Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/68f08b61-9bde-39c1-8dbd-b094a38c79e0.roa
File:                     68f08b61-9bde-39c1-8dbd-b094a38c79e0.roa (raw, json)
Hash identifier:          d2dURjQJHVjwCBlpPQ2JAB0SDrlyiCzJIAty8tdtZwU=
Subject key identifier:   19:8F:F3:CB:DA:2E:D4:E9:56:3A:A6:0A:3B:E7:18:AA:BF:53:5E:28
Certificate issuer:       /CN=3d291b6a-1b30-4fc0-b1dd-582ab98347d6
Certificate serial:       010D0C9F432858478FABB41B74A9D4EA16C36640
Authority key identifier: BC:F7:6D:C8:7E:F4:7A:0B:B2:C7:B8:46:A4:17:5E:45:ED:F8:72:11
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/68f08b61-9bde-39c1-8dbd-b094a38c79e0.roa
Signing time:             Wed 16 Oct 2024 14:26:30 +0000
ROA not before:           Wed 16 Oct 2024 14:26:30 +0000
ROA not after:            Tue 14 Jan 2025 15:26:30 +0000
asID:                     10952
IP address blocks:        2610:28:3020::/48 maxlen: 48

Validation:               Failed, certificate revoked on Fri 08 Nov 2024 15:04:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8f:ab:b4:1b:74:a9:d4:ea:16:c3:66:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d291b6a-1b30-4fc0-b1dd-582ab98347d6
        Validity
            Not Before: Oct 16 14:26:30 2024 GMT
            Not After : Jan 14 15:26:30 2025 GMT
        Subject: CN=7760673f-e4a9-4f4f-8fac-77394c446673
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:3c:8b:3a:12:3a:ef:a1:91:5b:a8:50:68:08:
                    b1:9f:b4:e1:b8:7e:8a:9e:5d:51:e6:6e:e7:be:da:
                    a4:b7:8e:b6:3d:f0:8f:5f:0a:ec:cc:47:44:bd:c5:
                    b3:57:7c:2f:1c:45:45:55:fe:a4:86:e5:a7:1d:ca:
                    43:e4:ad:73:bf:19:de:02:5b:da:87:de:b2:05:da:
                    c6:25:9f:86:62:bc:86:38:dc:d0:72:ea:57:18:cb:
                    45:54:53:21:65:b8:62:4b:53:2c:af:ce:6d:9b:af:
                    39:f3:0e:0f:fc:06:93:f9:9c:52:4f:f2:68:91:53:
                    1c:09:67:dc:f0:54:62:aa:60:ae:07:a8:e0:c9:00:
                    07:ae:66:3b:ed:01:89:0f:ef:59:3d:90:e6:a7:a6:
                    58:2d:94:dc:1d:68:58:f7:ad:b4:ef:b7:14:01:67:
                    73:af:f8:c3:46:a6:9f:c7:a9:18:3f:5e:94:35:e3:
                    b7:99:61:50:3d:70:e1:8b:46:5f:c2:16:65:05:23:
                    30:e1:64:8b:15:c1:be:5a:48:da:26:f7:02:56:58:
                    22:6d:b8:f2:d6:d3:49:0d:1b:27:0d:58:67:83:b5:
                    f0:b9:0c:8b:db:b1:85:d1:4a:da:63:b4:fd:88:fb:
                    6e:91:9e:02:07:5f:ac:8d:24:a4:b3:5c:ea:db:a7:
                    ad:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:8F:F3:CB:DA:2E:D4:E9:56:3A:A6:0A:3B:E7:18:AA:BF:53:5E:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/68f08b61-9bde-39c1-8dbd-b094a38c79e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.crl

            X509v3 Authority Key Identifier:
