Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/618ea021-77e4-3bb0-bc5e-9db05e3e157a.roa
File:                     618ea021-77e4-3bb0-bc5e-9db05e3e157a.roa (raw, json)
Hash identifier:          NegRnBiavgHWL/qZLsesCyc2gw48swBzrvGl9aR2fII=
Subject key identifier:   E1:7D:BA:CB:7F:4C:68:BE:F4:07:23:85:E8:88:00:FC:B3:B9:E6:0E
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F43285845533313AC98E69560F3BBBF80
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/618ea021-77e4-3bb0-bc5e-9db05e3e157a.roa
Signing time:             Mon 25 Mar 2024 13:00:33 +0000
ROA not before:           Mon 25 Mar 2024 13:00:33 +0000
ROA not after:            Sun 23 Jun 2024 13:00:33 +0000
asID:                     7029
IP address blocks:        174.130.32.0/20 maxlen: 20

Validation:               Failed, certificate revoked on Wed 15 May 2024 23:47:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:53:33:13:ac:98:e6:95:60:f3:bb:bf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 25 13:00:33 2024 GMT
            Not After : Jun 23 13:00:33 2024 GMT
        Subject: CN=e04acf55-42c1-4a97-807b-5ac3047323e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:a8:23:0d:c7:ac:d1:b6:05:af:dc:c8:b2:e1:
                    a8:e5:fc:e1:b6:5b:d4:a6:4e:12:89:19:5b:de:a6:
                    1a:56:2d:81:a4:42:3f:3d:5e:b8:3a:e4:42:9a:93:
                    bb:b4:0e:f0:63:75:8f:3c:e8:2f:8f:2f:eb:36:1c:
                    4a:e7:b2:cf:b8:d4:40:27:4d:e3:08:84:ef:fa:d4:
                    89:c0:f7:71:34:ca:b3:fb:2f:c8:1e:8c:80:b9:1d:
                    11:4e:06:99:73:b4:5b:47:01:c9:13:c4:f8:dd:29:
                    9b:59:a0:1c:f3:1a:b5:df:26:17:6e:fa:cc:a9:57:
                    c5:d7:5d:49:a0:10:2d:41:6f:29:f3:ab:6f:50:f1:
                    b7:3d:ee:78:a4:16:00:8e:29:18:eb:db:e3:c0:7c:
                    50:6c:7b:8c:ae:2a:2b:46:c5:85:24:96:00:3b:51:
                    2a:05:d6:91:64:fc:d2:cc:ef:36:6f:ce:83:e6:65:
                    e8:67:9b:0a:8b:9f:78:76:c6:cc:59:38:5c:dd:9e:
                    48:be:b2:67:b6:f3:e0:ae:36:f6:af:94:df:e1:9f:
                    30:24:2b:0c:41:50:cb:db:5d:3c:ac:dc:f9:ea:06:
                    7e:00:40:24:fc:53:ea:f0:61:e5:2d:fe:3f:72:6e:
                    5a:cf:52:bd:79:03:7b:6a:cd:92:33:36:71:79:b9:
                    c2:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:7D:BA:CB:7F:4C:68:BE:F4:07:23:85:E8:88:00:FC:B3:B9:E6:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/618ea021-77e4-3bb0-bc5e-9db05e3e157a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.130.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:f9:b0:86:0f:16:70:da:51:93:5c:54:6e:1b:27:54:fa:05:
         ef:34:22:9c:b4:09:8f:e9:7f:5d:ad:74:d9:5c:a5:b3:7d:c8:
         f9:3d:5f:59:6d:d2:37:bc:8d:25:a0:ac:e3:0d:34:77:3a:00:
         75:f1:43:88:ca:1f:da:fa:cc:03:79:22:7b:e9:36:e5:71:e5:
         9c:f7:4c:10:03:b4:4b:8c:ec:8c:49:33:cc:12:6a:0d:4e:b4:
         ec:0c:e3:13:f8:5e:42:0f:a0:06:f3:d1:0d:f4:aa:85:22:d6:
         e5:c5:77:33:1f:f3:dd:83:81:f7:02:d8:0f:45:cf:84:35:70:
         78:75:bf:03:fe:0c:44:e1:6c:ca:b2:f4:c1:d4:cf:f5:6f:92:
         84:6e:a9:73:66:e6:51:6f:bf:74:ea:32:cd:ce:d0:92:c0:a3:
         6b:77:81:2a:e0:47:b5:a0:f8:5a:b7:1b:56:ee:8b:3d:98:3a:
         0b:01:8e:04:11:07:1e:c8:8d:26:51:3b:e4:a5:b7:49:bd:23:
         ad:98:4d:10:77:66:d9:e9:41:0d:e6:ca:63:ba:00:00:47:74:
         2b:0d:ed:71:44:2e:4d:74:2e:62:63:e4:4e:d6:31:f2:24:4a:
         56:99:23:3a:4a:2d:1d:2f:d7:9f:bd:ee:f1:d4:a3:eb:22:55:
         8c:09:ad:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 01:11:33 2024 by rpki-client on console-ams.rpki-client.org