Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0e425ca6-d583-4845-b329-c74ded17c483/b61aa103-5930-3522-92bc-e22aba2beea1.roa
File:                     b61aa103-5930-3522-92bc-e22aba2beea1.roa (raw, json)
Hash identifier:          lnw3wO/yF1Kh8ihdoh/xgXD9vT1EZmt3iCwesj5WJtI=
Subject key identifier:   85:AB:AB:98:C6:A2:1E:38:4E:6D:2C:47:CD:D4:C4:C6:B2:AC:F7:D4
Certificate issuer:       /CN=0e425ca6-d583-4845-b329-c74ded17c483
Certificate serial:       010D0C9F43285847C0410A6B06E63BC81A8181D0
Authority key identifier: AA:B3:FB:81:AE:59:95:51:87:05:0A:1C:4D:1B:70:3C:92:DC:C1:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0e425ca6-d583-4845-b329-c74ded17c483.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0e425ca6-d583-4845-b329-c74ded17c483/b61aa103-5930-3522-92bc-e22aba2beea1.roa
Signing time:             Sun 03 Nov 2024 00:06:12 +0000
ROA not before:           Sun 03 Nov 2024 00:06:12 +0000
ROA not after:            Sat 01 Feb 2025 01:06:12 +0000
asID:                     20200
IP address blocks:        2602:f7b5:ff::/48 maxlen: 48

Validation:               Failed, certificate revoked on Sat 09 Nov 2024 08:48:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c0:41:0a:6b:06:e6:3b:c8:1a:81:81:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e425ca6-d583-4845-b329-c74ded17c483
        Validity
            Not Before: Nov  3 00:06:12 2024 GMT
            Not After : Feb  1 01:06:12 2025 GMT
        Subject: CN=11c5547f-5f40-4d3c-bf39-ae71e9155922
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9d:b9:cb:ed:46:e3:46:ea:5e:a5:2b:30:55:
                    9c:00:4a:16:d5:5e:1b:7c:35:58:e8:33:bb:f0:ce:
                    ff:0b:5f:8c:35:16:95:e0:98:5a:db:f6:43:25:18:
                    c9:58:38:3c:a6:07:e9:b1:6d:66:e4:8b:96:36:8b:
                    b4:43:42:3e:c0:c7:ee:84:f3:40:fb:ba:b4:8b:30:
                    05:2b:53:70:8b:b2:82:1f:79:f5:d5:75:33:03:2f:
                    89:ba:fe:7b:26:cb:73:a2:b2:cf:67:c1:0d:74:41:
                    bb:a3:48:01:6f:87:5d:ff:59:8b:f7:5e:39:a0:66:
                    95:7b:6a:65:fd:87:37:23:33:f1:fb:12:16:fe:d1:
                    34:c3:21:db:0b:ad:f7:0e:03:d3:8b:0c:bf:b8:e1:
                    bb:7f:59:eb:0b:7a:21:75:17:7c:9c:66:32:73:7c:
                    0f:5a:1b:b5:f9:b9:b6:1d:32:ec:d0:7d:a5:86:a3:
                    1b:19:7d:bd:ab:28:31:48:2f:c6:5b:80:d7:97:7a:
                    0e:be:66:ef:cd:c9:f8:06:b7:bb:d2:0b:89:08:ba:
                    af:a7:93:b4:c7:6d:5b:ca:e3:6a:54:b7:1a:e4:7a:
                    e1:80:da:94:30:6e:f5:a5:da:c9:a8:bb:f1:19:e7:
                    cb:29:d8:c2:d1:68:1b:72:a9:e2:c6:1b:31:3a:2f:
                    33:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:AB:AB:98:C6:A2:1E:38:4E:6D:2C:47:CD:D4:C4:C6:B2:AC:F7:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0e425ca6-d583-4845-b329-c74ded17c483/b61aa103-5930-3522-92bc-e22aba2beea1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0e425ca6-d583-4845-b329-c74ded17c483/0e425ca6-d583-4845-b329-c74ded17c483.crl

            X509v3 Authority Key Identifier:
                keyid:AA:B3:FB:81:AE:59:95:51:87:05:0A:1C:4D:1B:70:3C:92:DC:C1:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0e425ca6-d583-4845-b329-c74ded17c483.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f7b5:ff::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c6:91:51:b5:00:3d:cd:54:3d:e1:79:fa:4b:7d:df:19:a5:c5:
         b0:89:d5:b8:87:33:ce:0f:c1:68:a8:38:ee:67:7f:ae:09:ea:
         b8:1a:c4:12:12:9c:de:22:f6:44:d2:b5:fe:08:23:df:29:ea:
         6c:c8:17:41:0b:29:4c:96:08:28:e9:67:2d:0a:f5:78:e7:3d:
         59:90:29:38:ea:94:7f:33:8b:c0:02:50:76:cf:5e:3b:10:c2:
         9e:89:a6:21:70:46:49:69:f4:88:4d:88:55:4e:75:28:4b:37:
         28:53:c9:04:59:c7:6a:b2:b6:5e:0c:5e:09:c3:30:c8:c7:eb:
         52:d4:db:ef:e7:a2:44:7c:4f:96:7f:50:38:0d:49:3b:3e:c5:
         c4:46:81:9b:d1:9b:a7:b7:d8:48:af:60:ba:de:40:20:3c:1d:
         e5:87:e5:d4:82:4a:2f:33:0d:af:7f:6f:f7:2e:bd:45:33:ff:
         55:4f:84:0d:50:a9:54:d9:d8:bb:1d:8b:e5:b0:f5:ff:07:8f:
         b0:0f:76:e2:cc:62:4f:5d:b8:87:08:58:e4:98:04:d9:8f:af:
         0a:88:08:60:75:c2:b1:e5:89:32:51:1a:eb:11:6e:eb:83:de:
         03:60:b5:00:74:49:51:1a:a6:98:c3:e0:f5:e4:fd:e8:fe:e0:
         05:01:a2:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 9 09:56:09 2024 by rpki-client on console-ams.rpki-client.org