Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded/0067abb4-64a1-372b-842b-7f7c065485fe.roa
File:                     0067abb4-64a1-372b-842b-7f7c065485fe.roa (raw, json)
Hash identifier:          qFfMDRwNtPWS/7IqBqJiZX58kr+wpmvYvDrEISyuOJQ=
Subject key identifier:   51:7B:B6:C8:89:ED:E3:2A:FA:A7:3C:28:7B:7F:B1:11:92:0F:7A:57
Certificate issuer:       /CN=6bd11075-cdd4-4cc7-947c-a94c5624aded
Certificate serial:       010D0C9F43285846B3065C3B6679DD0F9E79A640
Authority key identifier: 3F:90:03:7F:08:8C:2E:C4:7C:A9:CD:3C:A3:F1:52:1A:D0:AF:FC:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded/0067abb4-64a1-372b-842b-7f7c065485fe.roa
Signing time:             Mon 29 Jul 2024 13:35:31 +0000
ROA not before:           Mon 29 Jul 2024 13:35:31 +0000
ROA not after:            Sun 27 Oct 2024 13:35:31 +0000
asID:                     15171
IP address blocks:        2605:a940::/32 maxlen: 32

Validation:               Failed, certificate revoked on Thu 08 Aug 2024 20:59:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:b3:06:5c:3b:66:79:dd:0f:9e:79:a6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bd11075-cdd4-4cc7-947c-a94c5624aded
        Validity
            Not Before: Jul 29 13:35:31 2024 GMT
            Not After : Oct 27 13:35:31 2024 GMT
        Subject: CN=1db62b3b-9b23-401a-a31b-cc76c3b9329d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:be:24:94:db:00:c8:2a:7a:0b:1a:f5:2e:9f:
                    a7:51:29:56:23:cb:14:b3:f8:8d:fe:3a:5c:4c:af:
                    38:a6:8b:b8:27:88:fc:ae:2c:b3:05:4e:bb:75:bb:
                    4f:49:63:60:29:a1:47:2f:75:4a:74:f5:74:11:7b:
                    a7:dc:6b:9c:e4:e2:6c:a5:11:c1:0e:d6:f2:a7:b9:
                    65:ef:8e:97:bb:13:a1:69:b8:b2:3e:fd:3e:72:3b:
                    b9:b6:b1:3c:bb:26:f3:f7:03:52:ef:1f:39:ee:05:
                    6d:fb:75:4c:31:6b:f5:4c:28:ad:4f:f2:c5:c4:fb:
                    7d:f3:ae:18:55:eb:e5:e1:e6:92:87:c4:b7:df:67:
                    5a:23:86:b0:c0:f6:69:4f:cf:10:93:99:32:9c:9e:
                    fd:53:f0:d0:2e:52:93:81:66:c5:b0:b7:34:01:c9:
                    c4:03:4b:f0:52:0b:45:9e:32:5e:34:66:f6:87:be:
                    52:6a:7e:ea:7d:d6:4d:7e:aa:30:ff:48:0b:14:16:
                    fd:57:72:11:1d:c2:49:78:61:c0:45:f9:e4:cd:b7:
                    2d:b9:25:bb:b1:e4:b4:ba:e0:3d:1a:1c:11:7b:94:
                    8e:f3:31:e3:38:c3:34:9b:69:03:a5:7a:d6:0d:3a:
                    1a:38:b8:f5:17:12:24:70:34:8b:a0:83:66:26:e6:
                    f9:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:7B:B6:C8:89:ED:E3:2A:FA:A7:3C:28:7B:7F:B1:11:92:0F:7A:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded/0067abb4-64a1-372b-842b-7f7c065485fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded/6bd11075-cdd4-4cc7-947c-a94c5624aded.crl

            X509v3 Authority Key Identifier:
                keyid:3F:90:03:7F:08:8C:2E:C4:7C:A9:CD:3C:A3:F1:52:1A:D0:AF:FC:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6bd11075-cdd4-4cc7-947c-a94c5624aded.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a940::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:50:23:3f:42:37:c8:2e:25:d1:0c:84:c4:0b:46:a7:35:23:
         08:22:31:dc:6e:27:41:bd:84:94:5a:82:1b:5f:fc:63:38:bd:
         0d:7e:cd:fc:46:e5:11:2f:53:f5:fb:d4:89:96:dc:a6:ba:55:
         98:e2:2d:ad:72:60:24:ac:9a:b1:b9:2b:17:01:29:25:00:77:
         63:97:26:bc:d1:af:94:a6:c8:a1:55:78:f6:a3:16:af:15:73:
         d0:00:d0:aa:35:92:a8:f9:41:5b:b8:5b:9a:9a:6e:ea:c1:75:
         97:96:4e:a8:4d:96:29:46:af:8d:e4:9c:be:82:9b:b4:07:70:
         d9:00:a2:93:03:bf:63:ec:0a:88:c5:66:49:49:a1:5f:b4:1b:
         38:1e:c8:88:a9:94:b3:d5:73:43:fc:6a:0a:2c:41:8f:c7:ff:
         68:af:5c:f6:f9:84:6b:64:fd:03:2b:02:03:fb:c4:9a:03:29:
         55:6d:77:78:0a:7a:2b:6f:92:4b:96:31:c2:55:a0:3d:39:c9:
         a0:dc:ca:92:d9:d9:80:31:c5:5c:ff:2f:9b:4d:84:14:64:e7:
         ac:75:cc:63:44:4d:04:b8:dc:27:05:f6:54:78:10:2a:0e:f8:
         09:82:0f:37:72:bf:90:3d:87:e1:c3:a4:5d:74:5d:a7:1f:48:
         bc:d2:6b:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----