Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f35cbfd8-cfe3-32fc-b51e-c95212145ee3.roa
File:                     f35cbfd8-cfe3-32fc-b51e-c95212145ee3.roa (raw, json)
Hash identifier:          iHxB9CitU/zaTrn9jekSXbxA5+c3/s4PBkX7+L0bTr0=
Subject key identifier:   64:07:D3:84:67:E5:E1:74:91:0E:98:4A:66:4D:3F:CE:8D:D6:94:24
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F432858472B6740C913DB646BAD888B80
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f35cbfd8-cfe3-32fc-b51e-c95212145ee3.roa
Signing time:             Tue 10 Sep 2024 16:27:45 +0000
ROA not before:           Tue 10 Sep 2024 16:27:45 +0000
ROA not after:            Mon 09 Dec 2024 17:27:45 +0000
asID:                     397223
IP address blocks:        2610:a1:30fd::/48 maxlen: 48

Validation:               Failed, certificate revoked on Tue 24 Sep 2024 16:25:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2b:67:40:c9:13:db:64:6b:ad:88:8b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep 10 16:27:45 2024 GMT
            Not After : Dec  9 17:27:45 2024 GMT
        Subject: CN=efba982e-0980-4697-b75b-f165af17231b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:05:68:51:ca:d3:00:c2:72:41:6a:ea:96:91:
                    b5:9a:11:e6:f1:5f:3b:b1:ef:38:18:a8:d7:e2:7c:
                    40:76:4f:e0:69:65:2d:3d:10:c2:4d:69:14:09:ca:
                    b7:26:7f:8a:f9:05:5c:77:ec:fa:51:d0:96:5e:c2:
                    d2:a1:b4:3b:56:39:b2:f4:f2:c3:02:89:a0:c9:90:
                    9a:cd:4a:cb:a9:41:bc:0c:f1:54:dc:9d:df:83:d6:
                    58:57:5c:f9:45:31:1b:ed:1a:49:5d:61:40:89:96:
                    45:eb:8a:1a:51:4f:84:2b:62:21:39:4c:96:5d:63:
                    6e:7b:7d:5e:c0:e5:c2:85:8c:12:7c:79:7e:44:23:
                    5f:be:aa:36:c4:e7:41:17:94:bb:0e:80:7c:6f:22:
                    33:38:50:ec:91:fa:bf:81:4d:61:d0:65:1e:d7:11:
                    2b:78:4a:02:00:48:8a:ee:a1:49:d3:b3:fa:0b:cf:
                    dd:87:8c:e3:6d:3b:b4:e8:e5:28:c5:b3:1f:15:03:
                    b9:38:42:c4:a6:f5:64:78:ee:e6:79:6f:66:98:c6:
                    ff:67:5d:41:fb:23:7d:ef:67:ec:b6:8d:11:e6:42:
                    0d:55:bb:59:4a:08:c8:46:d0:86:8c:b1:a2:b3:1e:
                    85:c3:c9:d4:b2:2a:31:ba:66:57:13:0c:d4:28:2d:
                    cb:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:07:D3:84:67:E5:E1:74:91:0E:98:4A:66:4D:3F:CE:8D:D6:94:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/f35cbfd8-cfe3-32fc-b51e-c95212145ee3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:a1:30fd::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:df:72:80:fb:44:81:6b:15:4d:32:3b:41:5a:78:a4:da:6e:
         b3:69:3f:aa:0b:84:bc:4a:be:bc:d8:53:9a:db:61:d6:c0:8d:
         c9:41:c0:82:33:c8:8e:0d:b1:60:8d:03:b7:e1:3a:58:53:9a:
         e2:8e:97:fd:98:24:c8:db:bd:4c:d5:df:c7:44:83:10:a0:1f:
         00:9d:75:1b:4c:c5:72:1e:6f:5d:3b:f0:b1:bc:e1:d3:c2:73:
         68:60:09:32:a6:fa:48:1f:e5:f7:ab:ba:13:48:47:cd:79:a3:
         46:30:5b:1d:de:42:d2:17:fa:8c:d6:94:90:89:3c:0c:0f:5f:
         72:18:fc:44:bc:7a:a7:4b:9e:30:d4:15:18:6e:13:cb:ad:ea:
         d7:55:c6:47:42:4b:34:9e:35:a1:bd:cc:e3:c9:4c:95:bc:b6:
         d6:0a:c4:d2:64:18:2e:da:b9:af:ca:e4:83:98:be:56:3c:d4:
         0d:27:5f:42:72:12:89:2e:80:45:36:c1:01:36:13:2e:1a:96:
         78:7b:c7:48:90:88:2a:ba:26:bc:7c:e4:6a:30:25:95:13:0b:
         43:c4:dc:0d:5b:ef:82:7e:a7:85:fa:dc:bc:cc:59:33:5f:ef:
         35:ae:99:b1:bc:22:48:47:87:70:84:7c:95:87:46:6f:95:20:
         05:74:b3:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 24 18:50:59 2024 by rpki-client on console-fra.rpki-client.org