Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/2612f816-0724-3bde-9b59-c0c6876372b1.roa
File:                     2612f816-0724-3bde-9b59-c0c6876372b1.roa (raw, json)
Hash identifier:          u7+/hmtGczOyZsA/77qVndskB0gDAoP92nk3G1naRVQ=
Subject key identifier:   D7:B9:25:0D:81:C8:DC:D6:1E:6B:3A:D7:FC:48:5D:6B:50:A4:48:A0
Certificate issuer:       /CN=c7910a08-9cef-446d-8b36-1ad473d3fb84
Certificate serial:       010D0C9F432858447CA1E1347D0439243FC56480
Authority key identifier: EB:A6:60:A0:D3:2B:C7:47:9C:AE:D1:E2:0D:85:EB:46:93:B2:AA:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/2612f816-0724-3bde-9b59-c0c6876372b1.roa
Signing time:             Mon 08 Jan 2024 16:25:32 +0000
ROA not before:           Mon 08 Jan 2024 16:25:32 +0000
ROA not after:            Sun 07 Apr 2024 15:25:32 +0000
asID:                     198100
IP address blocks:        2602:814:f0fd::/48 maxlen: 48

Validation:               Failed, certificate revoked on Thu 18 Jan 2024 08:56:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:7c:a1:e1:34:7d:04:39:24:3f:c5:64:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7910a08-9cef-446d-8b36-1ad473d3fb84
        Validity
            Not Before: Jan  8 16:25:32 2024 GMT
            Not After : Apr  7 15:25:32 2024 GMT
        Subject: CN=bba0376d-bc40-4d03-b87c-089d04c28284
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e6:42:86:9b:a9:6a:1b:7b:bf:14:ee:06:39:
                    3d:66:46:a5:30:f8:aa:f0:11:46:ff:0b:0f:9b:6a:
                    be:60:a5:d3:9d:df:a7:eb:51:56:42:35:aa:c3:06:
                    6c:62:4d:07:2c:d4:9e:cd:da:84:12:ef:a2:8b:65:
                    da:b1:b7:c9:03:49:fd:a9:6d:24:66:02:da:06:6b:
                    9f:84:cd:c5:ba:6b:fb:c7:8e:f8:65:16:f4:f5:44:
                    6d:42:fe:03:a0:fe:d4:e5:f5:66:09:66:14:e0:b6:
                    e3:aa:3b:d2:c3:3d:c5:78:56:aa:e6:06:0e:d1:6e:
                    2c:a4:f9:f9:a5:9a:2a:27:86:be:81:32:cc:1a:23:
                    e3:8b:31:18:29:ee:4b:54:cc:df:72:d6:19:6e:92:
                    26:5d:b3:ce:39:cb:e3:f2:3f:ee:22:89:6a:b8:00:
                    7b:03:39:83:63:0b:d0:9c:af:0b:ad:ed:cd:d9:8f:
                    76:f7:b0:72:60:10:c2:cb:b9:bc:07:68:a3:a4:ba:
                    c5:9f:14:c0:23:d2:9a:53:af:d4:71:3a:a2:ea:d0:
                    3c:be:29:cb:e8:00:46:a4:e8:1f:97:d2:23:ad:b9:
                    80:31:39:47:5a:0d:c0:49:5a:00:8f:9c:d2:27:17:
                    51:4a:0d:26:06:8e:96:3e:0a:ae:51:85:b7:5e:3f:
                    87:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:B9:25:0D:81:C8:DC:D6:1E:6B:3A:D7:FC:48:5D:6B:50:A4:48:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/2612f816-0724-3bde-9b59-c0c6876372b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/c7910a08-9cef-446d-8b36-1ad473d3fb84.crl

            X509v3 Authority Key Identifier:
