Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/caef5039-bb7d-3b63-bbfa-06622186ccc9.roa
File:                     caef5039-bb7d-3b63-bbfa-06622186ccc9.roa (raw, json)
Hash identifier:          mQmCNIO/K+pwfs7gwnPknwYclT7dt8onyJbwqesjpCI=
Subject key identifier:   6A:1A:D2:C6:4C:17:14:73:22:17:BA:B1:A2:65:A2:BC:67:62:DE:06
Certificate issuer:       /CN=8c2a8d95-0290-4218-9b08-d157e5f127f9
Certificate serial:       010D0C9F432858472BB100C924515C65725BA480
Authority key identifier: D9:14:6A:25:0B:CC:BD:BE:46:97:7E:E1:6E:9A:B5:D6:32:82:E9:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/caef5039-bb7d-3b63-bbfa-06622186ccc9.roa
Signing time:             Tue 10 Sep 2024 18:56:21 +0000
ROA not before:           Tue 10 Sep 2024 18:56:21 +0000
ROA not after:            Mon 09 Dec 2024 19:56:21 +0000
asID:                     46733
IP address blocks:        2602:f9f4::/42 maxlen: 48

Validation:               Failed, certificate revoked on Mon 07 Oct 2024 12:22:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2b:b1:00:c9:24:51:5c:65:72:5b:a4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c2a8d95-0290-4218-9b08-d157e5f127f9
        Validity
            Not Before: Sep 10 18:56:21 2024 GMT
            Not After : Dec  9 19:56:21 2024 GMT
        Subject: CN=d305f705-3513-4d9f-a70a-926aa8ed2101
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:32:20:c3:bc:d5:36:26:33:39:d3:58:22:d6:
                    58:8c:9a:72:91:47:27:be:e0:a8:62:65:8a:bb:ef:
                    1e:d0:ec:6f:be:87:10:58:ec:c5:17:d5:62:b5:e2:
                    9b:c4:5f:e5:7c:85:8e:b0:83:ce:c6:48:85:d7:6f:
                    30:f0:f8:32:13:a0:d8:04:83:f5:73:b4:b3:0b:9a:
                    35:49:a2:da:69:97:8b:f7:18:17:14:6c:10:a8:d2:
                    d6:da:f6:60:d3:d3:2b:69:3a:20:f7:d3:8a:fc:e9:
                    46:34:16:a9:60:32:66:d9:72:1c:e6:e2:5e:4b:76:
                    87:81:8b:c7:32:7a:3f:67:65:b6:72:1f:8e:73:2c:
                    9c:22:61:b9:95:03:84:83:00:59:b0:94:ae:b6:7a:
                    9e:17:a5:4a:d5:2f:76:a2:f3:90:ea:1f:02:b6:5c:
                    4c:58:bf:b9:cf:bf:66:dc:58:89:4e:41:69:e6:e7:
                    f1:15:4d:6a:a1:bc:3a:9f:f0:e3:90:9c:05:53:07:
                    a8:1f:87:c8:cf:7b:55:c2:d2:8e:97:ea:39:46:e8:
                    f9:6c:42:36:60:a4:33:1f:d3:32:2e:d6:f0:67:c7:
                    d4:b8:16:17:40:99:63:eb:8a:13:01:a6:e6:df:51:
                    bb:3b:2b:c0:d7:19:54:24:53:97:04:74:47:2b:df:
                    70:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:1A:D2:C6:4C:17:14:73:22:17:BA:B1:A2:65:A2:BC:67:62:DE:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/caef5039-bb7d-3b63-bbfa-06622186ccc9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/8c2a8d95-0290-4218-9b08-d157e5f127f9.crl

            X509v3 Authority Key Identifier:
