Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8/5ec277e8-8768-3c93-8a9b-08be6e33c5a5.roa
File:                     5ec277e8-8768-3c93-8a9b-08be6e33c5a5.roa (raw, json)
Hash identifier:          SWT1IN0+yMdAMSYVDifGQp8eRf/JMkJt9K5i/hda6T8=
Subject key identifier:   25:EE:69:73:BC:02:31:9D:50:4C:F3:0F:4C:91:15:9C:88:7D:D5:62
Certificate issuer:       /CN=02e427ea-a6b0-4c09-8330-6cbd5f5816a8
Certificate serial:       010D0C9F432858466BC48AD94CB27E0267B32180
Authority key identifier: 76:45:4A:AF:54:5D:18:19:A2:47:43:1C:C6:3C:28:E9:81:D7:7B:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8/5ec277e8-8768-3c93-8a9b-08be6e33c5a5.roa
Signing time:             Thu 04 Jul 2024 01:00:26 +0000
ROA not before:           Thu 04 Jul 2024 01:00:26 +0000
ROA not after:            Wed 02 Oct 2024 01:00:26 +0000
asID:                     3257
IP address blocks:        2602:fbb6::/36 maxlen: 36

Validation:               Failed, certificate revoked on Wed 10 Jul 2024 10:47:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:6b:c4:8a:d9:4c:b2:7e:02:67:b3:21:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02e427ea-a6b0-4c09-8330-6cbd5f5816a8
        Validity
            Not Before: Jul  4 01:00:26 2024 GMT
            Not After : Oct  2 01:00:26 2024 GMT
        Subject: CN=6ebfc9e3-9d63-43ae-896a-c0182c5cbbe2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:cf:bd:1c:e6:e5:39:98:09:db:2b:30:03:f9:
                    81:25:63:4e:3e:c2:4d:35:f2:f1:a9:5a:92:b0:6c:
                    4e:13:bf:46:3c:7b:39:3a:61:5e:c4:2a:56:59:15:
                    2d:ae:e2:ff:2a:7c:65:ff:35:95:40:a5:01:9c:e6:
                    bf:42:d3:4d:63:53:29:d7:0b:75:19:8e:b2:b3:65:
                    ee:51:73:27:51:0e:05:8b:cf:f5:5d:36:15:b1:a8:
                    31:40:69:95:9c:61:88:ee:6d:42:e4:ec:da:c0:30:
                    e9:b9:38:5c:44:65:37:d9:97:e3:07:ad:8c:7a:89:
                    d2:4f:7f:18:cb:ce:ca:40:45:cc:f3:53:2f:4a:21:
                    48:22:78:10:5f:7f:82:c9:65:37:96:1b:2d:4d:bd:
                    ee:77:a8:b0:b0:b1:82:7b:62:2d:8a:cb:fc:4c:59:
                    91:7f:33:ec:b3:c9:2c:d3:cb:4f:7d:46:e7:f8:28:
                    f3:cb:ca:81:27:5e:48:43:0c:22:93:d9:a0:40:1d:
                    da:1e:23:ae:15:96:e6:2c:54:82:95:b2:3a:c5:5b:
                    15:4c:87:9f:86:77:2b:40:8c:b5:83:d8:a7:94:ee:
                    63:87:5c:61:3d:6f:60:f1:bb:49:31:d1:b9:1e:9a:
                    5d:07:63:57:b2:76:58:fe:0c:90:fa:e0:cb:55:c7:
                    0b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:EE:69:73:BC:02:31:9D:50:4C:F3:0F:4C:91:15:9C:88:7D:D5:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8/5ec277e8-8768-3c93-8a9b-08be6e33c5a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8.crl

            X509v3 Authority Key Identifier:
                keyid:76:45:4A:AF:54:5D:18:19:A2:47:43:1C:C6:3C:28:E9:81:D7:7B:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02e427ea-a6b0-4c09-8330-6cbd5f5816a8.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbb6::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:3f:bc:4c:56:71:03:8f:ac:74:e9:07:cf:d8:05:cb:bc:38:
         21:4f:4b:3c:9c:b6:4a:c4:56:77:bd:35:20:67:7d:6d:44:2a:
         79:a4:1d:11:c8:da:af:1f:f2:db:e2:a6:4c:08:f3:91:e8:4d:
         30:e1:ef:8e:6f:ed:d0:fe:da:9f:9e:17:cb:f0:b5:dd:d1:43:
         06:c3:ec:6f:65:cc:a8:f8:70:bf:ef:ab:7e:5b:b2:9c:82:f5:
         8a:fe:54:1e:70:b6:03:80:24:32:8f:82:be:d1:94:7a:63:ff:
         d0:2c:11:e3:dd:c3:5d:c0:76:77:68:84:d0:33:1c:ab:14:7c:
         ca:b5:6a:60:2d:e0:9d:c9:e1:f1:b6:4d:cb:68:ee:f7:8d:35:
         65:8c:a4:7e:59:ca:de:a6:12:d9:d6:c4:5d:e9:c8:0d:12:e6:
         7b:a7:94:9c:9d:a3:a4:fa:31:33:c8:6f:26:b1:19:7d:d4:25:
         2d:13:5e:26:be:77:c9:01:f0:a6:5d:be:53:7d:29:19:5e:8e:
         06:d7:f3:0c:8a:c5:4b:2d:f2:64:03:21:dc:fa:29:1f:9f:61:
         ce:b8:f0:86:f1:c5:30:25:11:62:f0:ff:01:8d:c0:d6:ae:81:
         00:28:bf:ef:0e:73:cb:f1:cb:98:dd:a9:a7:fe:6b:b5:0f:6c:
         a6:45:4e:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 10 12:20:56 2024 by rpki-client on console-fra.rpki-client.org