Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/744e8755-59b9-3501-9729-a4f246dd5639.roa
File:                     744e8755-59b9-3501-9729-a4f246dd5639.roa (raw, json)
Hash identifier:          wJsZC4e6MV/vn0Xh4srRWCQkZMtRcqxQWRP9kePdF/8=
Subject key identifier:   9E:25:79:5B:9F:56:25:81:7A:70:65:82:31:DC:BC:7D:15:9B:E9:63
Certificate issuer:       /CN=5ddde1fe-7525-49e3-9718-412c13cd42ca
Certificate serial:       010D0C9F43285842A3091C6FEAA65AE3EF9C1200
Authority key identifier: 3F:21:17:F8:2F:74:2E:BB:DD:C1:C6:68:1B:A6:1C:8E:8A:81:61:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/744e8755-59b9-3501-9729-a4f246dd5639.roa
Signing time:             Sun 23 Jul 2023 01:00:17 +0000
ROA not before:           Sun 23 Jul 2023 01:00:17 +0000
ROA not after:            Sat 21 Oct 2023 01:00:17 +0000
asID:                     1239
IP address blocks:        199.101.198.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:a3:09:1c:6f:ea:a6:5a:e3:ef:9c:12:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ddde1fe-7525-49e3-9718-412c13cd42ca
        Validity
            Not Before: Jul 23 01:00:17 2023 GMT
            Not After : Oct 21 01:00:17 2023 GMT
        Subject: CN=04cd0ab7-65a7-4567-93a6-d42d86e9ff95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b2:d6:76:d9:af:00:4d:73:d9:22:61:99:2d:
                    42:a2:d0:13:b3:6f:c7:1c:5a:a8:46:fd:2f:eb:d7:
                    22:f8:2d:69:72:ef:ef:4f:09:e0:54:24:ef:ce:ee:
                    64:6c:4f:75:25:23:c9:90:91:87:8d:27:c2:ec:d7:
                    1d:68:ae:92:24:32:86:8f:b0:48:9c:32:b5:30:f0:
                    db:00:ac:33:5d:74:35:5c:0f:8c:d7:f1:7a:26:12:
                    70:17:d8:72:0a:19:0b:80:e9:f0:d9:bf:ef:13:93:
                    60:ae:48:ee:fe:d6:8a:7c:7b:10:16:32:98:b7:61:
                    9d:83:da:86:2f:68:84:fe:4c:b8:87:9e:49:28:f6:
                    ce:b0:1a:09:8e:8b:08:9e:25:d2:9c:11:65:2c:f6:
                    c7:72:d8:17:bf:fd:3f:6e:cc:8b:7d:d1:4e:f8:52:
                    96:c9:aa:bd:fb:56:d4:c9:be:61:7d:bf:ca:31:d4:
                    39:da:92:cf:9f:77:38:19:f0:d4:6e:90:b5:4f:2e:
                    65:85:89:98:1d:a1:23:eb:37:70:05:8d:da:c1:ce:
                    a7:8d:97:a8:09:e6:5e:4e:e6:8c:33:7c:7a:ad:7c:
                    21:c8:76:dd:75:9d:8c:34:ea:3e:8f:46:df:61:20:
                    9f:60:82:72:9a:09:16:95:65:d1:fd:18:03:cf:c8:
                    98:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:25:79:5B:9F:56:25:81:7A:70:65:82:31:DC:BC:7D:15:9B:E9:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/744e8755-59b9-3501-9729-a4f246dd5639.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca/5ddde1fe-7525-49e3-9718-412c13cd42ca.crl

            X509v3 Authority Key Identifier:
                keyid:3F:21:17:F8:2F:74:2E:BB:DD:C1:C6:68:1B:A6:1C:8E:8A:81:61:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ddde1fe-7525-49e3-9718-412c13cd42ca.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.101.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:96:ea:04:d4:1d:d2:ed:9f:3f:2f:68:a1:4a:63:31:fa:32:
         8c:e9:46:e6:fa:2c:e0:11:ed:bd:bd:fd:fc:c4:e2:68:be:c9:
         40:2c:e6:9e:c5:89:b7:ab:80:32:15:e2:39:57:79:43:71:d9:
         5a:b8:89:a7:f6:fb:7c:31:ff:8d:c9:f6:9b:94:66:b9:50:5a:
         63:73:87:d1:79:ac:15:dd:96:c7:22:76:34:82:da:ab:34:07:
         f7:8c:e9:ce:1d:9d:fa:67:f0:3c:53:76:1d:c4:c8:d3:36:a9:
         01:a3:fe:f9:db:ff:15:cc:77:e1:e5:80:7f:e4:ab:21:0a:59:
         2d:23:2f:28:17:dc:76:86:d7:95:75:b9:d5:6a:a9:0f:8b:4a:
         e6:ef:2a:58:60:bf:29:3e:f8:c9:cd:af:4a:3c:84:2d:47:1d:
         9d:1b:74:52:1e:c4:dd:0e:cf:c1:be:ae:a2:30:3c:fa:c4:e6:
         d9:08:73:32:92:ee:13:af:7b:0c:ee:6b:7e:15:c8:a2:a9:2a:
         7a:af:4c:d9:d2:7b:0f:03:a1:dd:ed:9f:05:39:37:db:be:22:
         8a:bf:d4:0d:b5:3e:ad:54:a8:5f:d6:6e:95:2b:a9:85:49:5c:
         b3:51:d2:e0:15:be:ba:16:b9:25:28:13:a0:ae:5d:45:db:98:
         34:9d:4f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 10 01:12:01 2023 by rpki-client on console-fra.rpki-client.org