Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1026f2d5-b1fe-47f2-9d2e-0bb75a7b18ed/9d6edb5b-d4b4-366d-84c6-b2885c462b4a.roa
File:                     9d6edb5b-d4b4-366d-84c6-b2885c462b4a.roa (raw, json)
Hash identifier:          Q+ChDpMjRiOrzzrDMFtWxirGl12SPuDtinTpEr/ewC0=
Subject key identifier:   2B:F2:AF:97:EF:FC:68:85:57:42:F5:4B:AF:6B:9F:ED:C2:96:BF:4C
Certificate issuer:       /CN=1026f2d5-b1fe-47f2-9d2e-0bb75a7b18ed
Certificate serial:       010D0C9F43285847BAC4281BAEE191C342226800
Authority key identifier: 60:19:68:5C:12:1A:D8:CD:7C:C1:5E:BE:93:20:3C:47:4E:D0:EA:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1026f2d5-b1fe-47f2-9d2e-0bb75a7b18ed.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1026f2d5-b1fe-47f2-9d2e-0bb75a7b18ed/9d6edb5b-d4b4-366d-84c6-b2885c462b4a.roa
Signing time:             Fri 01 Nov 2024 00:55:32 +0000
ROA not before:           Fri 01 Nov 2024 00:55:32 +0000
ROA not after:            Thu 30 Jan 2025 01:55:32 +0000
asID:                     18671
IP address blocks:        2605:8b00::/32 maxlen: 32

Validation:               Failed, certificate revoked on Fri 01 Nov 2024 11:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ba:c4:28:1b:ae:e1:91:c3:42:22:68:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1026f2d5-b1fe-47f2-9d2e-0bb75a7b18ed
        Validity
            Not Before: Nov  1 00:55:32 2024 GMT
            Not After : Jan 30 01:55:32 2025 GMT
        Subject: CN=c7c33016-b2b7-4ca6-9810-607dca2e0f21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:1f:41:a3:7d:7b:6f:b6:68:ef:5d:49:97:4e:
                    00:03:ce:72:f5:0a:2b:85:59:ed:85:1f:92:e5:a7:
                    2c:15:10:83:0f:4f:8b:ff:a2:84:f9:e7:f6:df:9f:
                    79:05:69:3d:d8:39:f2:87:ff:5d:c5:98:ea:51:54:
                    e2:95:04:bf:17:f1:58:06:f4:dc:15:34:42:b2:bb:
                    45:f4:31:95:e6:62:f3:92:00:d8:f3:bd:16:2e:28:
                    6f:7d:2d:4b:24:48:4d:f1:df:51:a8:cd:bc:93:f8:
                    63:51:aa:2c:bb:f7:ca:cc:d3:f1:ac:fb:09:3b:c1:
                    e0:66:91:b2:3d:82:1c:f0:3e:ad:86:8c:6e:98:21:
                    dd:16:ec:7d:09:d3:92:6f:49:da:ff:0e:f1:a8:fe:
                    5f:9a:ea:fb:85:1a:f2:a5:af:1b:1e:b2:19:8f:b8:
                    00:33:2a:9a:d3:5c:2b:cf:bf:e0:82:0e:ff:93:4c:
                    ed:3b:c8:8c:5f:d3:33:91:3d:6a:c5:09:cf:95:c4:
                    c7:7c:36:e8:36:c3:88:66:ab:a1:1f:72:c3:73:1b:
                    c1:62:93:58:54:58:cf:c2:d4:b8:60:68:f7:9e:9f:
                    e5:7e:4f:1d:4b:97:76:3c:11:39:97:ae:5a:ea:98:
                    e9:f9:9a:40:f2:3a:23:a6:4d:f3:ea:c3:75:2f:93:
                    24:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:F2:AF:97:EF:FC:68:85:57:42:F5:4B:AF:6B:9F:ED:C2:96:BF:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1026f2d5-b1fe-47f2-9d2e-0bb75a7b18ed/9d6edb5b-d4b4-366d-84c6-b2885c462b4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1026f2d5-b1fe-47f2-9d2e-0bb75a7b18ed/1026f2d5-b1fe-47f2-9d2e-0bb75a7b18ed.crl

            X509v3 Authority Key Identifier:
                keyid:60:19:68:5C:12:1A:D8:CD:7C:C1:5E:BE:93:20:3C:47:4E:D0:EA:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1026f2d5-b1fe-47f2-9d2e-0bb75a7b18ed.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:8b00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:56:83:44:42:97:9a:7d:3b:44:63:d8:37:11:78:cf:e6:59:
         a0:77:76:15:73:3a:2c:6f:e5:fe:b5:a6:e7:b7:f1:71:fb:d1:
         0f:84:da:10:6a:71:e0:f8:29:51:d4:35:ef:c3:8d:13:74:ed:
         10:df:55:66:05:d0:2d:16:f9:18:1c:ee:fc:ed:e8:a8:29:f2:
         84:c0:ce:05:22:06:4c:8c:a4:3e:4d:41:30:e2:ec:8d:6f:a3:
         ee:b9:32:4f:4d:70:ec:82:a3:5c:78:50:1a:7e:ba:c7:aa:23:
         fe:4f:bd:32:ae:54:f4:9f:e3:3b:80:c8:44:aa:2b:83:19:33:
         0e:e3:19:c3:f5:96:ec:72:a9:62:3d:14:d3:7e:21:80:47:48:
         d7:43:1e:46:cd:3c:58:fb:a5:66:07:99:e4:63:1c:6e:09:34:
         b9:0f:e2:e2:04:d2:f0:fe:ae:05:24:9c:bd:ce:79:01:ec:2d:
         3c:65:80:ab:1d:c6:bb:1b:50:27:e9:f8:d8:2e:18:cb:e9:27:
         21:c1:35:28:24:c6:b3:28:e8:29:ff:d9:0e:ea:12:77:7a:f7:
         36:2d:7e:69:fa:3a:e7:6f:14:b2:87:94:d8:70:9a:2d:1f:54:
         86:29:48:db:ec:63:50:e9:c0:e7:87:f9:71:94:81:ee:9a:7f:
         64:83:22:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 1 12:52:17 2024 by rpki-client on console-fra.rpki-client.org