                keyid:BC:F7:6D:C8:7E:F4:7A:0B:B2:C7:B8:46:A4:17:5E:45:ED:F8:72:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:28:3020::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:d5:81:9e:cb:1f:43:48:94:9c:a6:ad:c7:db:8d:21:1b:96:
         98:78:01:2d:4a:52:c4:9f:56:27:d5:05:c9:c0:57:13:dd:5c:
         1c:2f:21:c8:b9:ee:66:ee:7f:ee:50:3e:fc:4f:19:c6:d4:ff:
         18:61:ae:4c:e8:93:95:e8:65:06:fa:da:1f:cb:99:09:ce:58:
         d0:b2:c2:f1:22:76:1c:61:3d:fe:62:2e:fa:dd:2c:d2:7b:b9:
         f1:6f:dc:a8:28:23:b0:0b:2f:2c:aa:04:bb:ae:3f:7f:c9:34:
         a3:4e:d8:93:37:02:5e:2a:1b:d7:be:9d:ce:ab:d8:50:8d:07:
         e4:0a:f6:72:d2:bc:f1:d1:38:6f:da:e5:08:a5:c5:cd:da:88:
         e7:b8:b2:5b:95:a2:35:1f:85:23:e3:31:7a:98:9a:f7:1d:08:
         e0:d1:da:d3:ef:04:71:e3:2f:86:93:eb:15:a5:0e:73:08:c5:
         16:67:e8:8d:55:4b:de:bc:86:a8:f3:1c:66:7c:c7:c1:f1:47:
         f1:ec:d6:06:f4:11:5e:5a:a7:d5:1d:bc:56:70:4a:24:3d:5c:
         3b:9d:89:e1:cf:8f:21:86:66:46:5d:20:4d:50:cb:ab:ac:92:
         d9:55:38:9b:b8:9d:0b:97:77:3c:66:e8:34:2b:0f:90:6c:28:
         b1:bd:e1:e8
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEePq7QbdKnU6hbDZkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2QyOTFiNmEtMWIzMC00ZmMwLWIxZGQtNTgyYWI5ODM0
N2Q2MB4XDTI0MTAxNjE0MjYzMFoXDTI1MDExNDE1MjYzMFowLzEtMCsGA1UEAxMk
Nzc2MDY3M2YtZTRhOS00ZjRmLThmYWMtNzczOTRjNDQ2NjczMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTyLOhI676GRW6hQaAixn7ThuH6Knl1R5m7n
vtqkt462PfCPXwrszEdEvcWzV3wvHEVFVf6khuWnHcpD5K1zvxneAlvah96yBdrG
JZ+GYryGONzQcupXGMtFVFMhZbhiS1Msr85tm6858w4P/AaT+ZxST/JokVMcCWfc
8FRiqmCuB6jgyQAHrmY77QGJD+9ZPZDmp6ZYLZTcHWhY962077cUAWdzr/jDRqaf
x6kYP16UNeO3mWFQPXDhi0ZfwhZlBSMw4WSLFcG+WkjaJvcCVlgibbjy1tNJDRsn
DVhng7XwuQyL27GF0UraY7T9iPtukZ4CB1+sjSSks1zq26etrQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFBmP88vaLtTpVjqmCjvnGKq/U14oMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zZDI5
MWI2YS0xYjMwLTRmYzAtYjFkZC01ODJhYjk4MzQ3ZDYvNjhmMDhiNjEtOWJkZS0z
OWMxLThkYmQtYjA5NGEzOGM3OWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvM2QyOTFiNmEtMWIzMC00ZmMwLWIx
ZGQtNTgyYWI5ODM0N2Q2LzNkMjkxYjZhLTFiMzAtNGZjMC1iMWRkLTU4MmFiOTgz
NDdkNi5jcmwwHwYDVR0jBBgwFoAUvPdtyH70eguyx7hGpBdeRe34chEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zZDI5MWI2YS0xYjMwLTRmYzAtYjFkZC01ODJh
Yjk4MzQ3ZDYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJhAAKDAg
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACPVgZ7LH0NIlJymrcfbjSEblph4AS1KUsSfVifVBcnAVxPdXBwv
Ici57mbuf+5QPvxPGcbU/xhhrkzok5XoZQb62h/LmQnOWNCywvEidhxhPf5iLvrd
LNJ7ufFv3KgoI7ALLyyqBLuuP3/JNKNO2JM3Al4qG9e+nc6r2FCNB+QK9nLSvPHR
OG/a5Qilxc3aiOe4sluVojUfhSPjMXqYmvcdCODR2tPvBHHjL4aT6xWlDnMIxRZn
6I1VS968hqjzHGZ8x8HxR/Hs1gb0EV5ap9UdvFZwSiQ9XDudieHPjyGGZkZdIE1Q
y6usktlVOJu4nQuXdzxm6DQrD5BsKLG94eg=
-----END CERTIFICATE-----
Generated at Fri Nov 8 19:11:57 2024 by rpki-client on console-ams.rpki-client.org