Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9305060e-d479-4a8f-8eba-23b31106c750/87801251-5532-3db8-9d0f-7b54d0b9a935.roa
File:                     87801251-5532-3db8-9d0f-7b54d0b9a935.roa (raw, json)
Hash identifier:          PPDbxgj0w8ubv21bCjDJiTE98Sq2vlq3/NGVg4Y9tSE=
Subject key identifier:   0A:5E:0C:4F:B2:23:3C:4E:37:39:97:BA:20:C9:DD:EC:B3:97:BC:40
Certificate issuer:       /CN=9305060e-d479-4a8f-8eba-23b31106c750
Certificate serial:       010D0C9F432858481915F0D0D9FD4F5E8C80EE00
Authority key identifier: CD:10:96:99:5A:E6:48:93:8D:20:B3:D5:48:0A:82:61:73:F5:E4:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9305060e-d479-4a8f-8eba-23b31106c750.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9305060e-d479-4a8f-8eba-23b31106c750/87801251-5532-3db8-9d0f-7b54d0b9a935.roa
Signing time:             Wed 04 Dec 2024 19:46:18 +0000
ROA not before:           Wed 04 Dec 2024 19:46:18 +0000
ROA not after:            Tue 04 Mar 2025 19:46:18 +0000
asID:                     14618
IP address blocks:        2601:1904:1300::/48 maxlen: 48

Validation:               Failed, certificate revoked on Fri 06 Dec 2024 13:57:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:19:15:f0:d0:d9:fd:4f:5e:8c:80:ee:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9305060e-d479-4a8f-8eba-23b31106c750
        Validity
            Not Before: Dec  4 19:46:18 2024 GMT
            Not After : Mar  4 19:46:18 2025 GMT
        Subject: CN=da890c94-0c61-4c38-a24c-545779695fd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:96:5a:fa:97:9d:c2:4b:83:e6:c0:8a:b0:25:
                    09:c7:4d:4d:ea:4d:64:72:46:bc:33:0a:a8:82:68:
                    d4:2b:b0:0c:ea:ce:7d:d3:15:c7:aa:63:04:4b:5c:
                    3a:80:22:cf:e8:14:52:1f:3d:f7:6d:ef:49:0e:a7:
                    00:56:b5:4d:28:d7:95:f4:c8:60:3b:d0:dc:b3:9b:
                    41:39:5a:e4:db:f8:0f:39:c5:c1:30:96:cc:9f:3f:
                    9d:33:fc:01:c5:99:86:1e:2a:b8:54:49:c3:fd:65:
                    72:78:27:1d:56:c3:8d:e5:9a:9b:7c:b6:92:25:3d:
                    fe:b3:15:64:bc:9c:a2:3b:e8:db:ac:7d:e6:22:b6:
                    99:60:a0:97:4f:66:32:f6:5f:7f:bf:b8:e3:fc:e8:
                    92:8f:c3:f8:22:7d:f6:64:08:74:7b:bd:56:dc:f5:
                    4a:d9:23:d9:5d:de:38:7f:17:b2:ee:2e:ad:26:32:
                    5a:aa:63:51:5c:90:d9:2a:18:56:55:40:f0:67:75:
                    f0:a1:41:3d:71:ce:0c:1a:24:43:9d:85:06:64:0f:
                    f8:42:ce:34:12:79:dc:73:4c:1f:91:04:f5:74:51:
                    1a:44:78:2f:7a:03:e2:e4:2d:df:ab:f4:b2:45:81:
                    f7:3b:62:f9:24:fa:57:1b:ea:90:cb:e2:46:b6:20:
                    e4:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:5E:0C:4F:B2:23:3C:4E:37:39:97:BA:20:C9:DD:EC:B3:97:BC:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9305060e-d479-4a8f-8eba-23b31106c750/87801251-5532-3db8-9d0f-7b54d0b9a935.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9305060e-d479-4a8f-8eba-23b31106c750/9305060e-d479-4a8f-8eba-23b31106c750.crl

            X509v3 Authority Key Identifier:
                keyid:CD:10:96:99:5A:E6:48:93:8D:20:B3:D5:48:0A:82:61:73:F5:E4:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9305060e-d479-4a8f-8eba-23b31106c750.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:1904:1300::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:a0:78:45:a0:b1:6b:58:15:bd:27:78:c8:2d:2c:7f:82:45:
         f5:16:b0:f8:27:93:42:a8:01:f0:8c:5c:93:67:a3:cb:dd:62:
         2a:7f:28:03:8e:f2:ba:ec:d2:2a:7f:9d:12:27:db:cc:f5:df:
         c4:33:b6:af:ef:0b:06:18:1d:ef:77:29:cd:a0:b3:62:d3:ca:
         7d:45:18:45:f5:23:22:9c:3a:f3:d5:d2:be:2c:af:49:85:3f:
         2b:18:4b:5a:50:66:81:fe:ec:3f:b2:8f:fe:91:e5:03:33:1d:
         2f:36:5a:1e:cc:e2:6e:cf:b4:53:e6:91:50:05:3e:a8:1a:cd:
         73:73:55:0d:cf:06:11:a9:ee:15:a4:06:eb:2a:52:a6:e0:d8:
         84:fb:7c:35:6a:20:81:9b:60:26:ff:3b:e6:77:dd:10:f0:eb:
         17:f3:8c:44:7b:d0:c6:71:7c:c6:6f:bd:21:ab:45:61:de:eb:
         96:76:78:84:6c:ea:d4:b5:28:9d:7a:d3:40:84:f7:72:b2:c5:
         21:75:1d:8f:4d:ff:f6:0a:70:4d:17:8b:21:ec:d2:d1:69:97:
         a4:14:1b:ec:63:42:dc:db:9c:7e:40:e5:3d:29:23:a7:0b:33:
         e3:33:67:73:6d:28:2a:86:60:e2:c3:c2:06:41:21:70:cd:5c:
         e2:a8:74:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 6 17:30:41 2024 by rpki-client on console-fra.rpki-client.org