Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1f976fd-7fa0-4323-97fa-35bb869a9231/fb3609ce-04ee-320a-9a92-e0643b93d95c.roa
File:                     fb3609ce-04ee-320a-9a92-e0643b93d95c.roa (raw, json)
Hash identifier:          YS3J09jfcXEa2074/Em9Bp3Mflgxc71z9bITg5T3eS4=
Subject key identifier:   65:29:25:47:6D:E4:AB:35:2F:BA:31:13:EC:5E:F4:4C:A4:C3:84:5D
Certificate issuer:       /CN=b1f976fd-7fa0-4323-97fa-35bb869a9231
Certificate serial:       010D0C9F43285846BC3DB6D4342FE6DF243C2FC0
Authority key identifier: AE:9A:24:71:98:85:E6:0B:5D:3F:EE:2F:FD:CA:A1:6A:94:E0:27:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1f976fd-7fa0-4323-97fa-35bb869a9231.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1f976fd-7fa0-4323-97fa-35bb869a9231/fb3609ce-04ee-320a-9a92-e0643b93d95c.roa
Signing time:             Thu 01 Aug 2024 20:49:20 +0000
ROA not before:           Thu 01 Aug 2024 20:49:20 +0000
ROA not after:            Wed 30 Oct 2024 20:49:20 +0000
asID:                     2055
IP address blocks:        2620:105:b000::/40 maxlen: 48

Validation:               Failed, certificate revoked on Thu 01 Aug 2024 22:55:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:bc:3d:b6:d4:34:2f:e6:df:24:3c:2f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1f976fd-7fa0-4323-97fa-35bb869a9231
        Validity
            Not Before: Aug  1 20:49:20 2024 GMT
            Not After : Oct 30 20:49:20 2024 GMT
        Subject: CN=e74510af-9fc2-4783-9c1c-e44a5507bb9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f9:30:4a:5a:cd:3a:29:82:57:76:6c:86:0e:
                    f7:0d:85:1b:43:24:6a:20:35:50:ac:b7:09:d1:90:
                    75:75:ee:f2:da:eb:d0:8f:3c:ae:2b:a7:a4:1d:cf:
                    9c:da:fa:25:c8:0a:5e:f3:ee:2a:b1:be:05:29:49:
                    9f:ad:46:26:fe:ba:1a:32:ff:f9:fe:94:49:41:54:
                    ae:ee:6f:ec:0e:93:cc:fa:0a:69:92:30:67:09:e1:
                    48:2c:89:9d:81:02:9e:72:78:82:c2:3d:8a:cd:ef:
                    b2:d2:ff:92:b4:aa:7f:e4:86:47:ef:09:a1:6b:60:
                    fc:77:75:e2:4c:c1:07:8d:37:6e:62:12:6d:f2:07:
                    cb:a2:41:56:ad:ae:f4:90:86:8a:d7:43:b1:9a:d5:
                    bb:41:7b:8a:25:0c:19:d9:e6:ca:af:03:7b:59:f3:
                    2a:28:ad:dd:14:15:36:92:f4:9f:ed:52:91:a1:b0:
                    3a:1a:6a:f0:2c:72:1e:f2:e6:f8:57:4c:4c:f7:8c:
                    96:17:67:6b:e3:4f:a5:81:67:cb:cf:65:52:20:29:
                    32:db:3f:27:25:45:31:27:1b:47:59:58:82:e8:8e:
                    1f:9f:75:30:5a:f0:28:df:01:01:9f:30:c1:5c:0e:
                    9e:c1:55:d2:41:c5:0c:5f:f4:ea:59:d1:02:24:a7:
                    54:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:29:25:47:6D:E4:AB:35:2F:BA:31:13:EC:5E:F4:4C:A4:C3:84:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1f976fd-7fa0-4323-97fa-35bb869a9231/fb3609ce-04ee-320a-9a92-e0643b93d95c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1f976fd-7fa0-4323-97fa-35bb869a9231/b1f976fd-7fa0-4323-97fa-35bb869a9231.crl

            X509v3 Authority Key Identifier:
                keyid:AE:9A:24:71:98:85:E6:0B:5D:3F:EE:2F:FD:CA:A1:6A:94:E0:27:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1f976fd-7fa0-4323-97fa-35bb869a9231.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:105:b000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:96:49:d9:4c:36:f3:14:27:6e:7d:0c:ca:a5:71:81:80:18:
         21:d6:03:c9:1e:cb:85:49:09:19:2e:ef:70:d6:ce:df:a2:89:
         ea:99:e5:97:24:c5:c6:d0:15:4c:bd:83:73:b8:fa:db:d8:67:
         cf:c6:45:40:03:c0:ba:e7:16:28:d3:a0:48:2d:1b:78:58:17:
         70:eb:de:1d:5e:e7:0a:fb:f4:e1:e1:99:60:14:58:87:db:65:
         6c:9b:85:ed:0a:44:8e:1c:08:47:c4:36:63:61:07:ba:38:86:
         d4:b9:ee:4d:b2:85:ea:c3:f9:7b:e5:24:3d:a5:75:b4:e1:e9:
         83:32:ae:37:e5:2b:8d:30:9c:36:24:96:13:d3:95:c1:70:4d:
         e3:6a:90:e2:4e:8b:03:bf:fa:a6:30:72:8b:11:87:71:77:e8:
         c1:30:41:b2:9d:70:3b:cd:10:e4:2e:c5:63:2b:52:db:37:bd:
         34:d3:8b:4d:87:85:a3:e4:73:15:54:63:39:a1:b0:46:2d:74:
         d1:78:e9:b7:82:bd:5f:92:c4:4b:90:77:27:3a:2c:6c:c8:83:
         67:a0:44:eb:c4:f0:09:5b:e1:35:cd:20:03:33:8f:fa:5f:7e:
         12:ca:4c:7f:d2:0c:97:2e:fd:53:31:0f:1d:f7:d4:9e:53:51:
         0b:bb:8c:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 2 01:44:02 2024 by rpki-client on console-ams.rpki-client.org