Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efe14a74-8339-4fa1-885a-2ed37947399a/a0eafd94-3300-3aa0-ae74-8867c790f60d.roa
File:                     a0eafd94-3300-3aa0-ae74-8867c790f60d.roa (raw, json)
Hash identifier:          1uMFK76WUbhwPggqR+/UVz3SoNadxstpK2Fnwd+V1ms=
Subject key identifier:   AB:24:44:A1:84:86:5C:D5:56:C0:B1:50:36:68:78:00:C1:49:2B:B4
Certificate issuer:       /CN=efe14a74-8339-4fa1-885a-2ed37947399a
Certificate serial:       010D0C9F43285846ED9580CB3D0B87452D64C500
Authority key identifier: C4:97:9D:67:D0:B6:2B:EF:A3:AB:9E:1C:7A:30:B0:6D:1A:88:5D:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efe14a74-8339-4fa1-885a-2ed37947399a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efe14a74-8339-4fa1-885a-2ed37947399a/a0eafd94-3300-3aa0-ae74-8867c790f60d.roa
Signing time:             Mon 19 Aug 2024 13:00:40 +0000
ROA not before:           Mon 19 Aug 2024 13:00:40 +0000
ROA not after:            Sun 17 Nov 2024 14:00:40 +0000
asID:                     14956
IP address blocks:        2602:fa59::/40 maxlen: 40

Validation:               Failed, certificate revoked on Sun 01 Sep 2024 00:47:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:ed:95:80:cb:3d:0b:87:45:2d:64:c5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efe14a74-8339-4fa1-885a-2ed37947399a
        Validity
            Not Before: Aug 19 13:00:40 2024 GMT
            Not After : Nov 17 14:00:40 2024 GMT
        Subject: CN=970290b9-34e8-40eb-b383-0c9fee0eb546
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:fe:6d:4a:98:9d:76:c2:1c:95:6c:d2:68:40:
                    37:a3:8f:37:d3:9c:af:ef:99:8d:a1:c1:20:a1:09:
                    c8:50:9a:7e:c9:da:6c:73:08:61:42:11:fe:c5:f1:
                    70:ae:d8:61:8a:c1:17:9b:bf:c6:11:92:47:be:41:
                    f8:fd:32:c0:92:d5:1b:61:d6:98:ac:6b:a3:10:b2:
                    8a:11:4c:8c:6b:38:53:5a:6f:88:8a:45:f9:c4:f0:
                    5d:aa:c7:21:b6:df:62:9b:85:77:12:51:98:0c:df:
                    8a:1b:7f:61:2e:77:e4:8d:0a:c5:f9:dc:bc:de:8f:
                    15:76:88:49:b9:2b:fd:b0:e7:ee:b1:11:d4:76:28:
                    3a:80:d1:fb:fe:2d:7b:17:c1:f7:2b:15:77:9b:dc:
                    ab:19:79:8a:7a:02:33:29:0e:88:cd:5a:62:0d:1e:
                    3d:82:5f:a0:fb:b0:5a:be:16:8a:b2:3f:46:20:24:
                    48:68:de:e4:ca:1f:52:29:51:05:7e:ab:f3:00:f1:
                    4c:b4:24:af:bf:b6:fe:4f:94:a8:bf:04:44:7f:34:
                    1d:88:ed:a2:1a:90:5d:1d:ae:af:86:d5:ee:ad:9d:
                    f6:0f:91:6f:5d:85:cd:9a:d7:ce:22:39:b0:69:71:
                    e7:04:6c:b8:fc:57:c4:0e:88:64:1e:a7:63:1b:66:
                    66:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:24:44:A1:84:86:5C:D5:56:C0:B1:50:36:68:78:00:C1:49:2B:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efe14a74-8339-4fa1-885a-2ed37947399a/a0eafd94-3300-3aa0-ae74-8867c790f60d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efe14a74-8339-4fa1-885a-2ed37947399a/efe14a74-8339-4fa1-885a-2ed37947399a.crl

            X509v3 Authority Key Identifier:
                keyid:C4:97:9D:67:D0:B6:2B:EF:A3:AB:9E:1C:7A:30:B0:6D:1A:88:5D:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efe14a74-8339-4fa1-885a-2ed37947399a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa59::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:b5:93:76:01:68:b7:81:63:75:71:10:6d:58:4d:a1:2f:d8:
         9c:ac:71:e1:79:9e:88:b9:e4:c4:4c:02:ac:88:db:46:5d:e4:
         8c:6e:a3:1d:6e:0b:c4:ed:37:94:36:6f:84:45:a5:a9:aa:27:
         26:4b:4c:1c:d2:b3:cd:0f:35:73:c8:31:55:5b:11:d8:35:4b:
         c6:8e:17:58:79:2e:7c:16:a7:e9:ee:02:ff:47:8b:f1:7e:54:
         68:95:d6:ea:83:2f:c9:0b:6a:1a:59:87:de:97:75:a3:5d:6c:
         71:ce:6e:d2:85:86:3c:04:ce:ea:52:9d:de:48:01:8b:ad:b3:
         59:3b:fe:1b:5d:e6:e3:f3:2a:68:42:d6:3f:ed:d7:54:37:77:
         a2:a0:b4:75:4c:a0:e3:cd:26:e8:21:f2:c6:b0:67:ac:f2:cf:
         ad:e6:92:a5:df:37:4e:86:09:b5:2d:95:b5:f7:4b:9f:d4:f5:
         3b:f8:69:99:76:39:7f:f8:28:da:11:2a:d7:74:f3:3c:1d:85:
         95:5d:81:1b:97:e3:15:16:e8:ff:c6:2a:30:1e:bc:45:55:d3:
         96:7c:40:30:6b:49:e2:7b:e5:ad:fe:88:63:b3:73:01:dd:f4:
         4a:2b:eb:8d:f7:ac:74:02:f0:60:6f:af:f2:61:48:55:fd:54:
         c9:67:3c:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----