Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e196bc4c-1b6a-3244-91fe-a4aa71b9709e.roa
File:                     e196bc4c-1b6a-3244-91fe-a4aa71b9709e.roa (raw, json)
Hash identifier:          /s6s+yMWSk2chV+ernRGbL0tVDyKInS84WFUc6/3fM0=
Subject key identifier:   F3:7E:E8:64:DB:57:F1:39:B0:C9:47:91:90:DE:65:68:76:7B:FF:48
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F43285842B06668E25D4B7D80940EDA00
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e196bc4c-1b6a-3244-91fe-a4aa71b9709e.roa
Signing time:             Wed 26 Jul 2023 12:00:00 +0000
ROA not before:           Wed 26 Jul 2023 12:00:00 +0000
ROA not after:            Mon 29 Jul 2024 04:00:00 +0000
asID:                     15169
IP address blocks:        2607:f8b0:4012::/48 maxlen: 48

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:33:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:b0:66:68:e2:5d:4b:7d:80:94:0e:da:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jul 26 12:00:00 2023 GMT
            Not After : Jul 29 04:00:00 2024 GMT
        Subject: CN=87b80c05-6723-4c67-9b4c-f7789838d139
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:76:7a:71:fe:ff:30:66:7f:bc:4d:44:5a:32:
                    fa:d1:de:3a:b1:6d:2b:4c:18:50:53:80:15:d9:93:
                    dd:41:dc:d9:1c:f4:38:db:fb:51:64:18:17:90:c9:
                    d3:a6:aa:ff:ef:0b:e5:27:c6:3b:a7:1c:97:3f:e0:
                    9d:e3:c6:dd:65:90:b4:58:4d:7a:ac:13:53:f2:4e:
                    ee:d5:72:b4:23:c5:ae:72:8f:5a:35:39:e5:b3:3c:
                    be:64:14:9c:e8:d3:d3:cb:5f:a0:89:de:a7:3e:a4:
                    01:04:e9:71:95:81:c8:ce:e7:09:f2:5b:32:ee:7a:
                    8d:47:8b:c6:33:34:8e:a2:80:19:c4:26:a6:36:35:
                    02:b9:15:01:31:d4:cf:bc:42:cc:65:d3:52:dd:41:
                    61:66:e0:52:7b:4a:2b:50:71:7e:69:0d:47:76:ee:
                    7b:6c:75:4e:d7:27:13:93:64:67:48:d8:8e:be:0d:
                    dd:2e:fa:76:ec:98:56:0d:dc:49:54:65:e7:06:db:
                    3c:65:50:b3:cb:91:a4:48:d7:6d:80:86:4a:b3:88:
                    18:a7:83:f1:d8:59:f4:c4:cf:0e:6e:ad:27:fd:2c:
                    c5:d9:93:cf:64:8f:1d:55:0a:d3:2c:48:04:91:3b:
                    62:0e:71:75:d9:21:d3:67:62:cf:5a:bd:ad:e3:e2:
                    a9:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:7E:E8:64:DB:57:F1:39:B0:C9:47:91:90:DE:65:68:76:7B:FF:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e196bc4c-1b6a-3244-91fe-a4aa71b9709e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f8b0:4012::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:db:11:58:ac:72:a0:e7:02:c8:2d:3f:ba:3a:d9:1a:f4:03:
         bb:c5:48:b2:84:fc:a9:b2:0f:af:70:41:da:71:37:ed:ff:0e:
         9d:3a:ae:6c:52:de:93:5e:56:20:c4:f5:e5:70:14:a3:ae:76:
         26:65:99:14:a4:2c:c1:67:ce:c8:f8:20:70:07:96:e5:fb:5c:
         35:39:ce:e8:99:21:20:cf:0c:5c:19:0e:cd:26:af:9d:91:77:
         af:fe:ba:54:9d:31:46:f6:95:c3:45:bb:40:f2:ab:09:b3:fa:
         df:54:28:28:f0:86:5f:1f:28:ed:3c:be:da:27:37:e5:c7:96:
         4e:5a:e4:46:ea:e4:c8:24:96:ec:f5:be:19:10:f0:78:80:7c:
         1b:95:9f:64:ae:e9:c6:d8:26:12:ea:94:84:33:db:a9:51:a0:
         92:12:4b:6b:d9:50:6a:0c:c6:6a:8d:c1:5f:53:dd:a2:07:79:
         d5:90:12:ce:c6:a4:e2:76:93:d6:9d:53:db:06:85:0a:94:c0:
         68:4d:a1:45:52:24:40:49:4e:87:0b:f4:3b:70:b3:7a:22:0b:
         d3:13:7e:f1:8f:e4:b3:56:7e:d3:d9:48:23:d1:4a:4d:7c:e1:
         ea:fc:20:9e:7f:43:53:9e:64:1d:49:e6:40:72:95:4c:31:9c:
         37:3f:38:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:40:49 2024 by rpki-client on console-fra.rpki-client.org