Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/0b6cb067-5676-3475-b0bb-b62f15146842.roa
File:                     0b6cb067-5676-3475-b0bb-b62f15146842.roa (raw, json)
Hash identifier:          AF+JUtJOUG4YYO7jvzkMVrwcv4pP+LFzLvQNqFfsAi8=
Subject key identifier:   8B:10:D8:DA:3E:45:0B:D3:32:1E:CA:CD:3C:52:79:1F:6E:88:ED:22
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F43285847B248F8FEAB5BD01E8B4AF5E0
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/0b6cb067-5676-3475-b0bb-b62f15146842.roa
Signing time:             Tue 29 Oct 2024 00:00:52 +0000
ROA not before:           Tue 29 Oct 2024 00:00:52 +0000
ROA not after:            Mon 27 Jan 2025 01:00:52 +0000
asID:                     6461
IP address blocks:        2001:438:804a::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 29 Oct 2024 16:06:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b2:48:f8:fe:ab:5b:d0:1e:8b:4a:f5:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Oct 29 00:00:52 2024 GMT
            Not After : Jan 27 01:00:52 2025 GMT
        Subject: CN=875dde4c-e599-42db-a419-4c662b8448e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:30:6e:ff:18:9d:33:b6:bf:11:28:47:45:7a:
                    d6:ff:2b:bb:ff:5b:8e:41:cc:10:f3:ae:de:c4:6b:
                    78:36:33:2c:25:52:4a:28:a7:d0:db:9e:f4:08:c9:
                    be:0f:66:13:15:62:7f:6f:30:6e:46:05:2f:c6:15:
                    03:ad:21:54:a5:0f:31:66:d9:96:0b:f9:eb:d2:8f:
                    88:56:22:51:75:dd:1e:8e:7f:03:c0:3d:49:52:03:
                    be:5a:c4:79:24:2b:cf:0f:6b:67:4c:f9:38:d3:d5:
                    7b:f9:13:09:5b:da:ac:58:6e:88:93:c1:63:9a:3c:
                    06:ad:43:09:31:74:0b:82:5c:c3:9b:31:81:99:4e:
                    5c:d9:02:94:58:cc:03:b7:63:5f:81:3a:e2:fd:85:
                    75:9d:35:e7:e9:ec:06:5e:ea:7e:b8:62:7e:c1:c5:
                    e8:e4:81:c9:0a:a6:ee:56:87:6d:ce:7a:c4:7b:1f:
                    15:fd:05:48:d7:2f:0f:c8:1a:0e:a1:39:63:df:f2:
                    d8:3d:c0:26:97:d5:30:82:b6:83:a7:08:41:a7:d0:
                    b0:2f:4b:1c:a0:97:5b:d2:9b:9d:ef:5f:06:88:1d:
                    19:37:18:5c:7c:42:e6:e1:e4:1d:99:a6:86:ae:fe:
                    3c:ac:26:8f:a8:5d:57:ec:28:0d:95:c7:84:71:52:
                    ae:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:10:D8:DA:3E:45:0B:D3:32:1E:CA:CD:3C:52:79:1F:6E:88:ED:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/0b6cb067-5676-3475-b0bb-b62f15146842.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:438:804a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:1a:31:da:3c:2e:c9:51:b3:f7:de:21:0b:27:00:6e:7c:8a:
         0e:78:5d:40:38:a7:68:8b:17:34:3b:9e:3a:82:69:52:0a:12:
         82:d1:1e:55:22:df:be:2f:15:26:8e:f3:26:b5:9d:80:4f:00:
         32:c5:ff:1e:c4:e5:ea:d4:ed:68:4d:25:c6:62:49:db:97:39:
         30:c0:77:be:b3:2c:76:fd:7e:22:bf:1b:d9:ea:ff:86:c7:68:
         4a:81:6d:ec:c9:12:19:d2:4a:cc:58:14:07:c2:ed:22:c6:a4:
         57:46:50:ed:2e:9c:54:38:1c:17:06:e2:8a:f7:74:70:5f:b7:
         a2:09:4b:8e:fe:35:d6:a3:a3:56:e0:89:89:05:76:10:b8:00:
         71:48:1c:2b:2d:21:c7:99:d9:c1:e4:9d:e8:0f:e0:79:ff:ff:
         7a:e9:ef:00:d1:3d:50:39:43:8c:d7:35:ba:7a:4d:f0:91:09:
         d6:5b:dc:d5:2b:66:8b:10:11:13:4a:2c:a1:66:04:f0:07:f6:
         19:ba:0f:53:33:ee:d3:b4:c5:03:b8:a9:ae:ec:24:d6:bb:6c:
         d5:72:62:76:54:3e:de:ca:41:7b:86:99:59:8a:74:76:1d:0a:
         d5:66:fc:03:35:c6:c3:83:5a:78:25:ec:56:b2:39:e8:d1:7c:
         a2:4d:1f:14
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEeySPj+q1vQHotK9eAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0NTgxMzUtNzE4My00NWU4LTlkYmMtZGQ4MmQyZmZh
MTE5MB4XDTI0MTAyOTAwMDA1MloXDTI1MDEyNzAxMDA1MlowLzEtMCsGA1UEAxMk
ODc1ZGRlNGMtZTU5OS00MmRiLWE0MTktNGM2NjJiODQ0OGU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTBu/xidM7a/EShHRXrW/yu7/1uOQcwQ867e
xGt4NjMsJVJKKKfQ2570CMm+D2YTFWJ/bzBuRgUvxhUDrSFUpQ8xZtmWC/nr0o+I
ViJRdd0ejn8DwD1JUgO+WsR5JCvPD2tnTPk409V7+RMJW9qsWG6Ik8FjmjwGrUMJ
MXQLglzDmzGBmU5c2QKUWMwDt2NfgTri/YV1nTXn6ewGXup+uGJ+wcXo5IHJCqbu
VodtznrEex8V/QVI1y8PyBoOoTlj3/LYPcAml9UwgraDpwhBp9CwL0scoJdb0pud
718GiB0ZNxhcfELm4eQdmaaGrv48rCaPqF1X7CgNlceEcVKu6QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFIsQ2No+RQvTMh7KzTxSeR9uiO0iMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1
ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgyZDJmZmExMTkvMGI2Y2IwNjctNTY3Ni0z
NDc1LWIwYmItYjYyZjE1MTQ2ODQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTM0NTgxMzUtNzE4My00NWU4LTlk
YmMtZGQ4MmQyZmZhMTE5LzkzNDU4MTM1LTcxODMtNDVlOC05ZGJjLWRkODJkMmZm
YTExOS5jcmwwHwYDVR0jBBgwFoAU6rQYfgkHSxb8ELd7vvS8sgQh3ucwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgy
ZDJmZmExMTkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEOIBK
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACsaMdo8LslRs/feIQsnAG58ig54XUA4p2iLFzQ7njqCaVIKEoLR
HlUi374vFSaO8ya1nYBPADLF/x7E5erU7WhNJcZiSduXOTDAd76zLHb9fiK/G9nq
/4bHaEqBbezJEhnSSsxYFAfC7SLGpFdGUO0unFQ4HBcG4or3dHBft6IJS47+Ndaj
o1bgiYkFdhC4AHFIHCstIceZ2cHknegP4Hn//3rp7wDRPVA5Q4zXNbp6TfCRCdZb
3NUrZosQERNKLKFmBPAH9hm6D1Mz7tO0xQO4qa7sJNa7bNVyYnZUPt7KQXuGmVmK
dHYdCtVm/AM1xsODWngl7FayOejRfKJNHxQ=
-----END CERTIFICATE-----