Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/112fcf8b-7bc4-3682-a563-788567adc23d.roa
File:                     112fcf8b-7bc4-3682-a563-788567adc23d.roa (raw, json)
Hash identifier:          MT85TGPvWHOan4VAkRCCknwkVsLX1AlY1nyLBOQ+8Dw=
Subject key identifier:   8F:CD:12:7C:A6:AD:99:AF:E3:35:3B:CD:B9:7A:FB:FF:EF:A2:D7:2B
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F43285841D3DD9F8DAE2DC0AAB690CA80
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/112fcf8b-7bc4-3682-a563-788567adc23d.roa
Signing time:             Mon 08 May 2023 12:00:00 +0000
ROA not before:           Mon 08 May 2023 12:00:00 +0000
ROA not after:            Sun 10 Aug 2025 04:00:00 +0000
asID:                     15169
IP address blocks:        2001:4860:4823::/48 maxlen: 48

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:31:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:d3:dd:9f:8d:ae:2d:c0:aa:b6:90:ca:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: May  8 12:00:00 2023 GMT
            Not After : Aug 10 04:00:00 2025 GMT
        Subject: CN=52ab19d9-712f-4b21-8df0-c2a022f2b785
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:86:64:e9:f8:96:08:5d:ff:f1:43:b9:a3:d7:
                    43:68:4d:60:e3:78:18:2d:2b:bc:18:4f:47:4f:6c:
                    84:a4:1c:97:06:1c:0d:91:d8:bf:61:ff:7c:05:6f:
                    7e:df:f0:e2:20:1f:59:22:1f:21:ad:3a:39:e2:d6:
                    ba:14:87:28:47:cf:a9:b7:80:5e:f3:4d:a3:7f:12:
                    ce:b7:90:93:b8:05:a5:13:ab:f9:60:2b:d4:db:ea:
                    02:7c:e8:c4:65:d5:70:03:b2:1e:cd:58:f2:04:a8:
                    d8:5e:73:ec:1c:b2:5a:9a:f3:e8:0f:28:8d:6b:19:
                    51:f4:c4:8c:38:29:3e:bd:aa:a0:e1:56:4a:3a:9c:
                    b3:d0:65:39:10:27:06:d2:4c:c9:65:80:6f:69:95:
                    f6:f6:b0:e9:6a:ae:db:0a:02:d2:a4:8d:91:5f:95:
                    5a:bb:87:5b:7b:79:6c:1f:6f:6c:64:b4:65:9d:27:
                    69:96:31:b8:12:2d:d4:0d:4e:9d:dc:8c:fb:94:e8:
                    f3:b7:46:ff:15:89:f8:b6:22:2e:eb:14:0a:29:a0:
                    79:2c:47:09:08:c7:c3:6b:d7:23:73:90:69:a4:8f:
                    a9:12:37:21:36:41:77:50:f1:49:61:7f:a0:72:eb:
                    b0:76:a7:fd:a4:49:d2:8e:62:5b:10:e0:99:6a:89:
                    d0:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:CD:12:7C:A6:AD:99:AF:E3:35:3B:CD:B9:7A:FB:FF:EF:A2:D7:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/112fcf8b-7bc4-3682-a563-788567adc23d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4860:4823::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:53:28:f3:be:70:88:8c:48:c6:d9:0c:15:af:b0:e0:d4:62:
         e4:be:58:65:51:4e:48:a6:bf:5f:b1:cc:3c:39:50:d5:89:ef:
         46:ec:9b:cd:74:cf:f0:a9:6b:b5:c5:09:c1:3a:63:51:ff:df:
         36:62:03:6c:47:67:9a:0a:54:2a:ab:29:47:76:8b:92:59:49:
         da:3b:64:12:4b:a6:41:5c:3b:0f:06:b8:5e:87:42:12:5b:ea:
         f0:1b:ba:85:28:a5:e4:1f:f0:9a:f3:b1:d2:f6:e6:dc:48:1a:
         12:dc:48:40:62:3a:1d:61:9d:e4:bf:33:47:76:69:58:d6:72:
         f2:82:48:1a:6d:f3:23:bc:a9:32:48:04:d4:b0:1d:39:f0:6b:
         da:76:41:62:01:c7:02:fa:30:7e:7c:4e:c8:cf:94:d6:d5:e3:
         01:a0:c8:a0:04:cc:b1:34:16:7b:3d:5a:85:02:6f:fb:cd:cf:
         98:36:de:e3:d6:d7:73:6e:2b:ab:a3:dd:a4:fb:04:78:81:f4:
         db:a6:a0:5d:ec:3a:72:6f:f0:b7:bd:fb:74:af:cb:88:80:6c:
         ad:a6:5f:ae:b0:46:fb:ad:90:e6:eb:b1:b3:44:d8:d5:04:13:
         bb:75:bf:da:30:a8:2f:c0:52:b5:7e:f8:3e:d4:e9:44:c5:e5:
         19:af:50:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:18:36 2024 by rpki-client on console-ams.rpki-client.org