Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/0a6b1c0d-2681-3928-85f8-2be109fd8b2b.roa
File:                     0a6b1c0d-2681-3928-85f8-2be109fd8b2b.roa (raw, json)
Hash identifier:          sOFc6J8xmFrbDuG4qPytuZE1xGuRBZSsqt/xyJmRwC8=
Subject key identifier:   2C:0D:E1:9E:97:41:E2:F3:60:FB:AA:FA:EB:5A:DE:4A:FC:58:4D:0C
Certificate issuer:       /CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
Certificate serial:       010D0C9F43285844720A29BDC69DEDA6E1DF9E00
Authority key identifier: 53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/0a6b1c0d-2681-3928-85f8-2be109fd8b2b.roa
Signing time:             Wed 03 Jan 2024 12:00:00 +0000
ROA not before:           Wed 03 Jan 2024 12:00:00 +0000
ROA not after:            Wed 29 Jan 2025 05:00:00 +0000
asID:                     32381
IP address blocks:        207.126.144.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:59:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:72:0a:29:bd:c6:9d:ed:a6:e1:df:9e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
        Validity
            Not Before: Jan  3 12:00:00 2024 GMT
            Not After : Jan 29 05:00:00 2025 GMT
        Subject: CN=3b8a56b5-d828-495e-be40-3ea16127011a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:0f:76:9f:02:8d:c9:10:ce:fd:fe:9f:b8:92:
                    b5:5e:31:b7:aa:c8:05:46:23:55:7f:54:5d:2a:18:
                    ce:54:1c:c7:75:20:51:2f:11:dc:58:96:a6:ed:0c:
                    74:d5:12:7c:65:b9:19:98:a5:e4:66:c5:52:0d:1b:
                    45:53:b3:a1:6c:2a:67:67:03:e4:77:b4:2f:c8:b4:
                    a6:0b:8e:e0:3d:e6:6d:1d:74:82:59:35:2c:64:58:
                    7a:9a:48:57:a2:65:1a:69:1e:eb:f6:2a:ca:ca:3c:
                    bf:91:49:d9:e7:22:b6:1e:b7:f9:60:70:87:61:7f:
                    87:41:1f:ea:c9:a0:a5:04:7a:dd:82:e1:10:da:28:
                    bb:a8:de:0f:b0:b9:de:7b:87:f5:c0:6f:68:c6:48:
                    aa:2e:79:9c:68:b4:46:a7:c9:c0:bb:1c:1b:44:01:
                    38:37:a1:cf:b5:2b:54:e0:19:62:bc:db:4b:fe:83:
                    be:ad:54:48:e3:12:9e:29:a5:f8:9d:a6:ac:97:0f:
                    4e:5d:e0:72:1f:ff:9f:8d:d0:f4:8e:06:0d:ab:ec:
                    ba:1a:a7:23:75:7d:5d:b0:f2:cf:2a:82:5a:82:a7:
                    42:fd:0f:63:b5:e8:f6:a2:fd:82:71:10:7e:a7:c9:
                    98:1d:c0:bf:49:cc:c9:1b:33:40:3f:e5:1a:f9:99:
                    79:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:0D:E1:9E:97:41:E2:F3:60:FB:AA:FA:EB:5A:DE:4A:FC:58:4D:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/0a6b1c0d-2681-3928-85f8-2be109fd8b2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl

            X509v3 Authority Key Identifier:
                keyid:53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.126.144.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:f8:e0:ff:c7:9a:f2:b1:35:92:c5:cd:15:bd:60:d6:5d:cf:
         36:7d:71:2d:14:e0:9d:22:81:db:8e:56:8c:ee:22:48:59:8a:
         ae:6b:6c:28:75:81:48:28:f3:9d:c2:69:7d:be:56:de:aa:c3:
         9e:9e:30:fd:d2:61:81:3f:14:87:7d:55:2a:a7:ef:b8:0c:78:
         31:fa:33:88:91:2f:37:b8:8e:1b:c6:0e:4a:fb:72:69:b4:a9:
         4d:37:df:47:a3:1e:b3:0e:f1:de:ed:cd:4f:4d:a3:58:8e:0a:
         f8:7f:ba:b6:b4:68:84:4f:f2:64:0c:d8:23:dd:9c:12:05:95:
         90:c6:17:d9:d8:bc:27:da:77:66:a4:12:aa:64:25:ca:ef:aa:
         6d:15:5f:be:e3:57:6c:9a:e5:02:29:55:26:62:96:3f:9f:c8:
         aa:0f:06:55:7d:ff:f6:f4:93:8c:34:0d:8a:37:da:83:6c:71:
         e6:6d:7d:ac:68:01:a6:00:53:8b:f2:8f:ca:c8:a6:2d:88:a3:
         0b:c0:35:71:2e:30:6f:3b:5c:4f:1f:59:4b:38:24:74:4e:a7:
         90:2b:c8:aa:89:6d:a1:58:90:4b:af:3e:d2:e4:6d:e1:60:de:
         8c:d4:79:8c:1f:ec:eb:13:d0:43:1b:30:fb:5a:41:3f:a4:ed:
         93:3d:7a:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 05:04:25 2024 by rpki-client on console-ams.rpki-client.org