Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/415b363a-8f59-46ca-baf4-e6cb4b8fdf20/aa767222-4e8d-39e9-9387-7c5ae1e14549.roa
File:                     aa767222-4e8d-39e9-9387-7c5ae1e14549.roa (raw, json)
Hash identifier:          Eb5FDZhHnKKpzupOhObIgIQoYi16MZcl5ffDA2Dsyfo=
Subject key identifier:   38:25:82:6B:B8:F7:C6:67:72:97:59:CD:86:0D:3F:57:84:22:86:31
Certificate issuer:       /CN=415b363a-8f59-46ca-baf4-e6cb4b8fdf20
Certificate serial:       010D0C9F432858469C9FA8E109F2ACDD296C1860
Authority key identifier: 39:D9:D1:A1:3D:AC:AE:DF:23:16:FE:9B:20:DD:D0:8A:E1:19:11:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/415b363a-8f59-46ca-baf4-e6cb4b8fdf20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/415b363a-8f59-46ca-baf4-e6cb4b8fdf20/aa767222-4e8d-39e9-9387-7c5ae1e14549.roa
Signing time:             Sun 21 Jul 2024 13:00:36 +0000
ROA not before:           Sun 21 Jul 2024 13:00:36 +0000
ROA not after:            Sat 19 Oct 2024 13:00:36 +0000
asID:                     397881
IP address blocks:        2605:5fc1::/32 maxlen: 32
                          2605:5fc4::/32 maxlen: 32
                          2605:5fc5::/32 maxlen: 32
                          2605:5fc6::/32 maxlen: 32
                          2605:5fc7::/32 maxlen: 32
                          2605:5fc9::/32 maxlen: 32
                          2605:5fca::/32 maxlen: 32
                          2605:5fcb::/32 maxlen: 32
                          2605:5fcc::/32 maxlen: 32
                          2605:5fcd::/32 maxlen: 32
                          2605:5fce::/32 maxlen: 32

Validation:               Failed, certificate revoked on Fri 20 Sep 2024 08:59:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:9c:9f:a8:e1:09:f2:ac:dd:29:6c:18:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=415b363a-8f59-46ca-baf4-e6cb4b8fdf20
        Validity
            Not Before: Jul 21 13:00:36 2024 GMT
            Not After : Oct 19 13:00:36 2024 GMT
        Subject: CN=0540494e-a7eb-42d0-8df5-b50053270c6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f1:6f:c5:3d:f1:df:63:d6:df:d9:a4:bf:42:
                    d2:c2:b2:06:c7:ce:76:d6:8b:86:d4:db:ff:77:4c:
                    83:f6:57:8b:a9:e9:f5:d5:df:e9:70:94:53:18:37:
                    60:e6:5d:36:68:f4:47:26:ef:6b:7a:73:44:13:2f:
                    02:9e:91:5b:87:1e:8c:eb:d0:69:e8:39:66:c1:6e:
                    53:01:54:ea:bf:31:49:6d:28:b7:cd:27:4e:65:86:
                    70:78:e4:78:d6:fb:8f:31:39:cc:a9:f8:73:fa:8e:
                    e2:25:f9:83:ab:2d:ef:11:25:92:cb:2d:de:d5:c3:
                    8d:91:86:a5:a5:d3:a7:ae:1d:51:5e:8e:fe:dc:4a:
                    b2:e1:65:14:e3:05:f3:c6:30:a7:52:d1:ca:c0:a6:
                    9c:2c:dd:5f:49:6d:64:67:91:73:fb:62:1b:7a:b6:
                    77:90:b9:d8:14:0f:11:57:b3:25:cd:65:68:3e:e5:
                    f8:a5:bd:58:64:bc:58:ca:8b:31:ed:92:9b:55:67:
                    97:af:b9:0e:d1:6e:2e:42:e1:03:54:77:5f:72:44:
                    4f:92:c2:25:3a:ef:bd:41:c5:57:0f:3e:4e:2f:95:
                    35:7e:f9:4c:e7:95:b7:58:95:76:1c:fe:8f:24:74:
                    93:a5:74:af:9c:b1:1a:02:95:08:4c:e7:43:20:22:
                    27:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:25:82:6B:B8:F7:C6:67:72:97:59:CD:86:0D:3F:57:84:22:86:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/415b363a-8f59-46ca-baf4-e6cb4b8fdf20/aa767222-4e8d-39e9-9387-7c5ae1e14549.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/415b363a-8f59-46ca-baf4-e6cb4b8fdf20/415b363a-8f59-46ca-baf4-e6cb4b8fdf20.crl

            X509v3 Authority Key Identifier:
                keyid:39:D9:D1:A1:3D:AC:AE:DF:23:16:FE:9B:20:DD:D0:8A:E1:19:11:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/415b363a-8f59-46ca-baf4-e6cb4b8fdf20.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:5fc1::/32
                  2605:5fc4::/30
                  2605:5fc9::-2605:5fce:ffff:ffff:ffff:ffff:ffff:ffff

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:6e:ac:92:be:1d:dd:13:60:1d:91:d4:57:96:a1:51:0d:f6:
         99:2a:d0:58:41:6d:a3:67:5c:e1:9f:37:28:1e:28:09:17:6b:
         9a:86:cc:90:9f:af:1a:06:f5:3b:74:c2:b2:15:57:fe:02:40:
         7c:94:ae:43:43:22:0b:1e:20:28:83:fd:17:96:02:b9:22:fe:
         a3:d3:2b:ad:29:3e:9b:ac:fe:e5:19:b0:de:d2:dc:d2:6e:03:
         04:d0:99:73:d9:0e:39:6a:68:87:27:56:f2:15:56:7b:6b:dd:
         a7:7c:28:40:ce:5a:bd:a5:a1:2c:63:52:0d:8e:15:b8:37:4e:
         e5:30:7a:b8:9d:eb:90:be:48:db:3d:96:4f:3f:7b:de:6c:79:
         57:b6:8f:80:e7:2b:66:39:ce:12:ce:2b:ab:e2:3c:bc:2f:94:
         88:79:11:1d:36:64:8a:e7:5a:3b:90:ad:97:ed:95:e3:6e:16:
         2f:06:53:e6:ec:af:44:18:d0:4d:74:85:2d:cc:c9:da:66:f8:
         d2:4d:2c:27:40:2d:8a:d3:9d:5f:cf:68:47:8c:bf:be:3a:bc:
         52:9d:46:69:97:1f:d0:37:55:1c:77:74:c8:1d:3e:e7:9d:a5:
         06:88:8e:57:c5:cb:23:44:37:d7:c3:0e:ee:13:92:4a:cd:fe:
         fc:3e:83:46
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Sep 20 12:50:46 2024 by rpki-client on console-fra.rpki-client.org