Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b10f94e6-3883-36f8-8e22-6339eef0e934.roa
File:                     b10f94e6-3883-36f8-8e22-6339eef0e934.roa (raw, json)
Hash identifier:          gtQqLEUULxv6neP/qK5si00TK/Lw/5DDa4bUMrkAhUI=
Subject key identifier:   03:FA:EC:8E:88:AF:25:CA:E4:6B:83:FB:74:1C:6D:99:83:69:78:97
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584421ADBD8980AF292B7CAF0BB2
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b10f94e6-3883-36f8-8e22-6339eef0e934.roa
Signing time:             Thu 07 Dec 2023 02:30:53 +0000
ROA not before:           Thu 07 Dec 2023 02:30:53 +0000
ROA not after:            Wed 06 Mar 2024 02:30:53 +0000
asID:                     43180
IP address blocks:        2001:470:23d::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 05 Feb 2024 20:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:21:ad:bd:89:80:af:29:2b:7c:af:0b:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Dec  7 02:30:53 2023 GMT
            Not After : Mar  6 02:30:53 2024 GMT
        Subject: CN=31c15ba4-5d33-4e6f-b773-010d4ad5cba0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f6:c5:e8:12:05:ff:48:96:4a:c7:69:4e:ac:
                    36:e2:b8:54:ed:a1:b6:66:e0:68:db:10:90:ed:b3:
                    c2:04:68:03:07:81:78:9d:85:13:f9:62:2f:12:90:
                    16:0d:69:f7:e4:19:c8:d7:98:a2:ad:1b:db:cc:5a:
                    3c:fa:d0:a0:a4:d6:73:09:e5:65:3f:21:13:a8:ec:
                    f8:04:3e:a8:79:16:11:dd:4d:2f:1d:9b:f4:ef:dd:
                    c6:9d:cc:0a:6c:62:6c:40:16:05:c8:06:bd:c4:75:
                    0a:37:1b:65:00:ef:fd:41:98:7c:78:a4:d2:3b:5c:
                    9c:a3:99:8a:3b:0e:6d:c8:73:e3:e3:89:03:2f:9b:
                    00:89:71:a0:b1:a2:c9:06:63:cd:8e:2c:f0:ec:b2:
                    1f:1f:ed:e6:4a:eb:bf:3a:67:be:97:74:d2:59:68:
                    46:2a:ad:a8:ac:f0:da:cc:6f:80:9c:17:6a:ac:74:
                    eb:13:6b:2a:d1:97:c6:cd:57:68:06:14:d5:43:12:
                    cd:29:8f:04:be:60:39:99:2a:5d:58:bb:1b:bf:a8:
                    54:54:1c:8c:d4:2f:53:21:04:a9:46:c2:19:44:0f:
                    42:2b:3a:25:b3:44:c7:55:14:f7:15:ea:8e:a1:97:
                    7a:a3:9f:6c:ef:a6:52:0f:b3:9e:dd:82:41:8a:58:
                    60:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:FA:EC:8E:88:AF:25:CA:E4:6B:83:FB:74:1C:6D:99:83:69:78:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b10f94e6-3883-36f8-8e22-6339eef0e934.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:23d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:dc:e5:e1:5f:4b:75:93:d3:4f:a8:39:0a:f2:d2:c2:e9:76:
         e0:c3:41:cc:53:31:ff:f7:da:d0:a8:e4:5e:d0:eb:df:50:c7:
         8f:cf:cf:98:66:84:ef:57:00:2b:3a:f4:25:5f:07:a3:3e:ed:
         ea:69:9f:81:f2:1e:7c:94:ff:7d:2f:0f:9e:9c:f2:36:4d:3a:
         a1:25:25:91:57:30:c1:5a:2a:1f:08:0a:20:a8:da:31:2f:d8:
         81:bc:2b:28:98:cc:08:8b:ee:9d:d2:ff:f6:07:c2:7e:ec:f5:
         8f:50:85:52:43:26:20:65:11:10:28:71:f8:9d:12:7e:b4:23:
         6f:e4:12:b1:ca:4a:1e:04:89:bb:9c:60:2f:07:70:60:9e:f7:
         7c:a8:04:ed:c0:0f:79:93:2e:26:40:67:98:fd:14:38:34:6a:
         f5:99:8b:a3:c1:d2:cc:92:3c:3f:24:58:6a:d9:e8:f5:c8:01:
         12:66:09:47:6d:83:b9:9d:24:8e:07:81:02:02:a3:29:60:eb:
         a2:c5:05:8c:f1:fe:97:43:bd:e0:77:53:70:9e:77:f7:1d:0c:
         83:68:5f:91:38:7e:89:e0:a1:ec:c2:7e:56:a4:57:3f:86:a6:
         85:ec:7c:6c:33:e2:5b:18:43:f9:50:40:a8:74:76:15:e5:17:
         34:29:fc:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 6 01:26:44 2024 by rpki-client on console-ams.rpki-client.org