Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6fd900fb-7b81-4099-bb11-824fdecd0a86/0b06a0ee-27a9-3702-82d1-bff615e2702b.roa
File:                     0b06a0ee-27a9-3702-82d1-bff615e2702b.roa (raw, json)
Hash identifier:          JyOb3QmOAvGvw9lWFUKb+pofvQ8/XyUdU13EU4bR+r0=
Subject key identifier:   CB:DB:14:0B:40:39:6D:F8:0E:5B:B6:2F:4B:D3:CA:F7:65:34:E8:20
Certificate issuer:       /CN=6fd900fb-7b81-4099-bb11-824fdecd0a86
Certificate serial:       010D0C9F43285847ED24C889D019FCB311F5DE00
Authority key identifier: 3B:29:4A:9B:4E:89:0C:58:09:38:E8:26:5A:18:EE:48:9E:18:0B:A5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6fd900fb-7b81-4099-bb11-824fdecd0a86.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6fd900fb-7b81-4099-bb11-824fdecd0a86/0b06a0ee-27a9-3702-82d1-bff615e2702b.roa
Signing time:             Tue 19 Nov 2024 02:00:27 +0000
ROA not before:           Tue 19 Nov 2024 02:00:27 +0000
ROA not after:            Mon 17 Feb 2025 02:00:27 +0000
asID:                     16950
IP address blocks:        2620:c0:a000:1::/64 maxlen: 64

Validation:               Failed, certificate revoked on Thu 21 Nov 2024 14:50:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ed:24:c8:89:d0:19:fc:b3:11:f5:de:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fd900fb-7b81-4099-bb11-824fdecd0a86
        Validity
            Not Before: Nov 19 02:00:27 2024 GMT
            Not After : Feb 17 02:00:27 2025 GMT
        Subject: CN=f308ba36-0a93-498b-aa6d-9fc3d79493c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:b8:9a:46:48:18:71:22:2a:97:14:2b:0d:b1:
                    34:18:af:e1:c5:74:af:68:06:83:ff:59:a3:56:95:
                    89:f3:99:0e:99:2a:20:dc:05:bc:e2:42:1c:c1:75:
                    ae:c4:9a:41:f7:0c:eb:c2:bd:b4:53:9e:53:07:cb:
                    cc:11:b4:aa:17:b3:fa:81:ec:7d:24:66:fb:f6:d5:
                    d2:c2:4a:1f:9d:77:08:cf:dc:98:ee:6f:8a:35:53:
                    cf:af:cc:b0:f6:9c:7e:b6:6c:2e:6e:1f:0a:39:cf:
                    88:39:38:8e:1c:62:04:91:37:88:56:ac:ae:dc:83:
                    8a:3b:c2:5b:2f:55:af:c8:f8:ca:aa:b6:50:63:7d:
                    32:4c:fa:bc:dc:c1:f4:8b:55:ee:37:09:60:54:5c:
                    f4:9b:2e:32:de:7b:f8:e9:80:c9:bf:9f:cf:22:40:
                    51:d5:19:b6:b2:34:48:15:dc:71:b7:2b:94:a3:83:
                    ac:4f:a5:c1:13:c1:de:42:01:57:78:6c:1b:b6:e5:
                    38:36:0a:d6:24:0b:8b:67:ed:35:13:ef:52:52:a2:
                    e6:ac:ad:23:e7:e6:f1:01:83:bc:22:5b:89:23:d9:
                    0c:6e:d5:4b:39:9e:1a:32:4e:38:bb:09:3f:5e:67:
                    63:21:fe:2e:f6:9c:82:af:1f:82:66:00:b9:61:f0:
                    aa:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:DB:14:0B:40:39:6D:F8:0E:5B:B6:2F:4B:D3:CA:F7:65:34:E8:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6fd900fb-7b81-4099-bb11-824fdecd0a86/0b06a0ee-27a9-3702-82d1-bff615e2702b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6fd900fb-7b81-4099-bb11-824fdecd0a86/6fd900fb-7b81-4099-bb11-824fdecd0a86.crl

            X509v3 Authority Key Identifier:
                keyid:3B:29:4A:9B:4E:89:0C:58:09:38:E8:26:5A:18:EE:48:9E:18:0B:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6fd900fb-7b81-4099-bb11-824fdecd0a86.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:c0:a000:1::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:a4:9b:f6:69:0f:2f:04:a4:78:33:55:6c:a1:aa:19:05:cf:
         f0:cd:2e:a9:80:86:c0:b7:f0:7b:44:30:95:89:69:12:e6:22:
         38:65:2c:59:0f:34:14:11:87:6f:5e:ad:72:e0:f3:89:f6:f0:
         8d:13:6d:c2:da:60:3c:60:44:08:1a:27:26:32:fb:46:4a:bb:
         ac:fe:d3:80:ab:a5:f8:fc:5e:1f:44:9c:4b:16:53:49:e6:01:
         c1:47:8d:0a:72:d9:5a:86:9a:40:fa:26:07:9e:ac:91:c2:32:
         dc:0d:30:10:93:61:0c:7a:c3:48:be:f7:e8:b2:59:07:db:7e:
         7a:66:53:c0:70:da:52:02:aa:f9:27:99:7e:0c:9a:8c:d1:3d:
         07:64:f9:ff:d4:15:44:1e:af:48:eb:b8:d3:96:b1:7a:d4:21:
         13:95:83:26:6a:b3:7e:ee:80:b1:2a:23:5a:1b:74:8f:4d:7f:
         25:99:7b:bc:86:af:b4:32:3b:19:59:e6:fe:b9:ac:75:cc:bc:
         3d:cc:c1:38:a7:2b:77:42:15:a5:23:ce:9b:69:cd:14:e4:af:
         ed:48:87:68:3b:1e:68:6b:cd:67:68:31:cf:28:4f:d3:76:0f:
         55:6a:82:31:f6:ee:9c:41:b5:35:19:0a:02:dd:c8:f8:c7:b7:
         38:86:68:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----