Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/30f68eb0-a662-3e45-b00e-cfd08c0edfe1.roa
File:                     30f68eb0-a662-3e45-b00e-cfd08c0edfe1.roa (raw, json)
Hash identifier:          ATNSb2UxxKYaeoeRX08ykz5JKEJoeywJQ8ZDCpE4a+E=
Subject key identifier:   5E:D5:3A:E7:E4:47:80:1E:96:FD:D6:B6:27:D0:5C:86:6A:8E:5A:4D
Certificate issuer:       /CN=239e2a72-9347-4316-9be7-20bdf6512711
Certificate serial:       010D0C9F432858459E935719E07BAD9BC12A7370
Authority key identifier: C7:00:5A:76:42:60:11:9F:ED:7A:6F:7F:67:94:62:64:EC:2D:6B:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/30f68eb0-a662-3e45-b00e-cfd08c0edfe1.roa
Signing time:             Sun 21 Apr 2024 13:00:35 +0000
ROA not before:           Sun 21 Apr 2024 13:00:35 +0000
ROA not after:            Sat 20 Jul 2024 13:00:35 +0000
asID:                     212238
IP address blocks:        2606:99c0::/32 maxlen: 32
                          2606:9940::/32 maxlen: 32
                          2606:9a40::/32 maxlen: 32

Validation:               Failed, certificate revoked on Thu 27 Jun 2024 13:39:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:9e:93:57:19:e0:7b:ad:9b:c1:2a:73:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=239e2a72-9347-4316-9be7-20bdf6512711
        Validity
            Not Before: Apr 21 13:00:35 2024 GMT
            Not After : Jul 20 13:00:35 2024 GMT
        Subject: CN=3b2748d0-8bec-4525-8f6d-b709f74c4b9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:47:3b:09:ac:ab:1a:8a:48:cb:75:02:14:75:
                    bf:e1:fc:f8:0e:6f:50:45:cb:f8:2e:25:b4:76:25:
                    e7:df:43:61:f1:58:9a:54:ec:ad:76:bf:3f:82:32:
                    e0:25:ff:5c:44:b9:ff:20:fe:d8:5d:82:7e:8a:37:
                    10:bf:b4:2a:e1:bb:8a:5a:87:40:97:0e:ce:c3:3d:
                    f9:4c:c1:6b:d2:ea:fe:b1:13:4c:f6:37:d1:bc:e7:
                    58:bc:2e:71:e9:c1:c9:85:c0:f0:2e:ac:3f:0f:86:
                    1e:42:f9:b7:02:35:b5:c9:9e:bc:95:8c:02:4b:19:
                    20:93:7d:95:c3:50:14:b0:da:a9:ae:f3:b1:bd:16:
                    7e:11:69:d7:8a:bd:ef:b7:28:93:a0:73:fd:68:3d:
                    83:b1:5c:22:d7:75:7a:4f:20:d2:91:8a:4f:25:b0:
                    fb:c8:c1:0b:ab:69:16:01:3e:ce:29:50:ae:22:21:
                    3d:a7:31:49:6f:42:3a:fe:3e:60:c9:1e:54:c1:19:
                    5f:6f:bb:63:db:e9:ad:b4:03:b1:6b:d8:a7:be:6f:
                    3f:1e:d1:fb:d7:40:de:6b:89:cb:68:26:6b:2d:e0:
                    ec:13:bb:27:6a:0a:f2:93:6d:7b:79:da:50:5a:bb:
                    05:c4:43:b8:73:1c:5f:e9:e5:dd:80:7e:ff:c3:8d:
                    1b:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:D5:3A:E7:E4:47:80:1E:96:FD:D6:B6:27:D0:5C:86:6A:8E:5A:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/30f68eb0-a662-3e45-b00e-cfd08c0edfe1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/239e2a72-9347-4316-9be7-20bdf6512711.crl

            X509v3 Authority Key Identifier:
                keyid:C7:00:5A:76:42:60:11:9F:ED:7A:6F:7F:67:94:62:64:EC:2D:6B:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:9940::/32
                  2606:99c0::/32
                  2606:9a40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:67:c3:3f:d1:e1:87:f3:d2:92:72:df:a7:15:5c:42:9a:f7:
         96:eb:cc:9a:72:5c:3b:ef:a4:73:4a:19:f4:59:6f:60:a9:dd:
         15:e0:61:97:6c:8e:c8:45:81:be:f7:2b:9a:44:e8:bc:61:6d:
         25:1a:8c:3d:bd:41:45:af:3e:52:a9:02:7c:ec:66:e4:a0:cd:
         42:4d:92:48:1b:55:22:df:df:53:c2:57:53:db:91:81:55:b6:
         76:7e:15:b0:56:c3:d5:76:c2:ff:84:f9:d2:5f:1f:bf:1e:bc:
         80:be:75:c1:92:00:5d:9b:ee:1f:e4:ba:86:11:f2:e1:f6:a8:
         1a:2d:87:90:99:4e:e4:3b:63:c5:29:bf:fe:af:50:36:4a:2a:
         87:b8:d7:08:e7:15:5d:da:a9:09:1a:95:4d:3f:d6:c3:b0:f5:
         c0:5d:05:b1:0e:83:35:e6:a6:57:a5:af:d7:4f:0d:3e:29:94:
         68:d4:7a:6c:19:92:84:66:23:f6:26:e0:e4:de:03:89:18:92:
         d6:cd:af:28:95:18:7c:ed:fa:f5:7a:8c:44:2b:06:0a:1e:3e:
         8e:05:d8:38:86:69:26:9a:c9:60:c5:a2:7e:82:e8:53:23:d4:
         d2:e2:86:4c:d1:c8:c8:61:e8:8a:57:71:25:27:1b:01:13:eb:
         92:cf:54:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 27 17:22:25 2024 by rpki-client on console-fra.rpki-client.org