Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/857706eb-5a24-3b88-9168-985fbf103144.roa
File:                     857706eb-5a24-3b88-9168-985fbf103144.roa (raw, json)
Hash identifier:          9LcWxq2IOvaPcZwv8I2A3IrmjwHCEcFHd0YCeM/2FrU=
Subject key identifier:   A8:68:7A:99:90:B2:0E:54:80:B8:C5:D5:BD:D0:8E:2F:10:77:B1:62
Certificate issuer:       /CN=d96ea6e4-95a3-4508-8c2f-046aed988ebe
Certificate serial:       010D0C9F4328584476B1EFEAC2B522B8B77BA900
Authority key identifier: E2:C3:95:94:85:FF:09:28:A1:8D:8A:F5:AB:7A:C9:0A:D6:AF:D3:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/857706eb-5a24-3b88-9168-985fbf103144.roa
Signing time:             Sat 06 Jan 2024 13:23:03 +0000
ROA not before:           Sat 06 Jan 2024 13:23:03 +0000
ROA not after:            Fri 05 Apr 2024 12:23:03 +0000
asID:                     200954
IP address blocks:        2602:f9df:200::/40 maxlen: 48

Validation:               Failed, certificate revoked on Fri 26 Jan 2024 02:46:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:76:b1:ef:ea:c2:b5:22:b8:b7:7b:a9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d96ea6e4-95a3-4508-8c2f-046aed988ebe
        Validity
            Not Before: Jan  6 13:23:03 2024 GMT
            Not After : Apr  5 12:23:03 2024 GMT
        Subject: CN=ee735016-6a10-44ef-8d70-0bce2d141220
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:ef:9a:53:41:7a:ee:8a:a1:38:e4:e3:24:42:
                    67:a1:63:a7:4e:be:a1:12:4a:6b:3e:53:cd:f0:13:
                    62:4e:e3:09:1a:46:6e:48:f8:a8:0b:b3:f8:c9:ce:
                    7a:e5:88:94:5c:d3:bb:a1:01:92:82:47:0f:8e:7b:
                    76:a9:99:0c:34:ca:a9:a5:47:f4:e8:5d:1f:00:c2:
                    0d:20:49:e7:da:9c:d2:79:4f:ad:9e:86:9c:55:1c:
                    77:e0:28:bc:83:30:18:bb:ed:3d:82:eb:7c:fe:db:
                    20:03:43:95:d8:1b:52:0a:d4:1c:b2:06:f1:d2:83:
                    75:51:76:5f:35:ad:70:1a:59:4d:80:8a:9e:b3:0c:
                    0a:8e:75:e8:6b:97:40:1a:f5:9e:5e:f7:e8:27:b3:
                    7c:b4:93:2e:d0:29:92:2b:ef:2f:15:40:a9:be:7e:
                    db:f7:54:36:0f:72:55:4d:6a:e0:b0:10:9f:21:00:
                    68:8c:3c:37:cd:da:00:df:bc:de:e7:73:49:77:16:
                    fc:32:c8:bd:83:e2:a7:1d:78:4f:59:98:a9:ff:da:
                    bc:8c:70:9c:d4:47:8e:ea:8b:05:71:bd:00:b7:a6:
                    f0:92:5f:4f:e0:fc:01:d2:17:dd:bd:dd:0e:bf:93:
                    3c:c4:58:25:75:83:03:cd:db:15:89:3d:15:e2:a2:
                    b6:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:68:7A:99:90:B2:0E:54:80:B8:C5:D5:BD:D0:8E:2F:10:77:B1:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/857706eb-5a24-3b88-9168-985fbf103144.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/d96ea6e4-95a3-4508-8c2f-046aed988ebe.crl

            X509v3 Authority Key Identifier:
