Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/31e37b59-851f-3c5c-9ec3-c185e6ec9ab4.roa
File:                     31e37b59-851f-3c5c-9ec3-c185e6ec9ab4.roa (raw, json)
Hash identifier:          yISJyllPFurPwUX3tkgl6298/G2/mYOXa61ClvndfAw=
Subject key identifier:   D3:AA:B5:ED:26:C8:EA:4D:30:88:94:B6:2E:55:B7:5D:F0:79:45:2F
Certificate issuer:       /CN=d96ea6e4-95a3-4508-8c2f-046aed988ebe
Certificate serial:       010D0C9F43285843EB2DF562212EBC3D66F75200
Authority key identifier: E2:C3:95:94:85:FF:09:28:A1:8D:8A:F5:AB:7A:C9:0A:D6:AF:D3:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/31e37b59-851f-3c5c-9ec3-c185e6ec9ab4.roa
Signing time:             Fri 17 Nov 2023 13:59:46 +0000
ROA not before:           Fri 17 Nov 2023 13:59:46 +0000
ROA not after:            Thu 15 Feb 2024 13:59:46 +0000
asID:                     201217
IP address blocks:        2602:f9df:200::/40 maxlen: 40

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:eb:2d:f5:62:21:2e:bc:3d:66:f7:52:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d96ea6e4-95a3-4508-8c2f-046aed988ebe
        Validity
            Not Before: Nov 17 13:59:46 2023 GMT
            Not After : Feb 15 13:59:46 2024 GMT
        Subject: CN=310bc590-c293-4b10-962c-c1cbbcbdeef2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:61:8f:b1:2f:e2:1e:04:66:ef:f8:90:7e:c9:
                    eb:2d:d1:7b:35:22:94:a0:07:93:a6:30:b8:93:08:
                    eb:d7:23:e8:4f:80:a6:39:14:c9:e2:82:79:1f:fa:
                    7c:7a:41:68:ac:38:39:04:5e:a2:6d:8c:ea:cf:6a:
                    57:21:99:c8:05:30:5b:ea:f2:78:44:7a:99:a8:11:
                    1e:08:00:f7:9d:ed:bf:75:78:ad:38:66:37:27:52:
                    45:f7:1b:6c:00:d5:5d:0f:0f:d4:6b:05:80:b8:7e:
                    95:3a:c4:8d:87:84:16:87:f9:51:af:d5:c2:a2:cb:
                    9f:7f:88:2a:2c:aa:ad:c5:41:bc:b0:63:6f:e8:8d:
                    c4:c9:24:4a:87:4f:1f:02:a6:66:16:01:7d:f2:66:
                    02:43:7b:0f:ca:ec:a6:e4:1c:98:b2:8e:2c:58:05:
                    d1:b3:70:18:f8:56:06:1a:7a:36:76:cb:84:6b:ab:
                    f6:99:47:71:00:73:98:ec:6a:f5:d6:18:ef:95:b2:
                    eb:8c:85:02:fc:94:3e:f4:4d:cf:1b:ee:dd:03:be:
                    6d:3b:af:9b:01:88:a0:59:cc:7e:71:93:f2:fc:c4:
                    4b:8c:b7:b6:7a:f0:f0:a7:14:d4:c0:42:ea:d0:be:
                    b9:2f:7d:3c:7d:3a:60:70:08:d3:11:be:f5:ee:20:
                    1f:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:AA:B5:ED:26:C8:EA:4D:30:88:94:B6:2E:55:B7:5D:F0:79:45:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/31e37b59-851f-3c5c-9ec3-c185e6ec9ab4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/d96ea6e4-95a3-4508-8c2f-046aed988ebe.crl

            X509v3 Authority Key Identifier:
