Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/6fe749e4-96cf-3796-8892-640a9de15478.roa
File:                     6fe749e4-96cf-3796-8892-640a9de15478.roa (raw, json)
Hash identifier:          /o+gAhKA2+1A6+GFlM0IPwtbw6+O4yjkDUn4L18WKnc=
Subject key identifier:   70:08:E0:22:10:60:E2:EE:BA:8C:7D:B3:80:98:64:3D:AB:45:98:A1
Certificate issuer:       /CN=f2f0585e-a28e-4ead-9b1c-defd291ce54d
Certificate serial:       010D0C9F43285846D1AAAB8A3586000A8C0A56C8
Authority key identifier: 7B:C6:78:77:88:93:19:53:E7:11:02:39:94:6D:8B:3D:13:7A:C2:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/6fe749e4-96cf-3796-8892-640a9de15478.roa
Signing time:             Fri 09 Aug 2024 13:00:37 +0000
ROA not before:           Fri 09 Aug 2024 13:00:37 +0000
ROA not after:            Thu 07 Nov 2024 14:00:37 +0000
asID:                     207556
IP address blocks:        2602:fb68::/40 maxlen: 48

Validation:               Failed, certificate revoked on Sat 21 Sep 2024 00:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:d1:aa:ab:8a:35:86:00:0a:8c:0a:56:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2f0585e-a28e-4ead-9b1c-defd291ce54d
        Validity
            Not Before: Aug  9 13:00:37 2024 GMT
            Not After : Nov  7 14:00:37 2024 GMT
        Subject: CN=d4b6b19f-09df-4032-a5d6-bb403c741dd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:43:9b:cf:64:1a:aa:73:ab:14:31:fb:26:27:
                    1f:ca:08:96:53:5b:85:7f:35:e7:75:2c:44:75:3f:
                    a9:65:e9:23:39:dc:38:b4:a0:51:26:35:c3:e0:06:
                    05:e1:58:7a:58:89:9b:d5:da:ff:15:c7:41:7c:67:
                    b5:4f:cc:8e:c5:da:b7:0d:ea:e7:be:99:f2:1f:2c:
                    98:4c:18:4f:17:3b:84:4e:4b:41:56:87:37:b2:ab:
                    a5:10:ff:24:a9:8d:48:37:bf:fc:f4:a6:d7:b8:96:
                    f3:dd:44:7d:1d:b6:78:55:5b:b3:c9:e6:da:ec:ea:
                    eb:64:8b:bc:33:35:2b:7b:c3:eb:12:19:64:8b:40:
                    57:e4:f3:1c:51:35:cd:de:94:66:c3:08:0f:42:06:
                    34:59:c1:da:a9:5b:68:48:38:8b:98:cc:6d:91:a2:
                    ab:3e:66:55:f7:25:76:b2:fb:ae:ad:52:b6:23:d6:
                    99:82:45:3d:f1:e9:3f:e1:e2:1f:4b:16:63:52:76:
                    19:ec:66:d7:32:0d:a0:4a:0e:7f:9e:f8:46:83:ab:
                    90:76:98:a9:66:b9:20:71:f2:b7:75:af:01:9e:7b:
                    9a:0f:02:1a:9e:3d:88:04:fc:18:22:d4:e2:70:4d:
                    b6:91:1e:e8:3d:1b:85:29:27:7a:69:d7:24:e6:5c:
                    b2:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:08:E0:22:10:60:E2:EE:BA:8C:7D:B3:80:98:64:3D:AB:45:98:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/6fe749e4-96cf-3796-8892-640a9de15478.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.crl

            X509v3 Authority Key Identifier:
                keyid:7B:C6:78:77:88:93:19:53:E7:11:02:39:94:6D:8B:3D:13:7A:C2:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb68::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:7f:4d:64:06:db:da:4b:cd:63:7d:fa:d0:fd:03:5b:9e:fd:
         67:ef:73:73:2a:1c:34:5a:6f:f3:54:a4:16:d9:c5:14:df:1b:
         57:c1:ab:52:21:53:37:fc:85:93:4c:df:d0:86:bd:69:46:35:
         40:bc:7b:52:db:47:80:e6:25:26:d3:fd:84:f2:bb:e3:f5:93:
         2c:c6:8b:36:aa:45:c0:5b:83:28:93:d7:04:9e:da:94:d4:c0:
         a6:44:5c:de:e7:d5:bf:94:1a:3f:79:4e:82:b1:1b:ed:16:a5:
         a2:cb:b7:b9:c4:ae:bf:a9:4a:58:de:fa:aa:a7:d8:79:51:ea:
         4e:84:34:8f:cb:84:e0:3b:d9:cc:b1:73:f6:94:4d:0f:f9:22:
         78:9a:4b:d0:96:67:02:8d:0a:3c:e4:19:28:e6:a9:db:2d:66:
         62:cd:da:05:e2:80:9f:f4:af:66:f9:75:42:63:74:f2:26:6a:
         8d:93:66:b3:b0:37:bf:6f:06:0f:38:21:81:3a:a5:82:83:95:
         fb:9f:b6:8d:ed:e5:93:49:5b:69:cd:ca:87:e8:14:40:ac:53:
         f6:57:63:de:cc:38:3d:1a:99:42:f6:6f:b8:0a:ae:23:bd:60:
         53:5b:1e:83:ba:cb:85:0f:25:f8:73:74:de:96:1c:9c:3c:13:
         14:69:de:78
-----BEGIN CERTIFICATE-----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Generated at Sat Sep 21 03:11:50 2024 by rpki-client on console-fra.rpki-client.org