Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/89a397c2-4860-4547-8d71-faf2481535cf/186c92b4-8809-34b7-92eb-516572eb80b4.roa
File:                     186c92b4-8809-34b7-92eb-516572eb80b4.roa (raw, json)
Hash identifier:          P/7QMvWZDmtjA7DHXfnPKREwz7ZD7zfYT6WmfmD5YnA=
Subject key identifier:   38:DA:FB:D1:65:D3:1F:1C:7C:C8:58:B7:DA:E3:5B:36:67:0E:20:1B
Certificate issuer:       /CN=89a397c2-4860-4547-8d71-faf2481535cf
Certificate serial:       010D0C9F432858463369D09538E9F82BA12F1200
Authority key identifier: F0:75:EE:42:C9:D1:3F:04:0E:92:8B:C7:FC:5D:96:F7:0B:EB:BE:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/89a397c2-4860-4547-8d71-faf2481535cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/89a397c2-4860-4547-8d71-faf2481535cf/186c92b4-8809-34b7-92eb-516572eb80b4.roa
Signing time:             Thu 13 Jun 2024 20:32:26 +0000
ROA not before:           Thu 13 Jun 2024 20:32:26 +0000
ROA not after:            Wed 11 Sep 2024 20:32:26 +0000
asID:                     401164
IP address blocks:        2602:f8a4::/40 maxlen: 40

Validation:               Failed, certificate revoked on Wed 28 Aug 2024 03:03:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:33:69:d0:95:38:e9:f8:2b:a1:2f:12:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89a397c2-4860-4547-8d71-faf2481535cf
        Validity
            Not Before: Jun 13 20:32:26 2024 GMT
            Not After : Sep 11 20:32:26 2024 GMT
        Subject: CN=b77865cb-21e3-40fb-8f3a-d3ac07a8f074
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:25:d9:de:2a:c2:61:e7:34:a6:83:f5:00:14:
                    34:e5:70:35:40:8e:dd:79:2c:cd:9a:74:0b:07:03:
                    16:46:a7:4b:5b:7e:6f:e1:97:be:6c:36:c3:61:9e:
                    49:29:8e:a8:d4:64:9e:56:8c:d9:c4:85:81:9e:07:
                    8a:0d:8a:36:c0:e5:3b:80:c9:3e:c8:d7:55:e9:52:
                    42:8e:f7:f4:61:c0:9a:08:c0:85:17:69:93:98:c0:
                    16:15:66:ab:94:f8:1d:a6:bb:da:0c:ab:0b:09:6d:
                    91:45:b6:f1:a9:4b:09:e3:f0:ed:99:c9:3d:a4:7f:
                    47:bd:8a:12:00:a1:c6:ff:3d:f0:3e:22:c2:6e:c7:
                    e0:93:45:0a:a5:30:0d:29:5e:11:6f:a3:58:19:01:
                    31:06:73:0f:6e:c4:32:07:b5:83:b7:44:df:e5:dc:
                    ed:5d:60:72:a5:24:50:0f:3d:c1:0b:a0:18:c7:ff:
                    40:cb:e8:42:24:07:7d:25:67:c5:3d:15:22:42:48:
                    9f:bd:5f:04:6b:f9:1e:e1:49:a8:9d:47:a2:c9:fb:
                    1c:1d:30:fd:e1:e8:5b:97:b2:a8:19:76:0d:94:cf:
                    08:d3:16:19:7e:28:18:62:a1:d9:45:7b:5a:49:19:
                    82:aa:63:dc:14:c4:84:f5:00:50:de:06:92:be:6a:
                    ae:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:DA:FB:D1:65:D3:1F:1C:7C:C8:58:B7:DA:E3:5B:36:67:0E:20:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/89a397c2-4860-4547-8d71-faf2481535cf/186c92b4-8809-34b7-92eb-516572eb80b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/89a397c2-4860-4547-8d71-faf2481535cf/89a397c2-4860-4547-8d71-faf2481535cf.crl

