Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975/4fd259f9-bc80-3cbb-b57a-59d94583c666.roa
File:                     4fd259f9-bc80-3cbb-b57a-59d94583c666.roa (raw, json)
Hash identifier:          DYPT1RL8LONaZdcNAE2z4A1SHzbVlDVMgIu1Hn08OWg=
Subject key identifier:   A2:3A:15:31:12:2C:A9:8B:DD:2A:1B:93:60:55:BC:94:79:ED:98:59
Certificate issuer:       /CN=50f21827-6d64-4880-9e46-c3d13313c975
Certificate serial:       010D0C9F432858460BB2B9918FC6D75072174280
Authority key identifier: EB:1E:71:BA:48:8F:AE:A4:26:AE:9F:4F:AE:71:82:12:47:FB:2C:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975/4fd259f9-bc80-3cbb-b57a-59d94583c666.roa
Signing time:             Thu 30 May 2024 15:07:01 +0000
ROA not before:           Thu 30 May 2024 15:07:01 +0000
ROA not after:            Wed 28 Aug 2024 15:07:01 +0000
asID:                     215304
IP address blocks:        2602:f921:f00::/40 maxlen: 40

Validation:               Failed, certificate revoked on Sun 02 Jun 2024 14:54:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:0b:b2:b9:91:8f:c6:d7:50:72:17:42:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50f21827-6d64-4880-9e46-c3d13313c975
        Validity
            Not Before: May 30 15:07:01 2024 GMT
            Not After : Aug 28 15:07:01 2024 GMT
        Subject: CN=f52ae21b-1255-49a7-9370-f7a5d90a8b33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:fb:e0:ca:66:10:a3:04:34:c9:90:1f:6c:21:
                    21:1e:ba:ff:a1:d4:29:82:11:41:69:a3:b5:a3:3c:
                    c4:ec:d5:77:c3:04:ed:f8:f2:13:5d:56:db:27:99:
                    c3:b5:3f:40:70:5e:26:37:b7:83:d2:5b:0f:64:eb:
                    0d:a3:9c:3d:55:3d:b1:33:e4:9a:e2:d3:95:1d:c0:
                    66:5e:e4:75:ec:44:39:bf:76:e1:e0:b1:c8:86:85:
                    53:a3:cd:98:bd:d9:42:7c:77:d3:be:7a:0e:4d:4f:
                    1b:5b:98:8b:1e:8c:24:b2:aa:24:30:37:da:fd:e7:
                    4b:41:77:e7:a1:15:e7:09:3c:9a:a1:45:fc:7c:38:
                    6a:c2:09:1d:13:72:0f:e3:8a:e6:40:42:e0:37:7c:
                    15:66:70:d6:b1:76:d3:76:3f:1b:f3:05:4e:b1:fd:
                    e7:60:00:d7:9a:57:fe:ac:d7:bb:78:32:ac:bd:7d:
                    51:c8:6e:fe:71:92:27:2c:5b:cb:a3:f5:16:6e:6d:
                    5f:aa:64:5d:91:a6:f2:aa:c5:50:cf:80:48:87:95:
                    88:c8:c4:ab:75:c0:03:22:55:17:f0:da:55:70:74:
                    a2:4f:88:94:4d:7a:d5:0c:53:0d:a8:21:7a:cf:18:
                    14:9b:76:70:b3:43:e0:ef:a8:aa:15:77:d1:b0:63:
                    9f:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:3A:15:31:12:2C:A9:8B:DD:2A:1B:93:60:55:BC:94:79:ED:98:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975/4fd259f9-bc80-3cbb-b57a-59d94583c666.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975/50f21827-6d64-4880-9e46-c3d13313c975.crl

            X509v3 Authority Key Identifier:
