Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/415b363a-8f59-46ca-baf4-e6cb4b8fdf20/e2ae3248-f0d8-32bf-9dee-a671d19aab38.roa
File:                     e2ae3248-f0d8-32bf-9dee-a671d19aab38.roa (raw, json)
Hash identifier:          ZDl6bzfH+FqQde6FNuVlv+ih2b3tS8KxoFYzwbkndXA=
Subject key identifier:   C8:84:3E:67:81:5F:AA:88:A7:AD:57:12:1C:20:E3:E8:73:41:7F:57
Certificate issuer:       /CN=415b363a-8f59-46ca-baf4-e6cb4b8fdf20
Certificate serial:       010D0C9F432858466FF4B46221F45A831202BC80
Authority key identifier: 39:D9:D1:A1:3D:AC:AE:DF:23:16:FE:9B:20:DD:D0:8A:E1:19:11:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/415b363a-8f59-46ca-baf4-e6cb4b8fdf20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/415b363a-8f59-46ca-baf4-e6cb4b8fdf20/e2ae3248-f0d8-32bf-9dee-a671d19aab38.roa
Signing time:             Fri 05 Jul 2024 13:00:35 +0000
ROA not before:           Fri 05 Jul 2024 13:00:35 +0000
ROA not after:            Thu 03 Oct 2024 13:00:35 +0000
asID:                     397881
IP address blocks:        2605:5fc0::/28 maxlen: 28

Validation:               Failed, certificate revoked on Fri 20 Sep 2024 08:59:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:6f:f4:b4:62:21:f4:5a:83:12:02:bc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=415b363a-8f59-46ca-baf4-e6cb4b8fdf20
        Validity
            Not Before: Jul  5 13:00:35 2024 GMT
            Not After : Oct  3 13:00:35 2024 GMT
        Subject: CN=062f8856-3d23-44bd-a98e-54d45c010e44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:ee:84:99:7f:ff:55:95:67:42:dc:e4:90:4e:
                    df:15:f5:fc:31:a6:f3:69:b1:6c:b8:76:88:4e:9e:
                    56:9f:f7:db:af:cb:0f:f9:fa:6b:84:05:22:9f:ae:
                    05:8f:40:03:35:af:80:81:72:d1:bb:25:ff:c0:21:
                    03:b2:89:62:66:91:f8:dd:33:17:53:37:60:94:b2:
                    cd:19:aa:92:06:a3:28:af:34:85:0b:8b:c8:a5:c7:
                    b2:64:4b:ee:d2:bd:f7:db:84:2b:9a:b9:b1:2a:37:
                    d0:7a:2c:49:5d:38:7d:e0:4a:a0:37:77:e5:93:ed:
                    68:a6:e7:c3:22:17:df:75:54:d4:13:24:43:43:c1:
                    f5:37:7a:f7:62:12:97:c0:ac:bd:74:61:02:8d:81:
                    86:58:12:3e:b0:cf:e2:26:3d:70:b4:0e:b1:73:4e:
                    71:a4:9d:40:8d:65:7d:1f:0e:2f:03:d8:d2:96:b5:
                    b8:c4:7d:22:36:26:00:4c:96:56:6b:e6:d0:a3:ec:
                    a5:bc:77:60:eb:fa:90:83:dd:cc:8d:8c:c9:f2:63:
                    35:b3:60:0d:8b:14:bc:9a:15:b3:c2:d9:be:1c:8f:
                    6a:22:af:14:05:2e:ee:d4:67:f2:30:8a:86:01:df:
                    a7:23:94:d9:2b:38:41:8c:52:ae:29:da:ab:c7:75:
                    53:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:84:3E:67:81:5F:AA:88:A7:AD:57:12:1C:20:E3:E8:73:41:7F:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/415b363a-8f59-46ca-baf4-e6cb4b8fdf20/e2ae3248-f0d8-32bf-9dee-a671d19aab38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/415b363a-8f59-46ca-baf4-e6cb4b8fdf20/415b363a-8f59-46ca-baf4-e6cb4b8fdf20.crl

            X509v3 Authority Key Identifier:
                keyid:39:D9:D1:A1:3D:AC:AE:DF:23:16:FE:9B:20:DD:D0:8A:E1:19:11:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/415b363a-8f59-46ca-baf4-e6cb4b8fdf20.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:5fc0::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:53:40:5b:ef:86:ae:74:8f:13:e5:01:77:24:23:f5:e9:bc:
         07:2b:64:e5:73:21:7a:22:b3:03:2c:89:d2:35:3c:5a:a3:75:
         8a:c9:99:29:6e:bd:51:2f:26:4d:12:09:bd:8e:18:90:2d:bd:
         7a:8b:1c:b2:af:80:9f:e7:86:9c:97:af:65:69:a7:3a:a5:a6:
         58:a7:4e:c3:bf:d1:22:44:3a:ab:c2:8b:ec:19:91:6b:6a:af:
         2f:21:38:f1:39:76:e0:c9:d7:0c:ed:7c:11:9e:a3:99:6c:a1:
         6f:91:b4:00:3a:a8:02:1b:f7:0a:ea:51:6f:18:02:76:0a:9b:
         52:70:18:74:39:b9:ba:1a:52:06:80:64:79:7e:66:1d:cb:72:
         2b:9d:c3:b2:f3:93:0d:04:37:ed:d2:b6:f7:43:3f:6a:16:ac:
         02:0c:ad:1a:5f:df:c3:3d:6f:94:a3:7c:92:83:c9:48:f5:c7:
         ae:4c:7b:5f:b7:2f:eb:6c:3a:df:17:8c:d7:40:61:01:a3:de:
         16:f2:fa:3e:76:a9:5a:b2:79:d9:7c:55:ce:6d:85:74:78:01:
         98:d7:f3:98:0d:83:a5:f0:a0:0a:8b:86:c6:78:51:6e:8e:f6:
         b7:79:f2:94:23:f8:e8:96:a0:09:5b:0d:8f:ae:09:cf:e0:21:
         96:27:1d:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 12:50:46 2024 by rpki-client on console-fra.rpki-client.org