Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6fd900fb-7b81-4099-bb11-824fdecd0a86/15cc8f6f-26ef-36d6-b3fd-e8effcdd60c5.roa
File:                     15cc8f6f-26ef-36d6-b3fd-e8effcdd60c5.roa (raw, json)
Hash identifier:          8maSQmWM6i50h8ialdT0aiOS6W92g/pyIT9+SpOPXaI=
Subject key identifier:   1C:AD:11:FF:D9:4D:94:04:C0:45:C6:C6:B6:52:08:93:20:A8:70:FD
Certificate issuer:       /CN=6fd900fb-7b81-4099-bb11-824fdecd0a86
Certificate serial:       010D0C9F432858474420B9315FD97C809C84DC00
Authority key identifier: 3B:29:4A:9B:4E:89:0C:58:09:38:E8:26:5A:18:EE:48:9E:18:0B:A5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6fd900fb-7b81-4099-bb11-824fdecd0a86.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6fd900fb-7b81-4099-bb11-824fdecd0a86/15cc8f6f-26ef-36d6-b3fd-e8effcdd60c5.roa
Signing time:             Thu 19 Sep 2024 13:00:42 +0000
ROA not before:           Thu 19 Sep 2024 13:00:42 +0000
ROA not after:            Wed 18 Dec 2024 14:00:42 +0000
asID:                     62501
IP address blocks:        2620:c0:a000::/48 maxlen: 48

Validation:               Failed, certificate revoked on Thu 21 Nov 2024 14:50:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:44:20:b9:31:5f:d9:7c:80:9c:84:dc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fd900fb-7b81-4099-bb11-824fdecd0a86
        Validity
            Not Before: Sep 19 13:00:42 2024 GMT
            Not After : Dec 18 14:00:42 2024 GMT
        Subject: CN=210d5fa8-de10-4bfe-b1af-cf369e103c69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:fb:f3:42:d2:16:93:d3:8e:c7:8b:94:6d:31:
                    cb:e2:07:45:59:df:27:ba:db:ba:e3:31:bc:ad:52:
                    47:3e:9f:60:c5:10:42:90:a0:f1:6c:80:94:f4:64:
                    8d:40:11:03:e7:97:54:13:51:5b:13:0c:ab:27:f0:
                    f5:96:c0:58:59:ff:52:cc:15:a0:ce:89:4e:29:b0:
                    5a:15:f9:79:c3:c8:d6:63:93:22:66:95:07:f2:4f:
                    5d:11:16:44:a4:d0:23:a9:6a:38:79:ed:17:95:bc:
                    a8:e6:17:66:ed:fb:72:38:d5:d7:dd:34:d9:9c:f4:
                    f2:6e:7c:8b:a9:20:e1:c1:8c:e1:f7:c4:3f:9e:4e:
                    a7:61:28:21:6e:21:7b:89:98:4a:c9:cb:91:c9:b6:
                    36:c5:bf:0e:d8:ec:7a:e3:39:9b:1a:d4:6d:08:05:
                    c3:35:f1:db:81:b4:0a:f8:04:b4:c4:b6:95:0a:e7:
                    61:51:84:5e:44:d5:16:f9:25:bd:e2:fa:6f:ea:ec:
                    66:4b:aa:c9:56:5a:fd:d9:1f:87:b5:94:fc:a1:ea:
                    2c:f2:e1:b3:01:db:29:af:bb:20:83:c8:43:e4:59:
                    32:dd:d9:c9:f2:4a:ec:90:8b:93:2b:0e:03:8e:37:
                    5d:23:74:99:f9:5b:e8:54:b4:5e:9b:86:ac:3b:fc:
                    1b:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:AD:11:FF:D9:4D:94:04:C0:45:C6:C6:B6:52:08:93:20:A8:70:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6fd900fb-7b81-4099-bb11-824fdecd0a86/15cc8f6f-26ef-36d6-b3fd-e8effcdd60c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6fd900fb-7b81-4099-bb11-824fdecd0a86/6fd900fb-7b81-4099-bb11-824fdecd0a86.crl

            X509v3 Authority Key Identifier:
                keyid:3B:29:4A:9B:4E:89:0C:58:09:38:E8:26:5A:18:EE:48:9E:18:0B:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6fd900fb-7b81-4099-bb11-824fdecd0a86.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:c0:a000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:5d:28:46:a1:f3:69:fe:27:9b:87:e4:9e:8c:2d:32:02:48:
         af:c7:db:d3:93:ec:32:67:68:fc:bb:a4:dc:b7:7e:8f:91:6e:
         c6:3e:e1:3e:6f:59:45:99:ef:97:62:69:65:c4:78:59:5e:45:
         0e:24:20:6f:27:e8:e7:cf:87:d7:27:da:79:82:dc:c6:53:00:
         a2:c2:89:8c:1f:92:9a:6c:38:71:97:a9:53:02:76:60:8b:10:
         41:55:aa:89:ca:b8:ec:e2:01:0e:41:af:7f:44:92:69:d2:f8:
         19:f1:88:29:b1:49:5c:b5:38:34:87:3c:50:dc:7b:e5:9a:f7:
         4d:a8:a1:16:12:69:b8:cf:8a:ad:f6:7f:55:76:41:9a:9d:d7:
         2a:b8:f8:04:7b:6f:a9:dc:cb:e8:52:58:09:1e:cb:35:7a:34:
         71:f6:1d:65:16:5f:f9:9e:35:f2:fd:aa:b6:a8:47:3d:83:54:
         66:39:1a:43:16:aa:b7:a9:c0:da:71:26:92:37:ea:38:99:48:
         61:28:a3:29:f1:32:6d:1f:3d:ee:d7:36:00:c2:4e:a8:8a:75:
         7c:28:af:10:8b:f1:c8:e5:5d:d8:30:08:78:27:f0:46:cb:b9:
         85:01:92:23:a6:f1:25:ea:51:ec:40:88:2c:4c:f3:40:de:bd:
         a7:5b:83:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----