                keyid:E2:C3:95:94:85:FF:09:28:A1:8D:8A:F5:AB:7A:C9:0A:D6:AF:D3:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f9df:200::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:1c:9b:a4:b7:25:28:17:6c:b6:a5:ba:77:64:14:39:49:ab:
         ab:0c:47:07:c8:8f:d0:da:30:7a:7f:4d:1e:6c:b3:65:55:a9:
         f2:a2:24:6d:fb:62:e4:9e:6c:8c:63:e0:9c:2a:19:86:d5:76:
         f2:84:5a:ee:03:97:3b:45:3c:d6:f4:a3:2d:96:80:0e:d4:14:
         e2:10:80:1f:12:cb:ef:7d:19:8f:01:9d:e1:f5:c3:60:a4:a8:
         17:2b:a3:39:19:53:1f:0c:23:9d:95:e5:3f:57:30:1c:ae:b8:
         22:17:34:f9:52:0a:2a:a8:7a:b7:42:3e:f8:ac:67:72:5a:15:
         19:aa:bd:04:08:ef:ad:cb:ea:55:e7:31:a6:c3:7a:1b:c7:e8:
         e6:14:13:49:39:c5:fa:9c:22:dd:7c:c5:03:5a:cd:0b:d5:7a:
         43:05:a1:a4:22:38:00:94:5f:fd:85:41:af:1e:83:94:38:48:
         2f:cb:cc:61:c9:a6:0e:7f:66:07:c0:f3:7a:ae:55:92:ac:f2:
         a4:71:00:6d:11:c4:a7:d5:19:9d:9a:55:65:82:15:55:97:6f:
         a3:0d:2b:4c:13:71:f0:7b:96:20:1b:a0:a1:0f:1a:90:5b:98:
         49:7e:2a:f7:51:92:6d:9d:37:f5:02:71:02:ef:48:af:3a:c4:
         1d:a9:e7:d2
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWER2se/qwrUiuLd7qQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDk2ZWE2ZTQtOTVhMy00NTA4LThjMmYtMDQ2YWVkOTg4
ZWJlMB4XDTI0MDEwNjEzMjMwM1oXDTI0MDQwNTEyMjMwM1owLzEtMCsGA1UEAxMk
ZWU3MzUwMTYtNmExMC00NGVmLThkNzAtMGJjZTJkMTQxMjIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAie+aU0F67oqhOOTjJEJnoWOnTr6hEkprPlPN
8BNiTuMJGkZuSPioC7P4yc565YiUXNO7oQGSgkcPjnt2qZkMNMqppUf06F0fAMIN
IEnn2pzSeU+tnoacVRx34Ci8gzAYu+09gut8/tsgA0OV2BtSCtQcsgbx0oN1UXZf
Na1wGllNgIqeswwKjnXoa5dAGvWeXvfoJ7N8tJMu0CmSK+8vFUCpvn7b91Q2D3JV
TWrgsBCfIQBojDw3zdoA37ze53NJdxb8Msi9g+KnHXhPWZip/9q8jHCc1EeO6osF
cb0At6bwkl9P4PwB0hfdvd0Ov5M8xFgldYMDzdsViT0V4qK25wIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFKhoepmQsg5UgLjF1b3Qji8Qd7FiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kOTZl
YTZlNC05NWEzLTQ1MDgtOGMyZi0wNDZhZWQ5ODhlYmUvODU3NzA2ZWItNWEyNC0z
Yjg4LTkxNjgtOTg1ZmJmMTAzMTQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZDk2ZWE2ZTQtOTVhMy00NTA4LThj
MmYtMDQ2YWVkOTg4ZWJlL2Q5NmVhNmU0LTk1YTMtNDUwOC04YzJmLTA0NmFlZDk4
OGViZS5jcmwwHwYDVR0jBBgwFoAU4sOVlIX/CSihjYr1q3rJCtav0+YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9kOTZlYTZlNC05NWEzLTQ1MDgtOGMyZi0wNDZh
ZWQ5ODhlYmUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL53wIw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAhRybpLclKBdstqW6d2QUOUmrqwxHB8iP0Nowen9NHmyzZVWp8qIk
bfti5J5sjGPgnCoZhtV28oRa7gOXO0U81vSjLZaADtQU4hCAHxLL730ZjwGd4fXD
YKSoFyujORlTHwwjnZXlP1cwHK64Ihc0+VIKKqh6t0I++KxncloVGaq9BAjvrcvq
VecxpsN6G8fo5hQTSTnF+pwi3XzFA1rNC9V6QwWhpCI4AJRf/YVBrx6DlDhIL8vM
YcmmDn9mB8Dzeq5VkqzypHEAbRHEp9UZnZpVZYIVVZdvow0rTBNx8HuWIBugoQ8a
kFuYSX4q91GSbZ039QJxAu9IrzrEHann0g==
-----END CERTIFICATE-----
Generated at Fri Jan 26 03:26:24 2024 by rpki-client on console-fra.rpki-client.org