Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/3a7d3401-0fb8-3ca3-9bab-db1746410d5f.roa
File:                     3a7d3401-0fb8-3ca3-9bab-db1746410d5f.roa (raw, json)
Hash identifier:          ACxjXFkeqCTlD1ohIhs2GqYCI/9MScjXsyD61cro9U4=
Subject key identifier:   04:01:C9:6A:9D:90:E9:D7:33:28:6E:F4:34:A7:E0:47:4B:21:41:46
Certificate issuer:       /CN=45de47ca-0b52-44ab-af26-767d8a671192
Certificate serial:       010D0C9F4328583E58BB56C8CF896CE32EB19620
Authority key identifier: C6:08:99:27:C9:FE:89:0C:0A:9A:47:71:B0:FB:21:A6:9B:D1:80:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/3a7d3401-0fb8-3ca3-9bab-db1746410d5f.roa
Signing time:             Thu 23 Jun 2022 12:00:00 +0000
ROA not before:           Thu 23 Jun 2022 12:00:00 +0000
ROA not after:            Wed 04 Apr 2029 04:00:00 +0000
asID:                     5645
IP address blocks:        2607:f2c0::/32 maxlen: 32
                          2607:f2c0:9900::/40 maxlen: 40
                          2607:f2c0:9a00::/40 maxlen: 40

Validation:               Failed, certificate revoked on Thu 05 Sep 2024 19:36:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:58:bb:56:c8:cf:89:6c:e3:2e:b1:96:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45de47ca-0b52-44ab-af26-767d8a671192
        Validity
            Not Before: Jun 23 12:00:00 2022 GMT
            Not After : Apr  4 04:00:00 2029 GMT
        Subject: CN=90089876-e5c7-4c3e-9f14-6a913f1f9504
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:11:04:b9:d4:e8:bf:93:97:a5:c1:50:e3:b1:
                    9f:cc:91:ed:97:7f:70:84:3d:d7:4d:5f:a6:fe:d3:
                    74:a0:39:4a:44:de:2c:d7:0a:65:c3:ca:1b:92:81:
                    c6:56:ea:ca:f1:f9:e8:ff:db:ce:85:7c:c1:50:9f:
                    89:4a:b2:8b:9e:08:3d:a4:c0:dc:a4:cb:aa:06:ca:
                    fb:35:50:83:15:9a:b8:95:0f:f7:1d:b3:7d:42:92:
                    20:c9:8e:78:b2:ab:88:0d:36:e2:d5:85:45:2e:05:
                    86:48:5a:0c:b6:38:e2:e5:4c:69:b7:00:5b:f2:92:
                    20:7a:39:9a:44:86:01:0a:a5:c1:8a:58:37:4d:35:
                    b2:f2:64:f7:8b:ba:3b:d8:9c:3e:c9:fb:c1:33:07:
                    43:96:74:e1:48:d3:67:97:c5:a4:8d:70:bc:ca:7d:
                    1c:85:e2:68:45:fa:21:0d:86:21:29:96:f8:64:64:
                    49:6c:2f:f2:17:fb:88:e8:4d:e5:64:08:42:6d:44:
                    c4:71:63:d7:b9:93:a7:b6:79:03:a9:f7:8e:ab:e4:
                    90:7c:3d:6d:1e:33:16:52:c7:84:9c:7b:14:12:bd:
                    d0:14:69:7d:6b:59:74:ad:77:58:2a:14:f5:57:36:
                    43:6a:e4:3c:e1:16:6b:ae:77:b9:16:1d:64:d1:2a:
                    98:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:01:C9:6A:9D:90:E9:D7:33:28:6E:F4:34:A7:E0:47:4B:21:41:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/3a7d3401-0fb8-3ca3-9bab-db1746410d5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.crl

            X509v3 Authority Key Identifier:
                keyid:C6:08:99:27:C9:FE:89:0C:0A:9A:47:71:B0:FB:21:A6:9B:D1:80:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f2c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c8:1d:17:28:75:40:46:67:75:74:4b:a5:10:fa:dc:37:ba:71:
         7b:a7:aa:93:cf:dc:9e:d4:b9:88:41:d2:3c:e7:80:8f:8c:16:
         38:71:e4:97:4f:0d:48:a9:e6:7e:6b:06:c3:b2:b4:4d:4d:54:
         56:a5:68:07:9c:76:a6:eb:80:be:9d:40:40:02:1c:b0:9b:11:
         95:36:f3:d7:be:91:c9:eb:1b:2c:25:b7:6b:fc:5b:02:8a:fd:
         dd:c0:74:e0:00:72:ff:e9:ca:5f:bb:d7:5f:89:79:f7:85:e7:
         53:75:8e:b0:c6:be:6f:59:7c:5d:fe:7a:3b:bb:84:21:e7:f4:
         c9:82:4e:02:3d:ed:10:f2:bd:5e:3b:73:45:88:0b:89:ce:81:
         38:08:55:95:49:e4:51:21:5d:bb:4b:97:5a:35:75:38:54:5d:
         a9:5f:27:56:c6:cb:33:73:70:84:49:26:7a:0f:08:8e:0c:f9:
         af:06:e3:22:d4:e0:5e:27:ca:98:58:a7:b7:50:9a:fc:e6:19:
         ce:0d:5b:c6:0a:09:ed:b0:1f:88:d4:af:f2:e4:3c:17:3e:89:
         cf:9c:34:bd:59:4a:84:a3:78:b1:d5:d9:e9:4e:42:89:05:b8:
         46:0f:b3:1b:ed:9e:b8:b1:f0:59:b8:1d:0f:22:b5:b4:06:0d:
         13:88:75:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 5 21:53:22 2024 by rpki-client on console-ams.rpki-client.org