Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/5081c3d6-e53e-31b7-af1b-556b305ba633.roa
File:                     5081c3d6-e53e-31b7-af1b-556b305ba633.roa (raw, json)
Hash identifier:          x3ok5cfSm00Osr+69v6PdxQ0MIAvaoNohIIOfnjBmBE=
Subject key identifier:   D5:0F:A2:82:2D:E8:C0:F3:9D:E5:DC:0C:81:F2:45:75:56:61:A6:4E
Certificate issuer:       /CN=df5adac7-ed86-4b24-911d-716f2c94711d
Certificate serial:       010D0C9F432858456DA7BAB46C97D48E4E1234C0
Authority key identifier: 65:84:C0:FB:8B:8E:95:4C:39:8B:05:24:6C:9B:F7:2A:F6:14:EE:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/5081c3d6-e53e-31b7-af1b-556b305ba633.roa
Signing time:             Thu 04 Apr 2024 00:27:08 +0000
ROA not before:           Thu 04 Apr 2024 00:27:08 +0000
ROA not after:            Wed 03 Jul 2024 00:27:08 +0000
asID:                     44324
IP address blocks:        2602:f92a::/36 maxlen: 48

Validation:               Failed, certificate revoked on Thu 04 Apr 2024 23:32:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:6d:a7:ba:b4:6c:97:d4:8e:4e:12:34:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df5adac7-ed86-4b24-911d-716f2c94711d
        Validity
            Not Before: Apr  4 00:27:08 2024 GMT
            Not After : Jul  3 00:27:08 2024 GMT
        Subject: CN=934d9038-795c-4199-97cb-4502239be5da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:bb:42:8e:69:a4:4d:38:f7:fa:5f:80:71:63:
                    b0:f9:3f:ba:c6:ae:d0:62:38:e6:c0:64:6f:70:ef:
                    c7:a1:c8:e0:15:f7:0b:3f:43:99:6e:03:25:84:96:
                    dc:d8:21:6e:2b:1b:cf:e5:9d:4e:14:91:3f:66:6c:
                    df:50:ee:ce:9b:53:0c:74:0b:ec:46:2c:a0:bb:41:
                    89:d8:ce:17:41:61:80:64:af:6c:18:2c:35:a4:21:
                    be:55:cc:03:1c:19:c6:e4:e6:83:38:47:11:8f:78:
                    6a:ee:71:32:f8:a6:f4:fe:28:dc:15:13:69:4c:93:
                    13:8a:58:20:9f:0c:ef:92:2f:12:df:17:08:75:f8:
                    41:28:d7:95:5f:41:44:0e:52:6b:0c:83:d2:53:e8:
                    a8:b4:58:fa:c4:58:9b:ce:04:bf:37:92:4d:51:3b:
                    db:ee:98:41:39:b0:73:52:ee:2e:1b:a3:7d:84:4a:
                    30:2f:52:5b:39:02:06:35:5f:ec:1f:46:90:e6:71:
                    9c:bb:05:15:22:cb:8c:2d:13:bd:c9:a2:be:95:90:
                    a0:a7:5e:c3:98:62:e4:e6:50:90:21:ed:14:b1:e2:
                    55:93:d7:14:a5:f1:df:df:d2:41:02:65:ab:ce:6f:
                    10:e8:4b:2a:de:d2:28:c8:2d:b6:a7:01:b0:50:bf:
                    9c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:0F:A2:82:2D:E8:C0:F3:9D:E5:DC:0C:81:F2:45:75:56:61:A6:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/5081c3d6-e53e-31b7-af1b-556b305ba633.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/df5adac7-ed86-4b24-911d-716f2c94711d.crl

            X509v3 Authority Key Identifier:
                keyid:65:84:C0:FB:8B:8E:95:4C:39:8B:05:24:6C:9B:F7:2A:F6:14:EE:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f92a::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:4e:67:37:ad:fd:2b:32:ff:5d:fc:29:27:9f:84:97:7c:0a:
         98:4d:d3:58:c4:2b:e7:c4:3c:b7:c3:31:25:ed:cb:31:ad:5f:
         58:d8:2b:cc:d4:ed:33:14:aa:43:49:a6:72:4a:84:be:17:b6:
         56:dc:09:37:8b:31:5c:de:99:a4:35:f4:39:4c:72:39:a4:46:
         a8:de:12:25:49:88:5e:89:72:5e:aa:fd:fc:d7:13:34:a4:2e:
         40:42:ee:95:eb:05:32:47:fb:36:62:d1:e1:56:57:f8:28:a7:
         68:55:2b:01:4e:0b:5a:02:e9:6b:85:9e:63:f8:85:f7:69:72:
         22:9a:c4:df:ea:ab:b5:57:d8:d6:29:49:65:b7:7e:1e:b5:d2:
         fe:43:23:4a:79:85:56:b7:b3:b3:75:92:bd:7e:cd:f7:ef:40:
         92:fa:3c:04:a6:83:94:29:9b:41:43:4d:b0:79:14:f6:6d:cd:
         7b:84:89:bc:0e:1a:5d:13:85:89:09:bc:c7:4f:d7:2c:1c:52:
         23:98:1f:6b:ff:f4:b4:d8:96:e5:f8:9e:a0:ef:f6:13:c1:64:
         90:05:0e:9e:7f:30:8f:54:17:12:1f:d7:eb:b4:9e:eb:a8:88:
         1a:c0:ac:cf:80:40:b0:60:79:00:6d:d4:4d:a0:ef:4d:50:4c:
         17:35:37:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----