Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/2e7fc860-9d89-39b8-b083-978e0b081ad0.roa
File:                     2e7fc860-9d89-39b8-b083-978e0b081ad0.roa (raw, json)
Hash identifier:          DSI8zFmDe3gYFPiAyEVeBY4J7ZoImOUTjB15cLN62lI=
Subject key identifier:   34:69:27:AC:D9:16:CD:DF:F4:1A:58:16:0F:93:52:B8:1D:30:7C:77
Certificate issuer:       /CN=346c6ea1-4f1c-4579-b4b1-78891a34647a
Certificate serial:       010D0C9F43285846F255E24797DE4ED4F5D16680
Authority key identifier: 72:8D:72:D7:99:F2:15:41:22:BE:EB:F1:09:AC:CF:96:BF:BF:86:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/2e7fc860-9d89-39b8-b083-978e0b081ad0.roa
Signing time:             Wed 21 Aug 2024 05:51:41 +0000
ROA not before:           Wed 21 Aug 2024 05:51:41 +0000
ROA not after:            Tue 19 Nov 2024 06:51:41 +0000
asID:                     19740
IP address blocks:        2607:fc30:100::/40 maxlen: 48

Validation:               Failed, certificate revoked on Mon 21 Oct 2024 17:03:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:f2:55:e2:47:97:de:4e:d4:f5:d1:66:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=346c6ea1-4f1c-4579-b4b1-78891a34647a
        Validity
            Not Before: Aug 21 05:51:41 2024 GMT
            Not After : Nov 19 06:51:41 2024 GMT
        Subject: CN=7b44f83c-88d0-48ee-bb02-3d5fc8f54e58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6b:ae:83:36:db:e7:8f:ab:dc:63:ad:26:77:
                    b1:47:46:ab:57:de:66:1b:7d:c3:78:6d:9b:f2:1d:
                    12:df:d2:88:34:e7:68:5d:4e:3d:0b:93:12:65:b6:
                    60:60:8f:31:e7:bf:cb:6e:9c:90:79:6f:3d:c3:c1:
                    24:c2:f1:9c:90:41:7f:dd:72:5c:07:15:da:8c:0e:
                    e0:89:c5:17:50:4d:5c:5c:6d:d4:44:de:46:01:9c:
                    41:40:30:64:76:c8:10:bf:c3:b5:e9:29:08:48:48:
                    8a:a0:b2:33:40:37:ce:09:ae:21:9d:33:e2:2d:a2:
                    78:3e:f9:4d:b0:e6:4c:b0:ba:f1:f3:66:a9:8d:0c:
                    e3:3c:9f:89:6a:26:98:1f:03:ea:fb:6f:12:9e:5c:
                    e4:34:05:0c:9d:72:29:92:e5:ed:d4:6b:e8:58:4a:
                    01:ab:47:72:3d:eb:a0:95:ad:7d:ab:94:ce:1c:8b:
                    f5:23:9f:33:78:0c:b7:8c:42:7e:a6:5f:06:a0:10:
                    75:78:b0:e4:75:fe:70:32:d3:50:13:f6:0b:8f:e3:
                    3c:10:7f:62:58:b2:34:56:79:6f:99:d3:e6:b6:af:
                    dc:48:5f:df:c2:8a:66:23:c1:8e:61:23:c6:6b:34:
                    cc:1e:21:3f:bb:ef:84:eb:17:e6:e6:8d:a8:ea:77:
                    3b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:69:27:AC:D9:16:CD:DF:F4:1A:58:16:0F:93:52:B8:1D:30:7C:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/2e7fc860-9d89-39b8-b083-978e0b081ad0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a/346c6ea1-4f1c-4579-b4b1-78891a34647a.crl

            X509v3 Authority Key Identifier:
