Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/4f361c32-6790-3165-896a-4bbb4a83ad88.roa
File:                     4f361c32-6790-3165-896a-4bbb4a83ad88.roa (raw, json)
Hash identifier:          x5eNboCHCQLV7TFfxx04rs2XVN/1BQVKDP4XA9rvxVw=
Subject key identifier:   65:8F:8B:B6:B5:B7:99:B2:96:A9:81:87:12:31:D9:7F:1C:4B:33:D2
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F43285845AA1742279E7D30EB65C20B50
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/4f361c32-6790-3165-896a-4bbb4a83ad88.roa
Signing time:             Thu 25 Apr 2024 16:00:21 +0000
ROA not before:           Thu 25 Apr 2024 16:00:21 +0000
ROA not after:            Wed 24 Jul 2024 16:00:21 +0000
asID:                     16591
IP address blocks:        2605:a600::/31 maxlen: 31

Validation:               Failed, certificate revoked on Thu 25 Apr 2024 16:02:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:aa:17:42:27:9e:7d:30:eb:65:c2:0b:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Apr 25 16:00:21 2024 GMT
            Not After : Jul 24 16:00:21 2024 GMT
        Subject: CN=0ecb673f-64ab-490f-b036-408aa2fece46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:b3:b8:aa:8e:1a:5b:4d:1b:2d:e4:1e:b6:be:
                    bd:92:15:7b:9d:ad:40:18:51:2c:7a:cb:dc:0a:38:
                    0e:15:26:ef:76:f4:15:cf:b9:a6:09:a4:16:c5:95:
                    81:69:a9:c7:5d:3b:da:82:22:9e:03:a9:2d:bc:76:
                    49:42:30:c6:0c:52:7d:4d:88:27:09:bd:5a:2c:cf:
                    39:f5:c2:02:db:93:f8:a8:29:c6:f3:ad:78:a2:d2:
                    2d:14:c5:bb:35:da:a7:2a:dc:6d:e6:3a:04:aa:21:
                    d7:1b:53:57:8d:44:c1:66:17:c7:b0:bb:9a:78:d5:
                    6b:c8:0d:10:d6:3c:39:72:34:6a:4c:0a:e1:82:49:
                    f1:b7:e2:35:5c:96:48:21:20:44:59:a1:04:b4:8b:
                    45:d4:56:ec:d8:2d:3f:8c:f8:54:17:44:db:60:6a:
                    fc:6e:a1:72:d0:18:e8:9f:61:01:f6:97:e4:c8:c2:
                    72:31:2e:5e:af:fd:46:9a:44:5b:bd:87:83:5f:ce:
                    81:7b:77:51:b8:11:94:b0:ee:7f:46:2e:a1:66:25:
                    51:6b:ae:f8:95:bb:60:62:5d:e6:54:8f:11:55:ea:
                    f2:fe:54:94:a7:de:7c:57:c2:12:3c:50:4c:c1:bf:
                    a4:1c:2f:6b:60:10:2e:7f:37:2b:bf:1f:07:ac:7f:
                    cf:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:8F:8B:B6:B5:B7:99:B2:96:A9:81:87:12:31:D9:7F:1C:4B:33:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/4f361c32-6790-3165-896a-4bbb4a83ad88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a600::/31

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:3f:fe:90:f6:95:57:51:73:2a:b7:df:0f:ac:e0:15:13:ae:
         0f:da:4e:2d:d6:6f:77:e2:96:33:79:1e:a2:b2:42:dd:9a:5b:
         3e:e1:df:c8:3a:32:9e:25:5d:0e:0a:44:d0:fd:2c:99:39:dc:
         18:33:78:95:45:01:36:e1:b8:96:d5:f3:1e:46:6e:6f:51:6e:
         f4:81:c1:b7:7f:59:25:c0:4d:fe:9f:15:69:0c:55:8a:0d:1d:
         23:0b:d0:bc:30:ba:ab:e6:1f:a1:c1:d5:4d:e0:f7:92:5e:a4:
         d0:cd:33:71:7a:98:a7:ac:c5:dc:7b:62:d4:78:cb:67:f7:88:
         5a:24:51:96:33:5a:fd:b1:b9:a3:67:2f:d3:53:1a:d0:fd:85:
         c8:c2:58:97:b8:97:e9:27:89:d5:3f:12:02:20:15:b0:26:42:
         05:97:ad:e4:31:88:92:8a:06:29:c0:4d:9d:c0:ec:1b:44:b9:
         01:db:c0:5b:0e:34:75:39:41:c9:9c:94:1b:92:41:f2:00:45:
         ef:ef:d4:73:60:19:89:40:5e:ba:ad:f0:57:90:40:ac:58:c1:
         af:6d:d5:0c:0b:6c:28:7c:83:4a:76:d6:42:81:8e:e3:4d:38:
         89:48:49:7a:f6:52:b5:70:75:12:27:3a:ea:48:37:6d:e7:ab:
         74:9e:5f:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----