Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/d762f5c9-c7e5-3e90-b465-23434d16e1ef.roa
File:                     d762f5c9-c7e5-3e90-b465-23434d16e1ef.roa (raw, json)
Hash identifier:          lmF6QjjlLoF/xpL2eKMS8VqkrmyZrFsOalDWaAu81n8=
Subject key identifier:   7D:1A:22:0B:69:C1:9B:8F:9A:0A:F5:8A:74:29:14:6C:8B:A8:43:B3
Certificate issuer:       /CN=484f9c2c-238b-4d23-8e8b-ab2f5a0147c1
Certificate serial:       010D0C9F43285845E193C3AC9DB2938CA463C800
Authority key identifier: 26:F6:14:C7:B3:38:B8:E6:D8:99:68:03:01:DA:B2:3A:77:33:B3:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/d762f5c9-c7e5-3e90-b465-23434d16e1ef.roa
Signing time:             Wed 15 May 2024 13:00:34 +0000
ROA not before:           Wed 15 May 2024 13:00:34 +0000
ROA not after:            Tue 13 Aug 2024 13:00:34 +0000
asID:                     32554
IP address blocks:        2607:6b40:2500::/40 maxlen: 48

Validation:               Failed, certificate revoked on Fri 31 May 2024 17:58:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e1:93:c3:ac:9d:b2:93:8c:a4:63:c8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=484f9c2c-238b-4d23-8e8b-ab2f5a0147c1
        Validity
            Not Before: May 15 13:00:34 2024 GMT
            Not After : Aug 13 13:00:34 2024 GMT
        Subject: CN=631f8d9b-f946-4c08-8e81-568d817f4e3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:96:d6:80:de:e7:22:7d:ea:47:ad:dc:ab:4e:
                    ab:26:17:7a:99:59:36:54:f7:87:61:5f:a0:4c:82:
                    0c:ca:26:52:50:ae:25:78:ec:6f:1b:bf:d6:37:83:
                    d0:08:3e:d4:11:48:f6:0e:4c:45:13:8c:61:2a:38:
                    aa:63:33:bb:5f:96:aa:18:23:f4:24:b8:e4:f9:d7:
                    e9:84:ec:a1:7c:e9:25:82:f1:98:7d:99:d7:5c:7b:
                    61:dc:53:98:4d:95:b7:bd:7c:bc:10:44:bf:e5:a8:
                    eb:d9:db:29:d5:ff:d3:c9:cf:23:b9:78:79:47:5b:
                    e7:b7:86:ec:c0:59:4e:60:b0:29:2f:00:b7:8f:d9:
                    96:42:9c:e5:ec:1f:cb:ac:9d:53:2d:7a:04:b6:3e:
                    ac:1c:29:7a:f1:cd:bb:6b:e6:1d:41:49:e5:5f:fb:
                    de:f6:37:99:2e:1b:dd:e1:a1:58:40:d7:6c:eb:e9:
                    c5:07:c6:5c:16:89:ad:24:fc:52:57:6a:36:aa:e7:
                    c9:2c:1f:f0:f6:2a:5a:02:c4:69:8b:bb:df:65:46:
                    de:71:27:ee:ac:9d:b4:93:41:69:b4:27:56:f4:40:
                    57:dc:ac:3e:a7:68:8c:2d:f0:50:72:a5:30:d2:f5:
                    d9:3b:53:0d:0f:48:6f:8f:fa:e4:86:a7:51:c4:5d:
                    f5:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:1A:22:0B:69:C1:9B:8F:9A:0A:F5:8A:74:29:14:6C:8B:A8:43:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/d762f5c9-c7e5-3e90-b465-23434d16e1ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1.crl

            X509v3 Authority Key Identifier:
                keyid:26:F6:14:C7:B3:38:B8:E6:D8:99:68:03:01:DA:B2:3A:77:33:B3:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6b40:2500::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:c7:77:12:6f:a3:ec:83:84:93:c8:6c:e8:58:5e:81:87:2c:
         60:0f:b6:1e:5d:6e:c8:da:36:d3:15:89:8e:7b:49:e4:c8:f9:
         2d:5b:d9:17:b2:00:71:38:7e:60:47:53:cb:6e:6f:d9:c3:ca:
         84:db:b5:17:4e:86:c1:d9:ac:b2:29:1a:6c:3b:a3:02:d3:40:
         19:ad:4c:57:b6:28:94:ed:75:cf:42:39:37:92:f5:48:3a:e4:
         23:55:43:cc:a8:89:60:c1:b6:d3:d0:21:96:fd:bc:fd:c5:ba:
         61:b2:79:79:04:de:3d:8e:b7:99:c5:d4:64:fa:9d:7d:54:b7:
         02:01:43:27:f5:d2:94:d2:45:a2:95:f4:45:1d:cd:bf:6d:d2:
         fd:87:d0:5e:5a:a3:d5:31:c0:e4:21:06:89:59:40:d5:fc:bd:
         a0:0a:ac:a3:5b:81:8d:2b:b7:1f:96:c6:72:bb:5d:7d:11:b5:
         ec:60:e2:9c:50:2b:3e:ea:fd:c6:76:f4:62:5e:75:59:92:b2:
         44:1f:5f:1b:db:38:25:20:a8:ce:f8:f7:d6:71:ae:a2:54:12:
         73:df:6e:db:65:7e:20:45:f3:3d:e2:43:c8:0b:dd:13:d1:2b:
         23:ca:9c:04:e3:77:78:de:4d:00:f5:a5:09:39:3d:ad:b7:3a:
         62:c8:68:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----