Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275/b7fdab78-e78e-3f0d-a9ed-97af290a9671.roa
File:                     b7fdab78-e78e-3f0d-a9ed-97af290a9671.roa (raw, json)
Hash identifier:          fX+BDH5nxDgt8PyEMBT63milSnyc7F09YTJew5djmyA=
Subject key identifier:   5E:58:4F:B1:CE:0A:49:38:6F:9F:67:B0:91:31:78:B9:BF:07:4A:E9
Certificate issuer:       /CN=72be6912-a48b-441b-9ee6-94aa6da03275
Certificate serial:       010D0C9F43285846C7E52671D08E59B91D379CC0
Authority key identifier: A1:4D:56:6C:2F:32:CE:77:87:C7:D2:CC:3A:B3:18:B4:67:9B:FC:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275/b7fdab78-e78e-3f0d-a9ed-97af290a9671.roa
Signing time:             Tue 06 Aug 2024 01:00:28 +0000
ROA not before:           Tue 06 Aug 2024 01:00:28 +0000
ROA not after:            Mon 04 Nov 2024 02:00:28 +0000
asID:                     51308
IP address blocks:        2602:fa42:fd0::/44 maxlen: 44

Validation:               Failed, certificate revoked on Thu 03 Oct 2024 03:54:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:c7:e5:26:71:d0:8e:59:b9:1d:37:9c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72be6912-a48b-441b-9ee6-94aa6da03275
        Validity
            Not Before: Aug  6 01:00:28 2024 GMT
            Not After : Nov  4 02:00:28 2024 GMT
        Subject: CN=3516eae3-8f13-40d5-b759-8bbfd7f5d455
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a5:21:f5:0f:ae:94:e4:2c:38:96:7e:c3:eb:
                    4b:fd:54:91:62:b4:08:72:3b:2e:45:ee:e0:3a:7c:
                    33:16:42:2c:6c:5a:e6:cb:54:a2:dd:6e:52:23:86:
                    8b:89:50:7e:c7:6d:b2:92:38:b3:05:41:43:07:75:
                    d1:9c:58:ae:e5:10:a8:b3:68:1a:dc:16:8d:83:8b:
                    a4:35:49:57:38:8b:9c:04:d6:61:a9:4b:aa:7a:c2:
                    e5:76:d6:64:4b:44:19:41:a5:63:59:89:d8:e6:7f:
                    73:c5:b3:29:84:1d:df:d4:3f:d5:5e:cb:7b:57:ae:
                    c9:aa:10:99:11:73:6c:a0:84:9b:8f:53:5d:a8:c8:
                    72:1d:2e:9b:8b:c9:81:df:6f:0e:5b:76:3c:5e:b1:
                    f0:a1:ef:01:53:00:f1:e6:ec:b1:88:1d:e2:a7:8e:
                    f8:a9:59:9f:da:b5:51:f3:71:07:81:88:86:42:5c:
                    c9:20:38:2a:06:73:9c:ec:5e:f6:d5:9b:3e:01:aa:
                    76:b6:58:03:5c:06:e7:b8:ed:28:6e:a7:a3:5b:48:
                    e5:6e:e1:6c:3e:d0:f8:b1:d2:cf:ad:55:3a:54:8d:
                    92:49:9d:03:71:51:1e:05:bd:1e:4b:a3:d4:45:35:
                    ed:e8:8d:4d:99:57:de:d9:45:f7:0a:dc:45:c3:87:
                    b2:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:58:4F:B1:CE:0A:49:38:6F:9F:67:B0:91:31:78:B9:BF:07:4A:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275/b7fdab78-e78e-3f0d-a9ed-97af290a9671.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275/72be6912-a48b-441b-9ee6-94aa6da03275.crl

            X509v3 Authority Key Identifier:
                keyid:A1:4D:56:6C:2F:32:CE:77:87:C7:D2:CC:3A:B3:18:B4:67:9B:FC:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/72be6912-a48b-441b-9ee6-94aa6da03275.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa42:fd0::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:84:cb:eb:ab:04:8f:9f:c2:79:f8:7f:97:68:14:e9:f5:78:
         4d:e0:88:0b:81:4d:85:53:09:99:9c:7d:d5:2f:f9:fe:56:64:
         67:27:82:c3:b6:46:d4:15:50:46:ff:5a:ad:38:40:89:72:e6:
         d8:76:7d:2d:ae:58:12:da:84:bd:99:b1:39:a3:c9:40:47:80:
         e8:bb:b3:6e:44:b0:bf:43:55:6d:19:0b:79:39:cd:0f:d1:09:
         68:50:87:30:ec:40:13:52:88:97:17:0c:9e:31:2f:dd:46:4f:
         53:96:19:bf:df:05:35:6c:58:a2:02:a5:dd:f2:48:98:a9:84:
         c9:28:6c:e6:19:3b:01:d4:38:07:16:79:f8:11:6e:f1:72:d4:
         eb:fd:dd:0a:1f:37:80:44:dd:f1:8e:1f:a0:e9:14:fd:fd:15:
         03:f9:d7:94:a7:e0:8a:2c:fa:f4:24:8c:17:12:ec:c5:53:aa:
         b2:44:77:28:97:b3:95:54:5a:17:e3:38:20:b1:c7:fb:83:81:
         42:92:95:85:fe:5b:fd:34:86:8e:05:3a:5c:99:bc:41:82:32:
         85:1c:c4:0f:30:63:7b:6a:a9:53:c8:04:40:52:be:12:10:bc:
         45:46:30:92:db:da:c3:ac:c7:64:9f:a5:b1:32:c8:38:d6:06:
         04:69:48:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 3 05:59:14 2024 by rpki-client on console-fra.rpki-client.org