Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/66618f54-ffba-38f0-a0c5-df567830083c.roa
File:                     66618f54-ffba-38f0-a0c5-df567830083c.roa (raw, json)
Hash identifier:          bQ16z3tbW/ZLc+85SmC0nmYYTQPQnkpM9UFMEF5F2ns=
Subject key identifier:   34:EC:43:89:84:7B:DE:54:A4:5D:38:F0:04:37:0B:34:2E:88:F4:16
Certificate issuer:       /CN=00856c65-b5f4-4666-91c4-407d890d4494
Certificate serial:       010D0C9F43285843FAFFDDF10D609FEFFAE2F348
Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/66618f54-ffba-38f0-a0c5-df567830083c.roa
Signing time:             Thu 23 Nov 2023 05:59:50 +0000
ROA not before:           Thu 23 Nov 2023 05:59:50 +0000
ROA not after:            Wed 21 Feb 2024 05:59:50 +0000
asID:                     996
IP address blocks:        199.48.180.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 12 Jan 2024 02:41:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:fa:ff:dd:f1:0d:60:9f:ef:fa:e2:f3:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494
        Validity
            Not Before: Nov 23 05:59:50 2023 GMT
            Not After : Feb 21 05:59:50 2024 GMT
        Subject: CN=44c27ac1-253a-4888-91b7-f0420b02e53a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:89:9d:38:cd:18:2b:c9:84:41:27:db:c6:f8:
                    59:5f:fe:20:5b:6e:89:e8:57:c8:6e:f1:1b:40:9f:
                    b4:c7:91:58:a1:26:61:ff:d8:f3:01:88:25:5e:4f:
                    e1:5b:ce:78:55:02:20:c8:16:fa:e7:24:45:fd:b0:
                    ac:4d:d6:57:7d:b2:d7:76:84:68:3e:07:a8:ea:45:
                    54:c3:00:5e:d1:04:b4:cd:97:64:b8:7f:ce:91:30:
                    7d:dd:cd:32:19:ee:50:72:67:4d:f2:6b:0b:e2:c5:
                    7c:b2:0d:43:57:90:e5:e1:b7:6c:15:69:06:a4:37:
                    36:6c:96:45:4a:94:9f:1e:6a:32:ea:e6:b4:8e:ce:
                    3d:a5:cb:74:8a:b3:d4:dd:ef:a4:d8:f5:6b:e7:1e:
                    4a:fb:ce:ad:35:c3:3b:76:f1:b6:c2:db:c1:95:7d:
                    2d:4b:1b:10:f4:f6:98:7f:ce:15:10:ba:06:a9:51:
                    6e:22:82:d5:55:e2:39:32:b8:2d:48:a3:ad:b3:26:
                    11:31:1f:ee:a9:46:cc:90:ad:0e:ec:cb:96:30:df:
                    bd:cb:45:d1:b5:8c:60:c3:37:2b:f1:69:5f:69:1e:
                    01:09:9d:44:2b:35:db:96:8e:63:f0:d5:74:3e:89:
                    e0:15:31:45:0d:7e:b7:66:b3:f1:15:6c:71:c8:be:
                    49:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:EC:43:89:84:7B:DE:54:A4:5D:38:F0:04:37:0B:34:2E:88:F4:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/66618f54-ffba-38f0-a0c5-df567830083c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl

            X509v3 Authority Key Identifier:
                keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.48.180.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:cd:fa:57:40:fe:e2:0b:a6:6f:ed:2e:26:a7:66:69:11:fc:
         a2:cf:7a:1a:87:9c:fa:e8:07:fc:8c:7d:b9:6a:68:5c:54:f6:
         b3:9f:b4:c3:22:f5:ae:f7:7f:a6:d9:a8:8d:64:a1:69:a6:36:
         7c:21:2d:48:fa:7b:8a:f4:22:76:bf:2c:ef:c1:18:76:f3:df:
         47:a1:33:7b:ed:24:0b:d9:e1:7b:e4:21:62:2d:0c:2d:34:e4:
         58:4f:d3:47:84:60:9c:1d:80:da:ac:96:38:3b:63:29:35:cf:
         a5:f7:e1:1c:e1:d2:1f:a0:2c:d3:0e:93:3b:01:1c:02:de:40:
         8c:60:0a:64:83:9f:60:57:fd:6f:58:01:8f:d4:e7:c8:35:69:
         e7:70:9e:76:f5:ab:a3:1c:ad:0d:4f:e5:49:cb:8c:16:16:ef:
         69:67:9e:d1:d8:f0:c5:0a:85:f3:a3:85:4f:d4:b1:40:68:59:
         77:a2:c2:59:20:53:80:62:39:46:69:1c:b7:73:da:33:3d:d8:
         d2:4c:d5:95:44:b5:ce:45:e3:f9:c8:e7:09:b7:95:92:99:ec:
         1f:5c:0b:e2:be:e3:cf:4d:da:b7:13:50:22:0a:72:3e:2d:3d:
         e7:aa:a4:60:1b:5c:b5:5c:39:d9:9a:ec:e6:60:a8:1a:cd:5d:
         27:ac:0f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 12 03:44:07 2024 by rpki-client on console-ams.rpki-client.org