                keyid:D9:14:6A:25:0B:CC:BD:BE:46:97:7E:E1:6E:9A:B5:D6:32:82:E9:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9f4::/42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:34:2c:0d:0b:0f:05:49:59:2e:85:48:11:cd:d0:4c:9c:b2:
         98:f5:bd:03:13:1d:cb:30:44:86:dc:d5:14:fd:3b:d5:e6:e5:
         d5:c7:6f:bb:24:7d:4c:ed:a6:ad:b6:9e:de:99:0d:62:be:da:
         f9:f0:31:18:24:c1:3e:05:e6:07:a5:27:e9:27:24:7e:99:8b:
         62:02:78:c4:80:33:5d:8a:4c:1f:bc:f7:e0:99:22:86:0d:53:
         dd:2b:68:95:00:5e:10:c0:39:fa:82:d6:fc:44:95:5a:13:7d:
         41:a4:3b:57:ba:5b:4d:8f:9f:07:20:b2:0e:3f:f9:34:89:1b:
         a5:06:32:26:ba:24:6a:29:d2:76:a0:60:aa:a2:40:b7:c8:fb:
         fe:78:b8:72:4d:7f:c8:16:67:ae:56:fd:01:fa:15:e2:ab:33:
         c8:df:8c:7c:3c:12:c8:71:e0:fb:e3:04:1c:11:14:03:c8:c4:
         f4:e7:fb:ae:61:ef:33:6e:5b:bc:45:ce:db:da:c6:2a:16:39:
         49:d0:7a:16:f1:f4:df:93:e8:8f:17:f6:c3:b3:14:67:ac:1c:
         9a:ff:69:45:e4:5d:0b:28:7f:01:f2:9a:8b:27:ac:45:c2:0b:
         fe:69:78:ef:09:9b:76:e0:28:2e:22:55:4e:11:3d:c8:88:0c:
         67:f3:00:8c
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEcrsQDJJFFcZXJbpIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGMyYThkOTUtMDI5MC00MjE4LTliMDgtZDE1N2U1ZjEy
N2Y5MB4XDTI0MDkxMDE4NTYyMVoXDTI0MTIwOTE5NTYyMVowLzEtMCsGA1UEAxMk
ZDMwNWY3MDUtMzUxMy00ZDlmLWE3MGEtOTI2YWE4ZWQyMTAxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDIgw7zVNiYzOdNYItZYjJpykUcnvuCoYmWK
u+8e0OxvvocQWOzFF9ViteKbxF/lfIWOsIPOxkiF128w8PgyE6DYBIP1c7SzC5o1
SaLaaZeL9xgXFGwQqNLW2vZg09MraTog99OK/OlGNBapYDJm2XIc5uJeS3aHgYvH
Mno/Z2W2ch+OcyycImG5lQOEgwBZsJSutnqeF6VK1S92ovOQ6h8CtlxMWL+5z79m
3FiJTkFp5ufxFU1qobw6n/DjkJwFUweoH4fIz3tVwtKOl+o5Ruj5bEI2YKQzH9My
LtbwZ8fUuBYXQJlj64oTAabm31G7OyvA1xlUJFOXBHRHK99w9wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFGoa0sZMFxRzIhe6saJlorxnYt4GMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84YzJh
OGQ5NS0wMjkwLTQyMTgtOWIwOC1kMTU3ZTVmMTI3ZjkvY2FlZjUwMzktYmI3ZC0z
YjYzLWJiZmEtMDY2MjIxODZjY2M5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOGMyYThkOTUtMDI5MC00MjE4LTli
MDgtZDE1N2U1ZjEyN2Y5LzhjMmE4ZDk1LTAyOTAtNDIxOC05YjA4LWQxNTdlNWYx
MjdmOS5jcmwwHwYDVR0jBBgwFoAU2RRqJQvMvb5Gl37hbpq11jKC6Z8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy84YzJhOGQ5NS0wMjkwLTQyMTgtOWIwOC1kMTU3
ZTVmMTI3ZjkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcGJgL59AAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEg0LA0LDwVJWS6FSBHN0Eycspj1vQMTHcswRIbc1RT9O9Xm5dXH
b7skfUztpq22nt6ZDWK+2vnwMRgkwT4F5gelJ+knJH6Zi2ICeMSAM12KTB+89+CZ
IoYNU90raJUAXhDAOfqC1vxElVoTfUGkO1e6W02Pnwcgsg4/+TSJG6UGMia6JGop
0nagYKqiQLfI+/54uHJNf8gWZ65W/QH6FeKrM8jfjHw8Eshx4PvjBBwRFAPIxPTn
+65h7zNuW7xFztvaxioWOUnQehbx9N+T6I8X9sOzFGesHJr/aUXkXQsofwHymosn
rEXCC/5peO8Jm3bgKC4iVU4RPciIDGfzAIw=
-----END CERTIFICATE-----
Generated at Mon Oct 7 19:10:54 2024 by rpki-client on console-ams.rpki-client.org