                keyid:EB:1E:71:BA:48:8F:AE:A4:26:AE:9F:4F:AE:71:82:12:47:FB:2C:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/50f21827-6d64-4880-9e46-c3d13313c975.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f921:f00::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:ff:72:8d:08:e0:49:d8:aa:a0:5a:06:cf:a4:88:75:8d:85:
         a0:14:0a:a3:a9:de:25:96:92:52:af:34:2b:b5:03:13:06:14:
         2d:15:bb:27:be:1f:93:aa:cd:b3:d5:99:33:a9:b3:6a:a3:0f:
         c8:e6:ac:2c:38:c1:5f:21:d6:56:3b:68:bc:cf:78:74:41:2b:
         2c:be:2a:ae:49:5a:86:2f:6b:72:23:49:ec:d1:b2:d9:62:4c:
         4a:81:cc:11:4d:d2:d8:38:2e:11:0b:0d:67:c1:6a:fb:3b:d5:
         4b:af:6d:2c:23:ba:4e:3a:e3:a2:7f:4e:8c:e4:5f:ad:ab:e8:
         4d:d4:69:07:32:98:7b:f2:3c:1f:16:79:cc:44:cd:10:c7:b8:
         42:63:aa:2a:ac:f8:6a:ed:d3:41:58:18:c0:12:45:5f:27:ef:
         e2:c1:a4:03:29:a7:87:a6:71:e2:45:e2:75:54:cc:f9:d3:af:
         76:61:5f:c7:d6:4f:f1:59:c0:47:af:fc:9f:a4:07:67:be:2d:
         70:d6:47:e0:19:be:61:db:b7:b4:01:43:fc:55:71:f8:f8:66:
         5c:f1:35:41:1d:ab:08:83:3c:28:7e:ff:60:78:8e:72:20:eb:
         f0:3d:0d:2e:81:1e:c9:ce:79:bd:6c:d7:61:7b:04:8b:7f:ba:
         fe:59:76:37
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEYLsrmRj8bXUHIXQoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTBmMjE4MjctNmQ2NC00ODgwLTllNDYtYzNkMTMzMTNj
OTc1MB4XDTI0MDUzMDE1MDcwMVoXDTI0MDgyODE1MDcwMVowLzEtMCsGA1UEAxMk
ZjUyYWUyMWItMTI1NS00OWE3LTkzNzAtZjdhNWQ5MGE4YjMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzfvgymYQowQ0yZAfbCEhHrr/odQpghFBaaO1
ozzE7NV3wwTt+PITXVbbJ5nDtT9AcF4mN7eD0lsPZOsNo5w9VT2xM+Sa4tOVHcBm
XuR17EQ5v3bh4LHIhoVTo82YvdlCfHfTvnoOTU8bW5iLHowksqokMDfa/edLQXfn
oRXnCTyaoUX8fDhqwgkdE3IP44rmQELgN3wVZnDWsXbTdj8b8wVOsf3nYADXmlf+
rNe7eDKsvX1RyG7+cZInLFvLo/UWbm1fqmRdkabyqsVQz4BIh5WIyMSrdcADIlUX
8NpVcHSiT4iUTXrVDFMNqCF6zxgUm3Zws0Pg76iqFXfRsGOf1wIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFKI6FTESLKmL3Sobk2BVvJR57ZhZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS81MGYy
MTgyNy02ZDY0LTQ4ODAtOWU0Ni1jM2QxMzMxM2M5NzUvNGZkMjU5ZjktYmM4MC0z
Y2JiLWI1N2EtNTlkOTQ1ODNjNjY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNTBmMjE4MjctNmQ2NC00ODgwLTll
NDYtYzNkMTMzMTNjOTc1LzUwZjIxODI3LTZkNjQtNDg4MC05ZTQ2LWMzZDEzMzEz
Yzk3NS5jcmwwHwYDVR0jBBgwFoAU6x5xukiPrqQmrp9PrnGCEkf7LG4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS81MGYyMTgyNy02ZDY0LTQ4ODAtOWU0Ni1jM2Qx
MzMxM2M5NzUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL5IQ8w
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAN/9yjQjgSdiqoFoGz6SIdY2FoBQKo6neJZaSUq80K7UDEwYULRW7
J74fk6rNs9WZM6mzaqMPyOasLDjBXyHWVjtovM94dEErLL4qrklahi9rciNJ7NGy
2WJMSoHMEU3S2DguEQsNZ8Fq+zvVS69tLCO6Tjrjon9OjORfravoTdRpBzKYe/I8
HxZ5zETNEMe4QmOqKqz4au3TQVgYwBJFXyfv4sGkAymnh6Zx4kXidVTM+dOvdmFf
x9ZP8VnAR6/8n6QHZ74tcNZH4Bm+Ydu3tAFD/FVx+PhmXPE1QR2rCIM8KH7/YHiO
ciDr8D0NLoEeyc55vWzXYXsEi3+6/ll2Nw==
-----END CERTIFICATE-----