Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c305f65e-54a0-41ec-b65c-ae91eca6cca0/c429450c-68b2-3318-986a-f90f5999c12a.roa
File:                     c429450c-68b2-3318-986a-f90f5999c12a.roa (raw, json)
Hash identifier:          un46Dm9VYUKMncVHpnBLdcQcF2/UYdXkiHxkzQo8SlY=
Subject key identifier:   2A:64:40:A3:0A:18:A5:8F:25:BC:51:4B:AB:51:63:00:0F:1C:B1:76
Certificate issuer:       /CN=c305f65e-54a0-41ec-b65c-ae91eca6cca0
Certificate serial:       010D0C9F43285845F683D7F0EAE2DB2D105F3B00
Authority key identifier: C9:DA:77:C7:7B:27:46:4E:B6:81:F6:A4:65:67:3D:45:C5:D4:C5:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c305f65e-54a0-41ec-b65c-ae91eca6cca0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c305f65e-54a0-41ec-b65c-ae91eca6cca0/c429450c-68b2-3318-986a-f90f5999c12a.roa
Signing time:             Thu 23 May 2024 01:00:26 +0000
ROA not before:           Thu 23 May 2024 01:00:26 +0000
ROA not after:            Wed 21 Aug 2024 01:00:26 +0000
asID:                     400792
IP address blocks:        2607:2540::/32 maxlen: 48

Validation:               Failed, certificate revoked on Fri 02 Aug 2024 10:04:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:f6:83:d7:f0:ea:e2:db:2d:10:5f:3b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c305f65e-54a0-41ec-b65c-ae91eca6cca0
        Validity
            Not Before: May 23 01:00:26 2024 GMT
            Not After : Aug 21 01:00:26 2024 GMT
        Subject: CN=3978c728-729a-4b4a-850c-3a29e0e3a018
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:0c:4d:40:a6:7c:fa:fc:ad:10:f5:e2:f5:bb:
                    d7:29:89:de:fe:b3:d4:64:6b:14:c6:42:17:d6:44:
                    64:25:d0:f2:dc:be:41:f0:f0:e5:42:e4:1f:f2:e4:
                    24:bb:9b:ee:cf:2e:f9:4c:78:cf:cc:71:5d:be:b4:
                    d5:62:88:14:d2:43:89:aa:27:b4:44:9a:08:64:07:
                    89:3d:33:51:f2:cc:7b:5c:09:c5:3f:25:e7:cf:5e:
                    3d:bd:30:3f:4b:87:25:f3:19:d8:c7:93:e6:13:6f:
                    6b:b0:cb:29:a8:ef:75:b6:ec:d2:ee:5a:84:46:37:
                    d2:7f:91:e4:f4:d3:59:61:8d:1e:3e:3c:0b:7b:1d:
                    76:fa:70:00:cb:f3:51:0b:ac:f8:df:31:c7:8b:e5:
                    c3:87:98:47:0f:fb:e5:50:b2:b7:8f:01:bc:af:5f:
                    b0:e5:57:88:9e:fb:5d:94:97:00:c9:e0:13:dc:66:
                    b6:fb:4f:30:46:f1:da:ff:3d:ce:ad:59:8c:5c:20:
                    03:46:59:cc:ca:0b:10:32:b4:55:26:98:29:70:39:
                    fa:77:97:0f:9f:26:01:68:8b:3b:c0:fa:2d:19:8e:
                    e1:9b:b8:de:26:b6:ac:47:75:16:92:15:34:cb:62:
                    8e:0b:2a:99:68:57:38:c5:46:f0:1f:8e:f3:25:84:
                    3a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:64:40:A3:0A:18:A5:8F:25:BC:51:4B:AB:51:63:00:0F:1C:B1:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c305f65e-54a0-41ec-b65c-ae91eca6cca0/c429450c-68b2-3318-986a-f90f5999c12a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c305f65e-54a0-41ec-b65c-ae91eca6cca0/c305f65e-54a0-41ec-b65c-ae91eca6cca0.crl

            X509v3 Authority Key Identifier:
                keyid:C9:DA:77:C7:7B:27:46:4E:B6:81:F6:A4:65:67:3D:45:C5:D4:C5:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c305f65e-54a0-41ec-b65c-ae91eca6cca0.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:2540::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:4b:ad:f9:5f:e5:4c:91:c5:b1:28:45:35:a5:69:33:b7:46:
         61:9c:1b:4a:27:03:8f:61:15:00:d6:57:4a:93:07:ef:fb:6e:
         8f:9d:63:ed:f3:57:c3:99:68:64:8f:4d:4c:13:9b:f7:b1:47:
         eb:2e:37:e9:49:b7:2d:25:e8:de:94:1c:76:04:e7:48:7a:dc:
         5b:a2:77:9e:36:d2:5e:6b:38:a6:62:11:cb:68:46:e1:21:ab:
         bb:a0:f9:18:6a:0e:35:6f:c4:ac:7d:16:38:1f:46:5e:5c:4b:
         fa:e6:28:a5:f3:38:11:b7:56:4a:71:47:df:22:73:cb:49:78:
         b0:04:72:c3:a7:2c:69:81:03:8a:83:51:8e:09:1f:1f:cb:3a:
         bd:67:92:48:6e:68:77:b0:af:55:48:d9:92:44:e8:b0:ec:c0:
         5b:79:01:7b:e2:8a:f6:5c:b6:1b:07:fb:a8:6e:5e:1b:fd:88:
         a2:ab:f4:d6:fd:3c:34:53:d7:ed:da:80:2e:0c:0a:20:66:81:
         77:13:38:72:e4:ac:87:71:47:ed:30:13:35:02:5d:a2:8b:e6:
         79:cb:40:26:c1:33:06:47:2c:2f:cd:e6:7c:de:b0:a9:eb:83:
         a0:df:88:9b:02:2b:dd:db:f4:9a:96:81:89:b8:1a:f4:6d:10:
         77:7d:74:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----