
         47:24:fd:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 24 20:31:12 2024 by rpki-client on console-fra.rpki-client.org