Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/87ccef9f-1423-37cd-8720-326d3ea66f38.roa
File:                     87ccef9f-1423-37cd-8720-326d3ea66f38.roa (raw, json)
Hash identifier:          uCWei5qele9aYdRyypr5djTZ5jI8RI4OCrA05M8ekfU=
Subject key identifier:   9D:80:C6:6D:9B:C2:94:C2:DC:0B:F2:FA:FD:98:C9:26:A7:BF:F4:CC
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F4328584762D66236DE16BA575742FDD0
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/87ccef9f-1423-37cd-8720-326d3ea66f38.roa
Signing time:             Mon 30 Sep 2024 13:00:42 +0000
ROA not before:           Mon 30 Sep 2024 13:00:42 +0000
ROA not after:            Sun 29 Dec 2024 14:00:42 +0000
asID:                     6461
IP address blocks:        2001:4c8::/32 maxlen: 32

Validation:               Failed, certificate revoked on Mon 07 Oct 2024 17:49:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:62:d6:62:36:de:16:ba:57:57:42:fd:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: Sep 30 13:00:42 2024 GMT
            Not After : Dec 29 14:00:42 2024 GMT
        Subject: CN=daff5ee8-625b-4d7d-9aed-0c31f5b116d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:9a:a7:cf:0e:23:7e:d1:37:8e:d6:18:9d:35:
                    ba:31:22:32:4d:d2:a1:5c:97:9e:db:06:7f:10:d7:
                    bf:ce:d3:30:c3:12:a9:1a:80:5a:10:ce:c8:86:da:
                    63:d7:38:13:13:9e:31:6d:39:69:57:68:e0:a9:43:
                    95:9a:88:92:1b:9e:4e:02:0e:cf:ca:57:35:e4:81:
                    e3:4d:88:db:5f:72:6c:85:c4:a0:9f:2e:0c:cc:d1:
                    3c:67:ed:44:f5:c8:79:3b:2a:c8:d6:65:4f:5a:a3:
                    51:ed:e5:71:2b:3e:c8:25:be:bd:6e:d7:40:ec:71:
                    db:44:21:7f:6c:97:0a:98:ca:5a:04:be:02:84:31:
                    8a:85:9f:d0:d4:48:a8:63:65:01:d7:c2:20:d4:73:
                    05:ad:a8:f7:16:a0:9b:ec:62:9b:4b:fb:8b:bc:cc:
                    d2:81:bf:ba:25:fc:32:8e:2e:45:50:e8:06:1e:9c:
                    59:9e:36:99:ea:a8:c7:f7:82:97:0c:f0:7c:a5:4f:
                    f3:f7:72:59:41:26:6a:34:79:d4:85:38:ca:95:26:
                    c1:cd:a6:10:68:bb:f2:1b:bf:2d:52:b4:16:b0:14:
                    b0:27:72:69:cd:3e:4e:5e:11:0f:ec:bf:a8:81:ef:
                    6c:84:51:8e:f5:28:66:c6:77:63:62:1f:20:14:a7:
                    a5:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:80:C6:6D:9B:C2:94:C2:DC:0B:F2:FA:FD:98:C9:26:A7:BF:F4:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/87ccef9f-1423-37cd-8720-326d3ea66f38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4c8::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:a3:29:e9:c0:be:4d:bc:78:a3:ad:fa:b3:b9:54:52:79:46:
         98:07:64:ff:cb:7d:cd:ea:65:a8:19:81:d8:ca:67:b7:13:8f:
         0f:e2:03:2d:7a:57:19:e3:3f:d2:cc:59:00:10:82:f4:3f:52:
         cc:a2:dd:79:48:8d:37:54:a3:11:2c:18:ea:1b:68:12:e5:26:
         a2:96:79:eb:56:9d:b9:da:da:ff:c2:7e:66:fb:9b:50:13:a8:
         a4:70:05:cc:c2:c9:29:35:92:5b:ab:64:66:a2:f6:9a:07:6c:
         95:d3:00:ba:66:cc:6c:98:01:2b:1e:8e:f8:ac:7c:0b:62:24:
         da:92:09:12:61:f7:e2:ae:ee:bf:93:9e:8a:0c:ba:2c:13:09:
         0c:cd:88:98:ab:b8:a5:9c:d4:1d:6f:5c:43:45:76:0e:33:06:
         60:3f:b3:65:38:61:df:17:b2:fd:f0:ed:a1:bd:64:be:17:14:
         be:7f:16:12:c3:3b:83:1b:64:a1:d6:a9:d2:5d:c4:4a:24:1b:
         d2:ed:44:37:6c:eb:3f:a9:5e:4a:90:87:a5:d5:a1:c9:3e:b2:
         af:66:72:55:fa:14:86:4f:e7:20:5a:77:e9:26:61:05:fd:25:
         28:b0:2d:22:1a:82:d7:d2:ef:e3:48:4d:e6:21:a1:f4:27:9b:
         2f:97:e4:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----