Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/62eabf58-ed23-390f-b32f-6942a5f4ded1.roa
File:                     62eabf58-ed23-390f-b32f-6942a5f4ded1.roa (raw, json)
Hash identifier:          jgae9UnZg6G3XM3pAlDn7xOSuWA1u5jlXqtVGmugHEY=
Subject key identifier:   9C:64:54:FC:5B:3A:FE:23:41:19:55:96:1F:F8:83:6B:E7:D9:A3:DC
Certificate issuer:       /CN=3d291b6a-1b30-4fc0-b1dd-582ab98347d6
Certificate serial:       010D0C9F432858478FABB3F135FF4D83EB022180
Authority key identifier: BC:F7:6D:C8:7E:F4:7A:0B:B2:C7:B8:46:A4:17:5E:45:ED:F8:72:11
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/62eabf58-ed23-390f-b32f-6942a5f4ded1.roa
Signing time:             Wed 16 Oct 2024 14:26:30 +0000
ROA not before:           Wed 16 Oct 2024 14:26:30 +0000
ROA not after:            Tue 14 Jan 2025 15:26:30 +0000
asID:                     81
IP address blocks:        2610:28::/32 maxlen: 32

Validation:               Failed, certificate revoked on Fri 08 Nov 2024 15:04:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8f:ab:b3:f1:35:ff:4d:83:eb:02:21:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d291b6a-1b30-4fc0-b1dd-582ab98347d6
        Validity
            Not Before: Oct 16 14:26:30 2024 GMT
            Not After : Jan 14 15:26:30 2025 GMT
        Subject: CN=0e225f39-62e2-40c7-8c22-5b15e8811f0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:6f:92:d7:05:f1:60:16:2f:75:25:49:fa:dd:
                    10:06:9b:f5:df:c7:65:52:ce:3e:9f:69:ad:7a:d9:
                    55:2e:68:bf:1b:b8:37:95:15:d7:61:6e:96:5c:bf:
                    01:57:a8:7a:58:f5:e5:ca:f1:7a:a8:4a:52:5d:25:
                    98:29:4c:32:5c:d3:4b:0b:c3:4e:5b:c8:84:9e:28:
                    d8:4c:4a:e3:6e:f8:2e:18:6a:cf:1c:66:ea:03:96:
                    3f:a1:5b:be:49:fe:cb:99:e2:ba:f1:6c:3e:ce:55:
                    a7:77:fc:18:19:63:41:47:07:89:1e:8a:d6:e2:19:
                    55:2f:cc:61:93:d5:4c:9b:ab:e5:82:7c:74:42:09:
                    7d:f4:2d:15:0b:ca:61:e8:e8:0f:d0:93:75:61:13:
                    66:24:81:ca:1e:60:87:9a:41:82:04:7e:ab:32:32:
                    2d:fe:62:f9:fd:df:16:b7:18:84:04:4c:15:a0:c2:
                    5d:49:13:3c:27:9c:98:f8:2e:06:28:4c:e9:53:9a:
                    20:7e:aa:d4:ee:1c:eb:10:32:b0:bf:9c:54:df:3b:
                    29:95:59:d4:e5:64:11:aa:8a:9b:6c:81:90:00:24:
                    81:7b:ba:d0:a7:49:9c:86:a2:2a:33:0b:0e:ba:09:
                    85:e4:e7:db:3f:04:8c:f8:40:ef:ed:b0:9f:6e:3b:
                    c1:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:64:54:FC:5B:3A:FE:23:41:19:55:96:1F:F8:83:6B:E7:D9:A3:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/62eabf58-ed23-390f-b32f-6942a5f4ded1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.crl

            X509v3 Authority Key Identifier:
                keyid:BC:F7:6D:C8:7E:F4:7A:0B:B2:C7:B8:46:A4:17:5E:45:ED:F8:72:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:28::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:8c:f2:53:7c:53:6b:48:b6:d6:7c:79:02:20:fe:c6:e4:ff:
         81:44:18:ff:b7:8a:68:02:8f:91:0b:f1:d2:ed:a9:84:d3:8e:
         5b:54:ae:f9:f9:38:d9:b8:4b:ee:1f:67:60:8c:bf:a0:da:d8:
         12:90:07:c4:a0:16:9d:32:4f:a3:55:86:74:12:07:f9:9a:b8:
         e4:94:44:09:3c:1d:48:69:53:38:c9:e3:9e:fe:30:d2:ef:10:
         88:3c:25:0b:a3:28:6e:14:8a:dc:c5:67:29:cd:d7:4e:7d:57:
         14:79:cd:e7:77:c9:0f:59:e6:13:bd:37:e6:12:26:a5:36:4b:
         83:f5:31:20:b3:59:56:ea:2a:3a:c4:e8:bb:5c:a2:40:f6:06:
         89:dd:73:56:97:b2:aa:99:2c:9a:25:0b:38:bc:29:4f:a4:15:
         cc:a9:d0:6e:83:bc:be:9d:ce:fc:ff:f2:74:a6:65:fa:d6:b5:
         4c:64:ec:dc:1a:2b:0e:35:15:5a:56:9a:e6:56:44:c5:06:2d:
         de:e3:c9:dc:b4:e1:7d:d4:84:58:e8:59:df:c2:07:87:91:72:
         65:b6:e2:9c:86:7d:44:5f:8d:b5:0a:8a:b5:ca:e5:92:a9:6d:
         dd:6e:be:c3:9c:43:50:d3:c0:2f:49:80:f5:4f:c2:79:67:6a:
         b1:be:3f:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----