Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/25ad5b03-90df-485a-8924-5b355c4ba415/a72c8366-c983-3f61-9f67-c5beb76158c4.roa
File:                     a72c8366-c983-3f61-9f67-c5beb76158c4.roa (raw, json)
Hash identifier:          dsE8ulRUopsd46X60o8pTyP1a/JLkUA+/jY1WXUArnw=
Subject key identifier:   5F:15:53:08:C3:E6:60:76:7B:8D:4D:20:61:0F:A9:D9:2B:95:C5:49
Certificate issuer:       /CN=25ad5b03-90df-485a-8924-5b355c4ba415
Certificate serial:       010D0C9F43285844F4BAEB5265566C05CBE326C0
Authority key identifier: 61:43:89:06:8B:50:D5:D3:C3:35:63:83:3F:72:C0:87:50:24:B8:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/25ad5b03-90df-485a-8924-5b355c4ba415.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/25ad5b03-90df-485a-8924-5b355c4ba415/a72c8366-c983-3f61-9f67-c5beb76158c4.roa
Signing time:             Tue 20 Feb 2024 16:53:00 +0000
ROA not before:           Tue 20 Feb 2024 16:53:00 +0000
ROA not after:            Mon 20 May 2024 15:53:00 +0000
asID:                     10419
IP address blocks:        142.202.137.0/24 maxlen: 24
                          2602:803:1000::/44 maxlen: 44

Validation:               Failed, certificate revoked on Mon 11 Mar 2024 00:28:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f4:ba:eb:52:65:56:6c:05:cb:e3:26:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25ad5b03-90df-485a-8924-5b355c4ba415
        Validity
            Not Before: Feb 20 16:53:00 2024 GMT
            Not After : May 20 15:53:00 2024 GMT
        Subject: CN=93c2a9c1-ff06-4eff-b1d2-d8d35ba0dfbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a8:98:04:21:06:23:3c:26:7f:94:56:01:77:
                    64:fc:53:bf:f2:20:55:92:ee:1d:85:7e:47:4c:51:
                    79:57:d7:ee:a4:bd:0f:12:1d:45:a2:62:7e:f2:68:
                    87:e2:58:47:f4:d0:9d:8c:7f:1a:01:f6:61:54:fb:
                    73:36:ac:39:7d:e3:be:b5:73:d1:0b:0b:87:4f:b0:
                    8e:40:0c:dc:32:85:a5:85:17:6c:7c:74:52:9f:92:
                    03:06:dc:20:c6:42:79:7b:10:49:de:11:88:0a:6b:
                    c8:9a:fb:dc:77:a1:28:70:94:47:58:8c:06:21:ee:
                    24:66:b4:d5:d7:34:91:59:80:be:61:9a:ad:a2:a3:
                    8f:34:2f:dd:08:33:17:06:cf:9c:42:2c:a4:46:21:
                    5b:b3:0e:9d:1b:2a:bc:f4:44:16:fa:4e:d5:42:98:
                    46:07:da:16:ca:94:b6:2a:12:42:4f:3b:b7:d3:56:
                    9f:60:9f:f3:bf:7c:e9:3f:1e:9a:fa:8c:c9:41:a0:
                    94:2e:e1:49:3a:3b:a3:1d:b2:41:21:26:aa:c4:16:
                    ae:fb:70:3c:e1:de:e5:2a:df:92:19:96:14:61:dc:
                    47:9c:f1:e9:fa:ba:1c:a0:6b:97:73:79:1d:26:18:
                    25:a2:cb:74:7a:ae:1b:50:93:8c:c9:eb:25:d3:6c:
                    ca:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:15:53:08:C3:E6:60:76:7B:8D:4D:20:61:0F:A9:D9:2B:95:C5:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/25ad5b03-90df-485a-8924-5b355c4ba415/a72c8366-c983-3f61-9f67-c5beb76158c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/25ad5b03-90df-485a-8924-5b355c4ba415/25ad5b03-90df-485a-8924-5b355c4ba415.crl

            X509v3 Authority Key Identifier:
                keyid:61:43:89:06:8B:50:D5:D3:C3:35:63:83:3F:72:C0:87:50:24:B8:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/25ad5b03-90df-485a-8924-5b355c4ba415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.202.137.0/24
                IPv6:
                  2602:803:1000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:ca:52:27:37:78:6f:5a:4e:cb:da:1e:26:05:41:4e:64:e3:
         51:aa:2d:8d:46:d9:8c:bb:b7:30:f9:c2:25:81:f3:07:3b:41:
         ca:db:94:ac:30:54:9d:75:e4:7d:d0:ec:f4:6d:f1:d6:9a:ca:
         32:d0:b6:a6:0c:7b:8b:07:ea:01:d4:ca:bf:2c:03:ad:b8:95:
         6f:48:50:15:3d:fa:bb:db:7b:19:99:94:ba:d3:42:96:f9:bc:
         f6:6a:e5:de:2a:ae:c2:da:8c:48:b8:57:da:17:d2:5d:7a:a8:
         ad:d0:18:f6:32:5e:e5:f9:b1:b5:7f:a0:6f:ff:b7:12:81:0a:
         cf:a3:22:cc:b4:13:71:4a:b7:ec:75:26:e2:58:88:76:8d:ad:
         84:80:78:80:92:45:23:2d:53:e4:17:fa:cb:e8:08:3d:2b:c6:
         0f:8b:b9:6c:ac:8b:c0:46:1b:e6:6d:59:6e:2d:e8:c5:16:36:
         a0:48:79:c6:c5:54:c8:71:81:19:cc:bb:07:2b:9e:18:79:3f:
         20:aa:ba:f4:a0:d8:11:67:f6:b5:29:aa:7c:ef:2f:f8:6f:d6:
         fd:3e:5c:df:08:0f:f1:aa:e9:bf:28:84:e3:af:0f:04:42:75:
         15:d3:54:69:9d:41:66:f4:e3:75:52:da:1c:76:ae:03:a0:a9:
         60:1a:1d:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 11 01:49:51 2024 by rpki-client on console-ams.rpki-client.org