Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/02639401-468d-390b-9f07-5f102704b249.roa
File:                     02639401-468d-390b-9f07-5f102704b249.roa (raw, json)
Hash identifier:          RxJ6ctXZBuhqCTD6P/ZwCzuR7NcBYNXy1s/itRMCqvo=
Subject key identifier:   DF:65:F8:53:D6:29:F9:2A:66:4B:9E:95:E4:7F:50:5A:F1:12:42:A3
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285845628D92B75D0B0B426D3BE980
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/02639401-468d-390b-9f07-5f102704b249.roa
Signing time:             Sun 31 Mar 2024 01:00:26 +0000
ROA not before:           Sun 31 Mar 2024 01:00:26 +0000
ROA not after:            Sat 29 Jun 2024 01:00:26 +0000
asID:                     7843
IP address blocks:        24.24.120.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Fri 12 Apr 2024 18:09:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:62:8d:92:b7:5d:0b:0b:42:6d:3b:e9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Mar 31 01:00:26 2024 GMT
            Not After : Jun 29 01:00:26 2024 GMT
        Subject: CN=15fb68b7-81bd-40a2-99bb-bac1b3275875
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:27:1b:b6:db:0d:06:41:63:c7:ec:40:c4:f2:
                    9f:a4:8c:44:6a:5e:ee:84:88:05:42:7b:3f:18:73:
                    2c:4e:5d:d8:80:64:87:f6:ff:e5:c5:90:44:20:a6:
                    f9:03:33:82:6f:dd:fe:a0:c2:3f:f6:f3:d6:c0:64:
                    34:06:db:ef:2a:79:94:65:53:a0:aa:4b:1c:e1:f5:
                    b2:9d:bf:c9:fc:25:be:8f:21:81:fa:6f:4b:77:f8:
                    9a:8d:e6:61:3e:51:66:ae:d9:2d:c7:d5:87:83:99:
                    d2:83:2c:a8:6a:75:e0:00:5a:f0:f7:65:96:39:a6:
                    28:9e:bb:96:67:87:76:be:da:32:b0:5a:65:5d:af:
                    7d:5a:d0:90:1a:2a:b9:3b:71:99:34:38:fb:28:57:
                    94:91:dd:e1:53:4a:27:6e:8e:b0:8b:0b:34:68:82:
                    b4:94:73:02:5b:ce:cd:9b:89:e2:21:01:c4:6b:9a:
                    c0:7c:42:cb:4f:d5:56:78:e6:d6:e9:5b:03:49:5c:
                    32:78:c0:29:f5:60:5a:f5:30:4c:61:64:09:e2:b6:
                    96:d3:9a:ad:58:01:dc:d2:3f:19:6f:5c:42:e3:3c:
                    83:a7:51:8b:5c:be:99:79:a0:45:2d:20:70:72:ff:
                    9c:8e:6e:8c:44:e4:19:86:b5:4e:1e:f9:8d:f0:2b:
                    87:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:65:F8:53:D6:29:F9:2A:66:4B:9E:95:E4:7F:50:5A:F1:12:42:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/02639401-468d-390b-9f07-5f102704b249.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.24.120.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:93:11:40:9f:5f:33:72:99:57:1a:3b:cf:e4:77:b6:12:43:
         c8:d2:ce:ca:61:8c:18:c2:00:bd:be:fc:8b:7b:a7:16:6f:be:
         2c:47:14:39:20:cf:22:6d:36:40:9d:97:13:f2:29:48:fc:05:
         8f:c3:72:8f:6f:34:b9:de:e4:0b:fd:ed:30:b0:85:c6:a7:b3:
         b5:a3:69:81:80:d4:ba:93:ae:66:7e:b0:30:8e:5c:13:3a:4c:
         b0:fe:46:23:f4:01:a6:f9:34:70:2a:6a:42:57:36:a1:9c:61:
         68:ce:a3:d9:6b:be:d4:28:00:05:6f:30:5a:56:a8:e0:ac:ba:
         fd:78:2e:d5:7e:02:91:6e:9a:f4:2c:7b:64:83:0e:cc:f0:ad:
         dc:12:f4:4e:00:07:ec:1e:99:9f:95:ab:e8:89:f4:de:d2:fe:
         58:4b:46:d9:e1:87:e0:17:0c:2f:66:57:b4:de:32:70:5b:2f:
         e8:f5:00:df:b0:f6:7b:78:06:26:b4:25:f6:26:bc:22:f4:f5:
         61:41:03:90:a7:dd:96:ce:da:41:6b:7b:32:45:b3:3f:67:fa:
         c5:0b:43:17:50:ab:b8:be:7a:e3:86:08:d7:56:fa:2c:cf:1c:
         7a:2f:20:29:5c:ab:52:ef:64:7d:11:36:52:4e:e8:53:1b:70:
         b7:9e:96:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 12 21:43:35 2024 by rpki-client on console-ams.rpki-client.org