                keyid:EB:A6:60:A0:D3:2B:C7:47:9C:AE:D1:E2:0D:85:EB:46:93:B2:AA:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:814:f0fd::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:82:42:cf:ff:ad:8c:04:60:bf:b2:3a:29:5a:24:df:2f:52:
         21:7b:8b:0f:8c:e0:63:fe:4c:3e:9e:4f:1d:98:25:1f:69:75:
         e2:f2:e7:70:f2:6b:64:5a:52:db:44:3f:51:a1:48:19:cd:04:
         c4:b5:b1:ea:c2:88:d4:ed:f2:d6:f7:d6:94:88:f9:0d:cc:19:
         a1:f0:77:ee:18:2a:ab:db:c9:71:53:26:73:30:c2:38:39:43:
         b6:87:9d:2e:ef:d6:39:23:11:ea:0d:41:63:1e:5d:41:12:32:
         20:3a:d7:0d:36:24:54:87:d0:34:40:6b:6d:f3:71:bf:9c:b1:
         de:14:0d:ce:32:30:fa:af:ef:f7:50:f3:5a:ea:a2:a6:aa:6d:
         4c:eb:98:5c:13:92:36:5b:80:48:62:16:a0:9b:c2:5f:ed:35:
         53:68:54:d8:2e:62:7e:11:20:60:da:68:38:40:78:b7:b1:fa:
         6c:2d:01:44:3a:f0:9c:5c:d9:77:15:19:94:36:e9:f0:a1:9e:
         f6:d8:bd:85:11:31:62:bc:3f:10:c9:34:2c:87:af:c9:01:f1:
         d0:09:e1:92:55:98:c9:a1:aa:97:57:f9:45:ba:c1:39:22:7e:
         1e:bd:a5:96:2b:20:70:e9:7c:f9:a2:9d:50:1d:02:41:17:e4:
         7b:80:e6:df
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWER8oeE0fQQ5JD/FZIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzc5MTBhMDgtOWNlZi00NDZkLThiMzYtMWFkNDczZDNm
Yjg0MB4XDTI0MDEwODE2MjUzMloXDTI0MDQwNzE1MjUzMlowLzEtMCsGA1UEAxMk
YmJhMDM3NmQtYmM0MC00ZDAzLWI4N2MtMDg5ZDA0YzI4Mjg0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+ZChpupaht7vxTuBjk9ZkalMPiq8BFG/wsP
m2q+YKXTnd+n61FWQjWqwwZsYk0HLNSezdqEEu+ii2XasbfJA0n9qW0kZgLaBmuf
hM3Fumv7x474ZRb09URtQv4DoP7U5fVmCWYU4LbjqjvSwz3FeFaq5gYO0W4spPn5
pZoqJ4a+gTLMGiPjizEYKe5LVMzfctYZbpImXbPOOcvj8j/uIolquAB7AzmDYwvQ
nK8Lre3N2Y9297ByYBDCy7m8B2ijpLrFnxTAI9KaU6/UcTqi6tA8vinL6ABGpOgf
l9IjrbmAMTlHWg3ASVoAj5zSJxdRSg0mBo6WPgquUYW3Xj+H8wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNe5JQ2ByNzWHms61/xIXWtQpEigMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jNzkx
MGEwOC05Y2VmLTQ0NmQtOGIzNi0xYWQ0NzNkM2ZiODQvMjYxMmY4MTYtMDcyNC0z
YmRlLTliNTktYzBjNjg3NjM3MmIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzc5MTBhMDgtOWNlZi00NDZkLThi
MzYtMWFkNDczZDNmYjg0L2M3OTEwYTA4LTljZWYtNDQ2ZC04YjM2LTFhZDQ3M2Qz
ZmI4NC5jcmwwHwYDVR0jBBgwFoAU66ZgoNMrx0ecrtHiDYXrRpOyqrswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9jNzkxMGEwOC05Y2VmLTQ0NmQtOGIzNi0xYWQ0
NzNkM2ZiODQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgIIFPD9
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHeCQs//rYwEYL+yOilaJN8vUiF7iw+M4GP+TD6eTx2YJR9pdeLy
53Dya2RaUttEP1GhSBnNBMS1serCiNTt8tb31pSI+Q3MGaHwd+4YKqvbyXFTJnMw
wjg5Q7aHnS7v1jkjEeoNQWMeXUESMiA61w02JFSH0DRAa23zcb+csd4UDc4yMPqv
7/dQ81rqoqaqbUzrmFwTkjZbgEhiFqCbwl/tNVNoVNguYn4RIGDaaDhAeLex+mwt
AUQ68Jxc2XcVGZQ26fChnvbYvYURMWK8PxDJNCyHr8kB8dAJ4ZJVmMmhqpdX+UW6
wTkifh69pZYrIHDpfPminVAdAkEX5HuA5t8=
-----END CERTIFICATE-----
Generated at Thu Jan 18 13:16:08 2024 by rpki-client on console-fra.rpki-client.org