            X509v3 Authority Key Identifier:
                keyid:F0:75:EE:42:C9:D1:3F:04:0E:92:8B:C7:FC:5D:96:F7:0B:EB:BE:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/89a397c2-4860-4547-8d71-faf2481535cf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f8a4::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:62:3b:ff:1a:00:08:10:b9:9c:42:d6:a6:9c:fd:82:af:5f:
         ea:ae:10:8f:d5:73:19:47:7c:b6:2b:de:df:2f:24:2e:24:4a:
         a9:36:34:6b:57:32:fe:ac:a4:9a:74:db:47:12:65:a6:6f:2b:
         fb:7a:67:96:33:30:f4:27:7d:1c:65:e4:30:85:46:ee:7c:1a:
         55:30:0c:5c:be:49:5c:36:bd:dd:62:12:09:b9:3e:01:09:e4:
         10:f9:94:73:0f:51:53:83:0b:04:6f:ec:4d:14:1a:2b:aa:82:
         61:92:31:0b:48:0e:75:d8:f3:8c:4f:c0:a2:45:c9:fe:7a:64:
         fa:b0:82:48:74:00:a0:1a:f1:46:75:89:d2:58:f4:87:b8:b8:
         ca:20:2d:5e:d9:e6:d9:17:4d:5b:d4:ad:02:14:90:bb:e2:c8:
         ff:e3:4a:c3:77:54:69:3e:ea:9a:d4:d5:ef:bb:2d:3a:75:22:
         07:ed:4f:25:a4:ee:54:d0:c3:a0:b4:4d:c6:ae:ae:45:52:69:
         30:b8:2c:4b:66:71:36:24:ca:d7:78:d4:77:e6:b8:ff:83:03:
         5e:f8:99:a9:de:6c:09:7b:bd:2c:79:13:63:bf:ff:55:d2:c2:
         74:59:ab:03:77:f2:89:0a:05:8d:66:e4:41:9d:54:e8:ba:02:
         cd:3d:78:e0
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEYzadCVOOn4K6EvEgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODlhMzk3YzItNDg2MC00NTQ3LThkNzEtZmFmMjQ4MTUz
NWNmMB4XDTI0MDYxMzIwMzIyNloXDTI0MDkxMTIwMzIyNlowLzEtMCsGA1UEAxMk
Yjc3ODY1Y2ItMjFlMy00MGZiLThmM2EtZDNhYzA3YThmMDc0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSXZ3irCYec0poP1ABQ05XA1QI7deSzNmnQL
BwMWRqdLW35v4Ze+bDbDYZ5JKY6o1GSeVozZxIWBngeKDYo2wOU7gMk+yNdV6VJC
jvf0YcCaCMCFF2mTmMAWFWarlPgdprvaDKsLCW2RRbbxqUsJ4/Dtmck9pH9HvYoS
AKHG/z3wPiLCbsfgk0UKpTANKV4Rb6NYGQExBnMPbsQyB7WDt0Tf5dztXWBypSRQ
Dz3BC6AYx/9Ay+hCJAd9JWfFPRUiQkifvV8Ea/ke4UmonUeiyfscHTD94ehbl7Ko
GXYNlM8I0xYZfigYYqHZRXtaSRmCqmPcFMSE9QBQ3gaSvmqujwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFDja+9Fl0x8cfMhYt9rjWzZnDiAbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84OWEz
OTdjMi00ODYwLTQ1NDctOGQ3MS1mYWYyNDgxNTM1Y2YvMTg2YzkyYjQtODgwOS0z
NGI3LTkyZWItNTE2NTcyZWI4MGI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODlhMzk3YzItNDg2MC00NTQ3LThk
NzEtZmFmMjQ4MTUzNWNmLzg5YTM5N2MyLTQ4NjAtNDU0Ny04ZDcxLWZhZjI0ODE1
MzVjZi5jcmwwHwYDVR0jBBgwFoAU8HXuQsnRPwQOkovH/F2W9wvrvq8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS84OWEzOTdjMi00ODYwLTQ1NDctOGQ3MS1mYWYy
NDgxNTM1Y2YuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL4pAAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAfGI7/xoACBC5nELWppz9gq9f6q4Qj9VzGUd8tive3y8kLiRKqTY0
a1cy/qykmnTbRxJlpm8r+3pnljMw9Cd9HGXkMIVG7nwaVTAMXL5JXDa93WISCbk+
AQnkEPmUcw9RU4MLBG/sTRQaK6qCYZIxC0gOddjzjE/AokXJ/npk+rCCSHQAoBrx
RnWJ0lj0h7i4yiAtXtnm2RdNW9StAhSQu+LI/+NKw3dUaT7qmtTV77stOnUiB+1P
JaTuVNDDoLRNxq6uRVJpMLgsS2ZxNiTK13jUd+a4/4MDXviZqd5sCXu9LHkTY7//
VdLCdFmrA3fyiQoFjWbkQZ1U6LoCzT144A==
-----END CERTIFICATE-----