                keyid:E2:C3:95:94:85:FF:09:28:A1:8D:8A:F5:AB:7A:C9:0A:D6:AF:D3:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9df:200::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:82:19:39:1f:3b:82:57:40:55:b0:eb:00:f1:ae:26:de:bb:
         54:cf:b7:0d:e5:76:0d:f3:77:cf:6a:e3:d1:f8:e3:58:1f:ec:
         29:0e:ac:d3:f5:a0:d1:19:af:82:80:20:8b:83:6c:e2:2d:e4:
         e9:f6:65:d3:93:43:a6:59:ce:eb:14:8f:ff:a2:16:8d:d5:39:
         65:2b:c8:33:c9:76:4a:a0:dd:f3:15:35:75:f9:62:65:12:17:
         8b:b1:96:22:2a:5d:27:13:54:6f:1e:e1:51:da:0b:3d:99:f4:
         2c:e0:31:c7:3b:30:e8:70:72:db:f6:98:39:69:60:f2:77:e5:
         8b:53:45:ef:78:f7:ad:9e:ad:c7:7e:b1:46:e3:b0:f4:86:22:
         31:ec:53:a8:5e:4f:b9:76:0b:26:95:bf:c3:5c:f9:1f:b5:cb:
         7e:c8:bb:5f:b0:f9:89:45:30:a5:6a:65:e9:ef:01:6c:22:a3:
         42:05:01:7a:3f:25:c9:b4:5c:e7:bb:ff:68:a5:19:75:d8:bf:
         6a:6b:d7:16:dd:96:b1:8c:a5:e2:fa:53:f2:e0:56:fa:67:7a:
         f6:ef:06:4f:d5:f0:cb:02:83:33:80:d8:79:c0:3f:a5:18:0e:
         5d:75:4d:86:e5:a2:14:bf:18:d3:47:be:97:81:5c:0c:9d:4a:
         e9:61:84:02
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEPrLfViIS68PWb3UgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDk2ZWE2ZTQtOTVhMy00NTA4LThjMmYtMDQ2YWVkOTg4
ZWJlMB4XDTIzMTExNzEzNTk0NloXDTI0MDIxNTEzNTk0NlowLzEtMCsGA1UEAxMk
MzEwYmM1OTAtYzI5My00YjEwLTk2MmMtYzFjYmJjYmRlZWYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2WGPsS/iHgRm7/iQfsnrLdF7NSKUoAeTpjC4
kwjr1yPoT4CmORTJ4oJ5H/p8ekForDg5BF6ibYzqz2pXIZnIBTBb6vJ4RHqZqBEe
CAD3ne2/dXitOGY3J1JF9xtsANVdDw/UawWAuH6VOsSNh4QWh/lRr9XCosuff4gq
LKqtxUG8sGNv6I3EySRKh08fAqZmFgF98mYCQ3sPyuym5ByYso4sWAXRs3AY+FYG
Gno2dsuEa6v2mUdxAHOY7Gr11hjvlbLrjIUC/JQ+9E3PG+7dA75tO6+bAYigWcx+
cZPy/MRLjLe2evDwpxTUwELq0L65L308fTpgcAjTEb717iAf1wIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFNOqte0myOpNMIiUti5Vt13weUUvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kOTZl
YTZlNC05NWEzLTQ1MDgtOGMyZi0wNDZhZWQ5ODhlYmUvMzFlMzdiNTktODUxZi0z
YzVjLTllYzMtYzE4NWU2ZWM5YWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZDk2ZWE2ZTQtOTVhMy00NTA4LThj
MmYtMDQ2YWVkOTg4ZWJlL2Q5NmVhNmU0LTk1YTMtNDUwOC04YzJmLTA0NmFlZDk4
OGViZS5jcmwwHwYDVR0jBBgwFoAU4sOVlIX/CSihjYr1q3rJCtav0+YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9kOTZlYTZlNC05NWEzLTQ1MDgtOGMyZi0wNDZh
ZWQ5ODhlYmUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL53wIw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAhIIZOR87gldAVbDrAPGuJt67VM+3DeV2DfN3z2rj0fjjWB/sKQ6s
0/Wg0RmvgoAgi4Ns4i3k6fZl05NDplnO6xSP/6IWjdU5ZSvIM8l2SqDd8xU1dfli
ZRIXi7GWIipdJxNUbx7hUdoLPZn0LOAxxzsw6HBy2/aYOWlg8nfli1NF73j3rZ6t
x36xRuOw9IYiMexTqF5PuXYLJpW/w1z5H7XLfsi7X7D5iUUwpWpl6e8BbCKjQgUB
ej8lybRc57v/aKUZddi/amvXFt2WsYyl4vpT8uBW+md69u8GT9XwywKDM4DYecA/
pRgOXXVNhuWiFL8Y00e+l4FcDJ1K6WGEAg==
-----END CERTIFICATE-----
Generated at Sat Nov 18 12:47:49 2023 by rpki-client on console-fra.rpki-client.org