                keyid:72:8D:72:D7:99:F2:15:41:22:BE:EB:F1:09:AC:CF:96:BF:BF:86:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/346c6ea1-4f1c-4579-b4b1-78891a34647a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fc30:100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:59:28:df:f1:56:2a:3f:0a:e3:86:9a:4b:48:27:52:5c:21:
         57:a0:c8:e9:3d:fa:52:89:b0:15:d5:05:44:1a:9c:f0:89:a7:
         fc:47:8e:a9:81:98:30:c4:2b:d5:8f:80:41:f1:cd:cf:ea:b0:
         da:6e:34:5d:f6:e0:91:50:d5:60:71:af:18:08:9a:76:ef:d7:
         24:34:1a:f7:c7:94:5e:72:1d:84:95:36:ad:a7:77:0d:b1:9f:
         b3:dd:43:2c:e1:85:35:68:61:21:87:b9:73:73:cc:af:37:f6:
         9c:36:8d:b3:70:05:40:0e:87:77:7b:e1:7a:b7:82:0b:48:d0:
         41:30:16:3d:06:5f:48:b9:40:d8:8c:fe:33:4b:c9:2d:3f:01:
         29:4a:d6:1f:ff:82:fa:b2:95:35:ab:2c:b6:e2:52:14:10:12:
         ae:c0:76:58:d8:da:b1:0e:80:d2:3a:12:f4:ae:fb:6a:e3:ed:
         bd:92:7a:b1:81:78:f0:82:63:30:e8:dc:71:2e:ed:53:f9:04:
         88:35:b3:30:68:95:0d:2c:3b:92:9b:e9:03:e4:f2:fa:62:75:
         91:5b:35:af:2d:f9:de:3e:77:75:c5:84:6c:09:89:f4:50:a1:
         37:1c:2a:06:5f:b3:67:25:86:1c:af:a1:cd:d5:ca:36:80:fe:
         bb:d5:ff:78
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEbyVeJHl95O1PXRZoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzQ2YzZlYTEtNGYxYy00NTc5LWI0YjEtNzg4OTFhMzQ2
NDdhMB4XDTI0MDgyMTA1NTE0MVoXDTI0MTExOTA2NTE0MVowLzEtMCsGA1UEAxMk
N2I0NGY4M2MtODhkMC00OGVlLWJiMDItM2Q1ZmM4ZjU0ZTU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGuugzbb54+r3GOtJnexR0arV95mG33DeG2b
8h0S39KINOdoXU49C5MSZbZgYI8x57/LbpyQeW89w8EkwvGckEF/3XJcBxXajA7g
icUXUE1cXG3URN5GAZxBQDBkdsgQv8O16SkISEiKoLIzQDfOCa4hnTPiLaJ4PvlN
sOZMsLrx82apjQzjPJ+JaiaYHwPq+28SnlzkNAUMnXIpkuXt1GvoWEoBq0dyPeug
la19q5TOHIv1I58zeAy3jEJ+pl8GoBB1eLDkdf5wMtNQE/YLj+M8EH9iWLI0Vnlv
mdPmtq/cSF/fwopmI8GOYSPGazTMHiE/u++E6xfm5o2o6nc7rwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFDRpJ6zZFs3f9BpYFg+TUrgdMHx3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zNDZj
NmVhMS00ZjFjLTQ1NzktYjRiMS03ODg5MWEzNDY0N2EvMmU3ZmM4NjAtOWQ4OS0z
OWI4LWIwODMtOTc4ZTBiMDgxYWQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMzQ2YzZlYTEtNGYxYy00NTc5LWI0
YjEtNzg4OTFhMzQ2NDdhLzM0NmM2ZWExLTRmMWMtNDU3OS1iNGIxLTc4ODkxYTM0
NjQ3YS5jcmwwHwYDVR0jBBgwFoAUco1y15nyFUEivuvxCazPlr+/hnYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zNDZjNmVhMS00ZjFjLTQ1NzktYjRiMS03ODg5
MWEzNDY0N2EuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgf8MAEw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAK1ko3/FWKj8K44aaS0gnUlwhV6DI6T36UomwFdUFRBqc8Imn/EeO
qYGYMMQr1Y+AQfHNz+qw2m40XfbgkVDVYHGvGAiadu/XJDQa98eUXnIdhJU2rad3
DbGfs91DLOGFNWhhIYe5c3PMrzf2nDaNs3AFQA6Hd3vhereCC0jQQTAWPQZfSLlA
2Iz+M0vJLT8BKUrWH/+C+rKVNasstuJSFBASrsB2WNjasQ6A0joS9K77auPtvZJ6
sYF48IJjMOjccS7tU/kEiDWzMGiVDSw7kpvpA+Ty+mJ1kVs1ry353j53dcWEbAmJ
9FChNxwqBl+zZyWGHK+hzdXKNoD+u9X/eA==
-----END CERTIFICATE-----