Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f9832b96-bd4c-421c-9299-d5f2c689d463/70b853ba-e1bd-3acc-ad27-ceb4840b0dac.roa
File:                     70b853ba-e1bd-3acc-ad27-ceb4840b0dac.roa (raw, json)
Hash identifier:          ME8E/WudlkPKzhrJUBkZjsiQcE7UBqunjliKfTj7aFk=
Subject key identifier:   02:25:07:4D:66:4B:70:09:43:07:5A:8D:FB:5B:B7:29:8D:12:A0:22
Certificate issuer:       /CN=f9832b96-bd4c-421c-9299-d5f2c689d463
Certificate serial:       010D0C9F43285846094A88E742876130837B9F80
Authority key identifier: 20:9C:BB:41:66:DA:B5:0B:B5:94:F9:34:2E:BD:4C:6D:D0:53:11:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f9832b96-bd4c-421c-9299-d5f2c689d463.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f9832b96-bd4c-421c-9299-d5f2c689d463/70b853ba-e1bd-3acc-ad27-ceb4840b0dac.roa
Signing time:             Wed 29 May 2024 18:25:28 +0000
ROA not before:           Wed 29 May 2024 18:25:28 +0000
ROA not after:            Tue 27 Aug 2024 18:25:28 +0000
asID:                     21565
IP address blocks:        64.138.192.0/18 maxlen: 24
                          64.150.128.0/19 maxlen: 24
                          66.153.128.0/17 maxlen: 24
                          66.220.64.0/20 maxlen: 24
                          67.212.32.0/19 maxlen: 24
                          107.190.144.0/20 maxlen: 24
                          108.175.176.0/20 maxlen: 24
                          152.44.112.0/20 maxlen: 24
                          159.117.160.0/19 maxlen: 24
                          2606:8400::/32 maxlen: 32

Validation:               Failed, certificate revoked on Wed 19 Jun 2024 13:31:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:09:4a:88:e7:42:87:61:30:83:7b:9f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9832b96-bd4c-421c-9299-d5f2c689d463
        Validity
            Not Before: May 29 18:25:28 2024 GMT
            Not After : Aug 27 18:25:28 2024 GMT
        Subject: CN=11739605-d504-4b0f-8ba4-7b02318ae30f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:64:9e:95:70:59:da:cd:2b:f3:c8:1b:00:c9:
                    a8:80:1a:d2:29:6f:a6:23:2b:3b:d4:90:83:c1:93:
                    b8:ce:d6:1c:00:08:ad:29:26:1b:a6:82:c7:ac:d2:
                    0f:36:ea:30:2a:03:b3:c6:1b:6d:cb:81:27:52:95:
                    22:60:3c:df:14:1b:46:3f:10:a5:ac:54:90:13:a4:
                    49:32:11:5e:c7:cc:ad:d4:12:81:b2:0c:22:c0:2c:
                    3f:06:63:4e:42:28:7c:52:e6:d3:a8:e2:43:db:bf:
                    c8:e3:bf:b3:ee:1e:90:d3:17:26:52:0e:ec:0a:d0:
                    39:27:4e:9e:16:92:83:06:e2:6f:7e:5b:ea:51:25:
                    63:fe:14:82:5c:33:64:10:33:98:a1:fb:a4:86:f9:
                    dd:91:ed:5b:c1:f7:5c:67:91:9e:d3:0e:2c:f4:d6:
                    c1:a4:32:fa:4b:0f:46:05:41:d9:bc:ae:42:90:23:
                    16:be:35:30:a7:90:52:93:f7:7f:dc:34:d5:ca:c8:
                    22:8b:a8:dd:29:82:a8:ef:de:78:50:43:14:c8:c1:
                    dc:a1:3d:b6:45:78:23:b6:86:97:f1:f4:de:ae:8d:
                    96:71:a2:bc:71:71:99:e9:6f:9e:ce:a4:1e:a0:e6:
                    c3:8c:3d:e8:78:12:04:33:46:0c:60:9e:db:46:9b:
                    8f:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:25:07:4D:66:4B:70:09:43:07:5A:8D:FB:5B:B7:29:8D:12:A0:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f9832b96-bd4c-421c-9299-d5f2c689d463/70b853ba-e1bd-3acc-ad27-ceb4840b0dac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f9832b96-bd4c-421c-9299-d5f2c689d463/f9832b96-bd4c-421c-9299-d5f2c689d463.crl

            X509v3 Authority Key Identifier:
                keyid:20:9C:BB:41:66:DA:B5:0B:B5:94:F9:34:2E:BD:4C:6D:D0:53:11:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f9832b96-bd4c-421c-9299-d5f2c689d463.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.138.192.0/18
                  64.150.128.0/19
                  66.153.128.0/17
                  66.220.64.0/20
                  67.212.32.0/19
                  107.190.144.0/20
                  108.175.176.0/20
                  152.44.112.0/20
                  159.117.160.0/19
                IPv6:
                  2606:8400::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c2:f2:88:b4:78:47:e0:66:80:dc:b2:67:74:e4:27:0e:22:75:
         a6:6a:05:ce:f9:0e:a3:1c:8e:2d:74:e9:dd:74:ff:2c:b2:6b:
         48:9e:67:22:84:07:3e:bc:15:21:d3:b7:1b:bd:e2:60:dc:44:
         aa:23:84:38:e2:7c:1b:91:0d:e3:f1:5c:5b:3b:cf:6e:76:7f:
         66:0c:5e:9f:3b:2f:b8:a0:b2:7d:b1:17:0c:9b:02:d8:ff:0f:
         80:b3:da:cc:c0:21:f8:9c:0b:f9:26:8d:6d:d7:03:26:57:fe:
         cb:61:84:07:e7:ea:03:b7:85:65:c9:27:5f:f4:60:7c:13:2a:
         9c:1f:4b:bb:05:75:79:11:12:1e:89:c5:a0:29:92:80:8f:43:
         5d:ac:a1:b8:e0:0c:ed:7c:f8:d9:7d:d4:87:a0:24:7d:ca:30:
         6c:aa:a1:33:03:c9:36:3e:05:1c:13:fb:96:1c:b2:2f:41:0c:
         e7:f1:1b:4a:fc:d3:03:fa:e4:de:19:cd:3d:e2:0c:08:c8:62:
         f2:fe:a1:ed:2f:0f:7b:ff:68:15:d1:47:01:69:3a:4f:d7:43:
         8c:33:c7:88:c8:b7:19:b7:b0:d7:8c:7f:49:10:6b:99:1a:74:
         41:37:53:5d:ba:9f:ec:42:4f:18:e7:e2:99:94:e0:23:ed:6d:
         46:17:be:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 19 16:25:58 2024 by rpki-client on console-ams.rpki-client.org