Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/dfa83a6d-180e-3a27-9ac0-b048759fd1f9.roa
File:                     dfa83a6d-180e-3a27-9ac0-b048759fd1f9.roa (raw, json)
Hash identifier:          VSVNceE5LozsOxiRcwr68deSsrI3ZQO1h5MyxGaiEns=
Subject key identifier:   4A:1D:91:B9:E8:24:91:95:58:CF:4A:E0:E4:85:7A:72:FD:FD:FC:56
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F432858472B67416D52895AB35D575E40
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/dfa83a6d-180e-3a27-9ac0-b048759fd1f9.roa
Signing time:             Tue 10 Sep 2024 16:27:45 +0000
ROA not before:           Tue 10 Sep 2024 16:27:45 +0000
ROA not after:            Mon 09 Dec 2024 17:27:45 +0000
asID:                     397231
IP address blocks:        2610:a1:30fd::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 24 Sep 2024 16:25:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2b:67:41:6d:52:89:5a:b3:5d:57:5e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 10 16:27:45 2024 GMT
            Not After : Dec  9 17:27:45 2024 GMT
        Subject: CN=26fcd9a7-261d-46e2-ad6f-41df59f4cd88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:fd:b6:3d:7b:67:b8:c2:76:1a:9a:ec:5d:bd:
                    89:03:a1:b8:2e:e4:66:17:cd:e3:bb:15:fd:5c:ed:
                    de:53:ca:da:57:31:2c:6f:d7:b2:71:ed:29:33:52:
                    8d:17:78:6d:77:dc:80:ab:e6:0d:fa:be:92:52:ed:
                    b9:6b:fb:1f:28:2b:0c:a3:f9:07:89:4d:63:de:44:
                    60:c4:ba:0e:0a:6c:fe:5f:37:21:58:fe:1f:31:77:
                    8c:31:12:3b:fd:16:a7:00:47:87:2e:85:13:0a:10:
                    9a:04:51:b5:28:49:f3:47:39:24:7e:2a:91:2b:67:
                    cc:ec:94:68:37:54:cd:5e:d6:b2:f5:a8:d2:0e:4b:
                    12:55:8a:96:3d:f1:20:76:4e:af:bf:b9:7d:2e:a3:
                    cc:97:a6:1b:8b:6e:ae:d4:e2:01:37:66:65:38:48:
                    24:18:59:7e:12:e1:93:1f:44:62:d7:33:df:ba:ad:
                    cf:ec:3e:cc:01:b7:81:46:b2:ea:5c:31:62:e9:7a:
                    ed:03:02:1f:55:51:28:81:f0:c1:f6:3a:da:97:b0:
                    65:9c:f5:fd:98:3a:a4:6e:cb:35:9d:bd:09:a1:d2:
                    ac:3c:6f:13:23:c8:0d:b8:d2:35:f9:ab:f5:52:0b:
                    84:9b:6c:3f:f4:2f:70:e4:13:fd:2c:0d:3b:43:6b:
                    da:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:1D:91:B9:E8:24:91:95:58:CF:4A:E0:E4:85:7A:72:FD:FD:FC:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/dfa83a6d-180e-3a27-9ac0-b048759fd1f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:a1:30fd::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:f3:a9:f3:9a:07:55:de:7d:92:cb:31:d3:8b:19:52:8d:cf:
         ad:b3:ef:9e:ff:2e:91:43:a0:a5:1e:96:49:c9:6e:f1:32:8a:
         83:b3:18:ef:85:fb:a1:6d:2e:4e:c9:bd:e4:4e:2a:c9:7c:dd:
         6f:ca:0b:a8:33:4c:4f:4e:a7:08:65:23:c2:d3:25:6e:7b:03:
         91:e6:b2:f5:d4:96:16:84:43:03:3d:8e:72:b1:d4:43:4b:f5:
         1e:c4:12:54:83:7c:f2:08:62:31:8c:50:37:f6:8b:7c:4d:b0:
         21:21:96:95:78:10:e1:81:66:29:5e:36:64:2b:0e:8e:63:1a:
         eb:52:5c:12:9e:d9:c9:e6:fd:9a:a7:89:f9:83:69:2d:84:4d:
         fc:e5:9a:0c:fe:3f:6f:1b:58:9b:91:86:8d:25:c0:f7:87:6a:
         8c:c1:b7:28:33:53:ad:72:5e:53:59:f9:d0:8e:b9:65:36:6d:
         46:84:ea:df:98:63:e6:04:67:34:ba:9e:3b:ed:0a:f3:e8:fa:
         c1:29:f1:08:07:df:3d:25:bd:7a:39:fd:77:6e:64:23:26:22:
         38:b9:3e:ff:08:89:89:21:2a:59:34:a1:c0:2c:05:9d:1c:4e:
         8e:c9:7a:ce:3b:c8:6d:73:e5:6b:d5:44:79:2d:11:fe:e4:a5:
         bd:42:cf:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 24 18:50:59 2024 by rpki-client on console-fra.rpki-client.org