Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fcd81970-919f-4ccd-9c85-01ebf75cf163/f2a84a44-aefc-3349-a6eb-72e4fd4899f6.roa
File:                     f2a84a44-aefc-3349-a6eb-72e4fd4899f6.roa (raw, json)
Hash identifier:          rqWUlfTG+Zzb1MwYYlvF9Dc72TzuxaDIPuopjmaIUec=
Subject key identifier:   6F:6D:F0:8D:FD:DF:99:A1:1B:55:9A:75:0D:0C:6F:49:55:E6:73:99
Certificate issuer:       /CN=fcd81970-919f-4ccd-9c85-01ebf75cf163
Certificate serial:       010D0C9F43285845DCF75D35D03821E558F15E40
Authority key identifier: 15:45:93:8C:DA:F3:BA:38:37:A8:8E:22:2B:BE:0C:E9:2D:E0:5E:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fcd81970-919f-4ccd-9c85-01ebf75cf163.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fcd81970-919f-4ccd-9c85-01ebf75cf163/f2a84a44-aefc-3349-a6eb-72e4fd4899f6.roa
Signing time:             Mon 13 May 2024 21:22:19 +0000
ROA not before:           Mon 13 May 2024 21:22:19 +0000
ROA not after:            Sun 11 Aug 2024 21:22:19 +0000
asID:                     6939
IP address blocks:        23.142.192.0/24 maxlen: 24
                          161.129.140.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Tue 28 May 2024 22:03:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:dc:f7:5d:35:d0:38:21:e5:58:f1:5e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcd81970-919f-4ccd-9c85-01ebf75cf163
        Validity
            Not Before: May 13 21:22:19 2024 GMT
            Not After : Aug 11 21:22:19 2024 GMT
        Subject: CN=041ac49e-ca5d-45a9-98c2-7c1c7d84f70a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:87:e6:bc:8f:36:26:e9:e9:71:de:b7:9d:e2:
                    aa:78:7a:13:82:02:bb:b8:95:5d:8f:df:21:b9:bd:
                    19:51:c9:17:43:7b:fa:83:d9:cc:5e:b9:38:ee:ec:
                    6e:e1:50:ef:46:50:8e:3b:6d:2f:b0:08:fb:a3:38:
                    71:df:e8:e5:06:21:92:a9:ce:46:98:b2:29:4c:e5:
                    36:fa:1f:32:e4:9e:73:9c:39:f6:db:3c:22:b8:47:
                    2b:22:10:87:80:c6:49:01:1d:81:6b:b4:47:b2:ac:
                    2c:52:cb:57:fd:19:45:27:02:c2:52:2b:c2:30:a1:
                    64:37:b3:f5:72:29:85:ea:18:48:35:7b:10:8a:69:
                    53:86:de:38:29:4d:23:20:3d:74:ec:0c:c1:ef:75:
                    de:b9:cc:7f:69:ae:36:58:a2:f9:1d:05:2c:7e:a4:
                    11:3d:cb:a6:ed:ea:4b:da:21:d5:2c:82:7c:29:c9:
                    08:be:9c:c4:43:e2:74:7c:55:11:ee:ee:75:6d:67:
                    d8:dc:a1:49:ce:75:48:b2:04:33:c0:d9:fd:04:be:
                    b9:72:99:89:2b:57:af:f4:29:10:83:c8:a3:12:88:
                    14:ea:92:8c:e7:83:79:67:7b:55:0f:29:5b:ab:0f:
                    54:90:85:e1:90:86:79:7f:7e:a8:e5:d4:fb:13:b7:
                    4e:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:6D:F0:8D:FD:DF:99:A1:1B:55:9A:75:0D:0C:6F:49:55:E6:73:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fcd81970-919f-4ccd-9c85-01ebf75cf163/f2a84a44-aefc-3349-a6eb-72e4fd4899f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fcd81970-919f-4ccd-9c85-01ebf75cf163/fcd81970-919f-4ccd-9c85-01ebf75cf163.crl

            X509v3 Authority Key Identifier:
                keyid:15:45:93:8C:DA:F3:BA:38:37:A8:8E:22:2B:BE:0C:E9:2D:E0:5E:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fcd81970-919f-4ccd-9c85-01ebf75cf163.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.142.192.0/24
                  161.129.140.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:e9:e9:1a:8d:6c:7a:e3:10:9c:da:cd:63:d7:d1:a5:50:7a:
         43:7d:97:ba:3f:d0:60:08:3e:fc:b1:66:31:49:cb:0d:2b:5c:
         a5:e9:cb:12:5d:c2:26:60:50:9b:ba:49:5a:92:d2:5d:18:4f:
         63:46:2c:ee:bf:ea:90:f1:b5:37:29:92:08:68:5d:73:66:eb:
         d6:6a:93:90:07:b3:26:d7:ec:de:e9:3b:04:73:7f:c8:0c:7f:
         69:48:e5:9d:12:62:9b:a1:71:73:28:6f:8f:dd:89:71:11:22:
         b4:0d:ee:ee:c7:10:46:4e:20:23:fa:d4:de:a0:9d:6d:f5:db:
         a4:a0:e6:5a:eb:9e:a4:93:39:44:bb:fd:33:04:3a:10:9f:18:
         c2:41:5e:57:5e:51:4e:29:8c:c2:bc:b0:a6:dd:b7:34:a4:f5:
         e0:97:ed:62:bd:9f:eb:8d:72:2e:a4:13:0e:e6:df:e3:14:e9:
         70:2b:2c:06:bc:62:e0:f4:2d:a4:d9:02:e8:4a:44:13:ad:fa:
         b2:6d:7b:b0:0c:d3:51:a4:8f:54:e6:dd:92:4c:d8:44:58:f3:
         b4:58:e9:95:27:01:1d:e6:f3:69:e2:f8:95:1d:84:85:39:c1:
         e6:05:49:87:68:52:ae:7b:15:4b:d5:78:56:77:59:49:a9:d3:
         1f:7b:ea:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 28 23:51:09 2024 by rpki-client on console-fra.rpki-client.org