Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d86b3212-9ec9-3301-866d-af885bd2940a.roa
File:                     d86b3212-9ec9-3301-866d-af885bd2940a.roa (raw, json)
Hash identifier:          UuDY89KSNyKYHYKkZ64p1sK0QRi983/Te1r7gQQeYPs=
Subject key identifier:   6E:B5:0D:8D:52:A2:DA:B8:8C:37:0C:6F:80:8E:6D:7A:5C:AF:7B:B7
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F432858472B673D719F183A8A1B4EC700
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d86b3212-9ec9-3301-866d-af885bd2940a.roa
Signing time:             Tue 10 Sep 2024 16:27:43 +0000
ROA not before:           Tue 10 Sep 2024 16:27:43 +0000
ROA not after:            Mon 09 Dec 2024 17:27:43 +0000
asID:                     397213
IP address blocks:        2610:a1:30fc::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 24 Sep 2024 16:25:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2b:67:3d:71:9f:18:3a:8a:1b:4e:c7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 10 16:27:43 2024 GMT
            Not After : Dec  9 17:27:43 2024 GMT
        Subject: CN=ceb96a07-6f02-4066-a1ad-31bde59c24ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c0:7e:5f:27:43:3c:e6:07:81:5d:ca:94:92:
                    83:fc:ad:f3:d6:25:2b:b2:47:2c:9f:f0:ed:2e:e6:
                    5c:43:d4:8a:37:b5:07:0c:07:29:89:f2:24:46:c3:
                    bc:e2:77:af:92:38:22:ba:82:07:5c:e9:86:3d:fb:
                    29:5c:71:f7:ac:db:ea:86:26:d7:78:d5:42:53:99:
                    99:19:96:2c:25:76:0d:10:ec:a5:11:d9:82:59:02:
                    7a:c2:20:96:b0:40:f1:82:c8:3b:f5:ea:bf:f2:e3:
                    32:cc:72:eb:3a:41:88:43:67:74:90:f8:15:ad:d4:
                    ef:5a:77:66:f9:87:1b:8e:f0:43:f5:a8:76:4c:90:
                    49:30:95:92:b4:a4:07:48:6c:6e:dd:34:67:e5:48:
                    09:7c:ee:e9:7b:06:d6:37:41:f2:fb:13:ae:b4:80:
                    1f:00:dd:1f:32:1f:c4:12:80:7d:10:1e:6a:03:95:
                    30:f9:ee:85:90:ab:a9:a5:7d:2d:ec:70:7a:0b:19:
                    d2:8d:00:96:36:80:17:db:79:2b:2f:81:ee:57:57:
                    19:d6:e5:55:74:d5:90:26:2a:00:c0:a6:72:08:61:
                    bc:08:d2:d7:6c:ac:42:d8:21:0c:f5:4c:b0:82:55:
                    d2:57:3a:54:26:bb:39:ce:3a:e8:e8:e8:4e:dc:31:
                    49:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:B5:0D:8D:52:A2:DA:B8:8C:37:0C:6F:80:8E:6D:7A:5C:AF:7B:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d86b3212-9ec9-3301-866d-af885bd2940a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:a1:30fc::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:1d:2b:56:a3:e0:5a:c0:65:c1:8c:87:92:3f:b6:9f:ce:ed:
         73:c3:b5:a3:17:45:22:a7:34:77:a8:28:0f:ae:03:7e:06:f5:
         dd:17:c6:a8:b5:e8:73:44:9e:b0:61:21:60:dd:b0:f8:e1:cf:
         09:00:eb:70:83:a3:9e:25:f4:bb:28:b8:b7:1b:4a:a7:4f:5e:
         ec:7b:0f:8c:e3:a9:e7:dc:9c:27:ab:d6:82:22:02:fd:0a:de:
         5b:bb:f5:a6:e3:9c:85:d9:4a:65:b6:7f:94:37:48:ae:fe:a5:
         8e:e2:b6:5b:41:2d:4f:01:25:df:f1:f9:45:20:08:d5:8a:0e:
         e8:5e:f2:b6:cb:fe:fa:9f:ab:d7:e5:4e:2c:cd:b0:bd:24:8e:
         9a:77:4f:14:b7:a0:94:85:78:b1:9d:ae:8f:a6:5e:55:24:9c:
         ba:b1:9a:74:32:20:14:f1:0b:f2:b2:b6:f5:dc:21:4b:bb:9c:
         f0:6d:5d:c1:45:6d:ca:f1:11:d8:86:2c:03:a1:e1:51:24:e6:
         54:f9:e1:29:8b:37:82:a0:23:da:f7:a4:75:41:f6:bd:4f:e0:
         f2:01:29:b1:ac:ca:a7:e8:35:bd:3f:bf:b5:81:50:eb:42:8d:
         f5:1e:04:e1:6f:6f:13:fa:e7:58:54:2e:e2:3f:9b:18:a6:78:
         00:79:01:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----