Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/dc689f44-3e1d-359e-ae6c-726dbce613e6.roa
File:                     dc689f44-3e1d-359e-ae6c-726dbce613e6.roa (raw, json)
Hash identifier:          NOKf/C+M5C3mBlTpalWAQyKi8En6TIsPQxYntN9bh2k=
Subject key identifier:   7C:78:6A:CC:35:34:FA:C6:54:92:6D:52:E1:CB:D6:6D:55:4B:B5:8B
Certificate issuer:       /CN=484f9c2c-238b-4d23-8e8b-ab2f5a0147c1
Certificate serial:       010D0C9F43285845E193C402CFBC3E43957FA800
Authority key identifier: 26:F6:14:C7:B3:38:B8:E6:D8:99:68:03:01:DA:B2:3A:77:33:B3:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/dc689f44-3e1d-359e-ae6c-726dbce613e6.roa
Signing time:             Wed 15 May 2024 13:00:34 +0000
ROA not before:           Wed 15 May 2024 13:00:34 +0000
ROA not after:            Tue 13 Aug 2024 13:00:34 +0000
asID:                     32554
IP address blocks:        2607:6b40:3300::/40 maxlen: 48

Validation:               Failed, certificate revoked on Fri 31 May 2024 17:59:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e1:93:c4:02:cf:bc:3e:43:95:7f:a8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=484f9c2c-238b-4d23-8e8b-ab2f5a0147c1
        Validity
            Not Before: May 15 13:00:34 2024 GMT
            Not After : Aug 13 13:00:34 2024 GMT
        Subject: CN=2790ebcd-0509-43d5-9535-05693375c103
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:10:5b:f5:f5:45:8d:6a:d9:c3:02:b4:12:13:
                    48:b7:3f:cd:5e:d6:b8:75:68:4f:7f:e6:9a:06:61:
                    56:9c:cb:f8:2d:46:50:4f:c4:4b:b5:f7:e0:f9:d8:
                    ab:0e:6a:98:e2:60:7c:ad:61:d2:3f:f8:a1:e0:2e:
                    ec:75:39:bb:de:a5:cd:de:11:93:c6:d6:34:b9:30:
                    05:b4:44:11:c2:48:39:4b:69:ce:bf:0a:2a:60:96:
                    6c:f6:6b:18:c0:fe:fe:59:42:1f:83:54:5d:54:ac:
                    6b:8e:ac:f0:0e:16:8a:bc:95:e4:41:bf:a4:53:77:
                    24:b2:2f:87:74:7a:60:f5:4f:28:9d:c9:ca:17:ff:
                    5e:35:ec:94:d4:50:42:5b:1e:4a:ea:f3:9c:72:8e:
                    b9:f3:8d:c4:58:89:c5:4f:e7:1f:9f:fc:fb:75:85:
                    f4:31:18:2b:d2:ef:af:b5:b1:41:36:03:3f:c7:2f:
                    e3:54:52:8c:9d:99:40:a6:3d:39:56:a8:f2:91:93:
                    78:c6:b4:fc:b8:e6:0d:01:57:60:b0:2f:25:12:35:
                    dd:40:e2:81:94:1a:f2:25:0e:e0:d8:08:9b:33:2f:
                    b4:12:94:74:b1:51:7b:8f:1d:b7:3f:9d:07:74:da:
                    3d:d6:f0:4a:c1:fa:0d:d3:45:a9:61:7a:7d:66:7a:
                    58:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:78:6A:CC:35:34:FA:C6:54:92:6D:52:E1:CB:D6:6D:55:4B:B5:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/dc689f44-3e1d-359e-ae6c-726dbce613e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1.crl

            X509v3 Authority Key Identifier:
