Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24558553-b258-484a-bd6f-5e8b36c98065/d702babd-d546-3566-b708-7322fa0bf8a5.roa
File:                     d702babd-d546-3566-b708-7322fa0bf8a5.roa (raw, json)
Hash identifier:          rZB11rUtG/0RmMQjMnk7ObbhIYlM8AODCFLx3ORfmA8=
Subject key identifier:   25:CF:E1:64:C4:95:CA:B6:A7:1A:AA:6E:98:BF:A1:F7:DC:66:F5:6C
Certificate issuer:       /CN=24558553-b258-484a-bd6f-5e8b36c98065
Certificate serial:       010D0C9F43285845C013868B2FE599EA7F357CC0
Authority key identifier: 9E:01:D5:E4:F7:85:25:4D:C3:43:2A:E2:94:E9:43:3B:49:7A:F5:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24558553-b258-484a-bd6f-5e8b36c98065.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24558553-b258-484a-bd6f-5e8b36c98065/d702babd-d546-3566-b708-7322fa0bf8a5.roa
Signing time:             Fri 03 May 2024 13:00:34 +0000
ROA not before:           Fri 03 May 2024 13:00:34 +0000
ROA not after:            Thu 01 Aug 2024 13:00:34 +0000
asID:                     21777
IP address blocks:        66.37.156.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 10 May 2024 21:13:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:c0:13:86:8b:2f:e5:99:ea:7f:35:7c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24558553-b258-484a-bd6f-5e8b36c98065
        Validity
            Not Before: May  3 13:00:34 2024 GMT
            Not After : Aug  1 13:00:34 2024 GMT
        Subject: CN=ca0ae8b1-2563-46f1-a647-806e21620427
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:f4:c4:c4:16:7c:90:aa:77:9f:c7:c5:92:95:
                    f1:ec:53:96:5c:06:19:2d:54:4a:ba:eb:c0:6f:30:
                    ea:5c:56:5e:43:e4:11:dc:8a:25:a3:fe:be:5e:a5:
                    7e:73:39:51:e1:0e:82:1d:51:75:58:c2:d5:ad:74:
                    e7:29:0c:68:15:80:74:ed:b9:c0:61:59:39:0a:41:
                    cf:7e:3a:99:a4:0d:e3:c0:46:dc:8d:9f:15:9e:ca:
                    c8:12:a6:9f:d4:ba:e6:e2:49:b8:6b:3a:ad:3f:84:
                    17:07:66:f4:28:39:c1:81:e2:71:21:5a:e9:28:31:
                    a2:41:88:39:42:d1:a7:de:90:a5:ac:cf:fa:01:4d:
                    de:d2:9c:cd:38:fc:30:6f:19:35:ec:81:1d:0d:db:
                    4b:fe:b9:32:1d:cf:1a:7c:aa:27:af:4b:60:f1:35:
                    d6:0c:c3:9a:f8:6a:32:f9:57:5c:bf:bd:d9:94:0c:
                    66:b1:b2:11:01:b3:18:0c:a4:a3:b8:86:a6:c0:bc:
                    92:89:fb:e7:cc:67:1d:b7:a6:e5:ea:46:d6:17:f1:
                    85:68:ae:e8:96:7a:86:6c:45:4c:6d:9f:9a:1a:95:
                    cf:7e:8a:6f:f0:24:23:6f:82:1a:7d:40:88:0b:75:
                    8d:56:5e:3d:60:ed:a9:7b:5a:58:20:e4:6a:59:9a:
                    1c:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:CF:E1:64:C4:95:CA:B6:A7:1A:AA:6E:98:BF:A1:F7:DC:66:F5:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24558553-b258-484a-bd6f-5e8b36c98065/d702babd-d546-3566-b708-7322fa0bf8a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24558553-b258-484a-bd6f-5e8b36c98065/24558553-b258-484a-bd6f-5e8b36c98065.crl

            X509v3 Authority Key Identifier:
                keyid:9E:01:D5:E4:F7:85:25:4D:C3:43:2A:E2:94:E9:43:3B:49:7A:F5:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24558553-b258-484a-bd6f-5e8b36c98065.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.37.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:69:db:74:e4:84:3b:5c:df:62:05:cc:5b:1a:3c:71:df:b8:
         e3:f5:f2:d6:d5:61:a6:d7:2a:43:b6:c0:23:b4:b7:07:52:cf:
         6d:ec:c0:92:cf:7a:2a:1a:f6:c3:21:85:5f:5d:7c:71:5e:3b:
         07:12:78:ec:18:ca:c4:49:e4:b0:f5:89:32:f3:52:86:77:18:
         0f:24:5c:63:dc:7c:ee:19:42:d8:86:ab:d7:55:c2:2f:54:b0:
         77:46:4c:b8:ca:df:fc:c1:79:99:2e:77:65:ff:56:eb:6e:2d:
         91:0d:4c:a9:c1:55:b5:82:cd:dc:6d:93:40:64:ae:4d:3d:21:
         1e:85:85:92:0b:3e:fd:ee:20:44:84:65:cd:79:8f:06:99:c9:
         d4:5c:3c:2f:b1:a7:80:5e:69:ee:e2:8a:29:15:20:6d:77:98:
         12:e1:ac:85:27:6e:60:66:2d:46:c0:a0:d1:29:94:c8:1c:03:
         0a:d0:b3:f7:23:61:2e:1b:4d:9b:43:d1:69:f9:71:e2:9f:b7:
         a6:38:5a:b3:ee:d6:6b:3b:8f:59:61:91:4b:cd:5d:6c:f6:04:
         bf:88:1a:92:16:75:71:2e:3b:82:fc:65:82:b4:7c:18:36:2e:
         de:da:b3:01:e5:83:b6:ce:84:1b:e9:83:6f:33:b9:44:eb:42:
         cd:15:ee:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 01:54:56 2024 by rpki-client on console-fra.rpki-client.org