                keyid:26:F6:14:C7:B3:38:B8:E6:D8:99:68:03:01:DA:B2:3A:77:33:B3:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/484f9c2c-238b-4d23-8e8b-ab2f5a0147c1.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:6b40:3300::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:32:a2:e7:7a:1a:ed:11:5d:53:ab:ef:57:61:b7:10:74:68:
         1d:72:66:82:9d:c5:57:08:46:ee:0e:f2:0c:f8:fb:c4:20:7c:
         22:f1:6a:6b:ee:29:b8:73:e5:72:34:4d:e5:5c:70:78:3c:12:
         94:71:83:d4:d4:23:b5:54:14:b0:e5:39:76:e3:c8:02:75:50:
         26:02:db:d9:c6:fc:76:54:82:ae:88:6e:db:31:e2:69:b0:ba:
         ce:8e:a7:3e:1a:59:bd:d4:be:b2:62:37:c5:d7:71:1b:a2:b2:
         2b:f4:6a:48:b8:e0:77:28:a7:c2:6e:83:5d:84:2f:9d:bd:8c:
         9e:05:65:6e:34:db:87:2c:b4:67:2c:e1:60:99:67:b7:af:69:
         82:b2:b7:20:8b:1c:15:38:9e:51:5f:f8:7f:8c:1c:3e:b3:b3:
         ef:7a:1d:8d:4b:ab:e9:9a:71:f9:70:0c:1a:18:bb:7f:6d:d3:
         a0:00:72:5f:88:0f:3a:2e:49:bd:d3:d4:34:50:6e:45:75:57:
         f9:2d:f7:fc:52:be:1a:ac:c0:f5:dd:18:b3:2c:85:90:61:a0:
         9a:07:72:f3:37:c1:eb:52:18:de:99:15:48:29:1a:f0:74:40:
         c0:0d:7a:0a:fe:aa:90:ce:75:37:01:98:3a:f2:18:68:8a:b9:
         80:9b:02:96
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEXhk8QCz7w+Q5V/qAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDg0ZjljMmMtMjM4Yi00ZDIzLThlOGItYWIyZjVhMDE0
N2MxMB4XDTI0MDUxNTEzMDAzNFoXDTI0MDgxMzEzMDAzNFowLzEtMCsGA1UEAxMk
Mjc5MGViY2QtMDUwOS00M2Q1LTk1MzUtMDU2OTMzNzVjMTAzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohBb9fVFjWrZwwK0EhNItz/NXta4dWhPf+aa
BmFWnMv4LUZQT8RLtffg+dirDmqY4mB8rWHSP/ih4C7sdTm73qXN3hGTxtY0uTAF
tEQRwkg5S2nOvwoqYJZs9msYwP7+WUIfg1RdVKxrjqzwDhaKvJXkQb+kU3cksi+H
dHpg9U8oncnKF/9eNeyU1FBCWx5K6vOcco65843EWInFT+cfn/z7dYX0MRgr0u+v
tbFBNgM/xy/jVFKMnZlApj05VqjykZN4xrT8uOYNAVdgsC8lEjXdQOKBlBryJQ7g
2AibMy+0EpR0sVF7jx23P50HdNo91vBKwfoN00WpYXp9ZnpY9wIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFHx4asw1NPrGVJJtUuHL1m1VS7WLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80ODRm
OWMyYy0yMzhiLTRkMjMtOGU4Yi1hYjJmNWEwMTQ3YzEvZGM2ODlmNDQtM2UxZC0z
NTllLWFlNmMtNzI2ZGJjZTYxM2U2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNDg0ZjljMmMtMjM4Yi00ZDIzLThl
OGItYWIyZjVhMDE0N2MxLzQ4NGY5YzJjLTIzOGItNGQyMy04ZThiLWFiMmY1YTAx
NDdjMS5jcmwwHwYDVR0jBBgwFoAUJvYUx7M4uObYmWgDAdqyOnczs9AwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80ODRmOWMyYy0yMzhiLTRkMjMtOGU4Yi1hYjJm
NWEwMTQ3YzEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgdrQDMw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAgDKi53oa7RFdU6vvV2G3EHRoHXJmgp3FVwhG7g7yDPj7xCB8IvFq
a+4puHPlcjRN5VxweDwSlHGD1NQjtVQUsOU5duPIAnVQJgLb2cb8dlSCrohu2zHi
abC6zo6nPhpZvdS+smI3xddxG6KyK/RqSLjgdyinwm6DXYQvnb2MngVlbjTbhyy0
ZyzhYJlnt69pgrK3IIscFTieUV/4f4wcPrOz73odjUur6Zpx+XAMGhi7f23ToABy
X4gPOi5JvdPUNFBuRXVX+S33/FK+GqzA9d0YsyyFkGGgmgdy8zfB61IY3pkVSCka
8HRAwA16Cv6qkM51NwGYOvIYaIq5gJsClg==
-----END CERTIFICATE-----