Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/694316a1-0851-33e1-94fb-ea0c570a6628.roa
File:                     694316a1-0851-33e1-94fb-ea0c570a6628.roa (raw, json)
Hash identifier:          X2MjK9OcRktk0engL3N29ylxZI1RgYN0wqcgSdkfGKE=
Subject key identifier:   67:BC:72:76:4B:6D:56:85:83:82:ED:67:23:0C:4B:FF:63:FC:CA:52
Certificate issuer:       /CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
Certificate serial:       010D0C9F43285844720A8334F40C54928195224C
Authority key identifier: 53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/694316a1-0851-33e1-94fb-ea0c570a6628.roa
Signing time:             Wed 03 Jan 2024 12:00:00 +0000
ROA not before:           Wed 03 Jan 2024 12:00:00 +0000
ROA not after:            Wed 29 Jan 2025 05:00:00 +0000
asID:                     36040
IP address blocks:        207.126.148.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Fri 29 Mar 2024 20:25:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:72:0a:83:34:f4:0c:54:92:81:95:22:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
        Validity
            Not Before: Jan  3 12:00:00 2024 GMT
            Not After : Jan 29 05:00:00 2025 GMT
        Subject: CN=94a6ed5d-12bf-40b9-9375-377bd0e97825
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c7:f9:ad:fa:c6:ea:b0:b3:33:a5:c6:bf:d0:
                    81:9c:18:5c:7e:12:83:e4:cc:7d:15:5a:50:31:aa:
                    48:b1:11:3d:1b:20:1a:60:fb:af:d6:fd:af:2d:e0:
                    d2:18:4f:d0:b5:6c:fc:11:5c:03:55:a8:f0:61:82:
                    79:dc:6e:10:48:69:22:69:e1:ba:8f:88:72:e4:48:
                    11:7c:41:b9:43:0e:8e:53:26:a7:8b:98:22:60:02:
                    ce:ff:e6:55:28:05:5d:4a:c4:83:33:cc:36:cd:7d:
                    df:09:81:51:6e:a1:ef:a3:d2:aa:12:ea:93:ee:be:
                    5e:aa:a0:48:03:55:03:9f:fb:fa:64:5c:a7:53:e1:
                    81:86:cd:b5:a3:5f:6c:c8:5d:cf:9d:c2:21:b3:89:
                    c9:78:08:f6:f6:33:90:8d:9d:90:8a:db:a0:25:a1:
                    ad:87:5e:14:2e:6c:88:70:13:85:55:6e:6d:ab:2a:
                    79:f9:17:16:6c:59:34:f3:35:5c:5a:2e:34:6b:2a:
                    f9:69:ca:1e:03:2c:f2:f9:e1:07:20:d6:61:98:bf:
                    42:be:08:b9:c6:2b:ba:71:89:4a:7c:c0:11:2b:1a:
                    15:98:7d:b1:aa:e4:51:50:69:6b:29:1e:2b:ae:8a:
                    6d:a8:e4:a5:e8:c6:80:8a:b6:98:34:14:8b:39:2d:
                    34:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:BC:72:76:4B:6D:56:85:83:82:ED:67:23:0C:4B:FF:63:FC:CA:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/694316a1-0851-33e1-94fb-ea0c570a6628.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl

            X509v3 Authority Key Identifier:
                keyid:53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.126.148.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:4f:02:63:c0:2f:85:49:28:11:53:31:ef:76:35:95:fe:6a:
         68:c0:24:a3:4e:ed:05:08:b9:8a:18:ed:34:b4:83:7d:00:c2:
         b1:9b:cc:73:06:c4:4e:56:82:03:dc:24:76:25:b0:b0:57:16:
         7a:28:b1:41:4f:83:aa:dc:37:4e:3f:a2:85:5e:a7:d6:22:38:
         55:7e:7a:73:bd:90:77:af:38:13:58:7d:2f:66:c1:87:03:5e:
         e8:ce:71:d4:f7:6d:b1:b1:3f:9c:a7:14:b5:45:c7:a6:2e:d4:
         0a:48:d2:7c:a6:79:94:93:5a:f3:85:8a:6d:e2:9e:8a:37:3d:
         dd:d1:90:04:c5:01:a8:12:6f:af:60:5d:33:40:e8:74:61:69:
         b3:77:1e:32:3a:77:ec:15:3e:58:a0:af:96:0c:65:1b:c6:2e:
         76:36:5a:51:05:27:dd:e1:03:11:17:1a:4f:91:d4:cc:69:5e:
         6c:93:2a:d9:91:5f:f6:d2:48:07:53:0e:a9:31:c4:d6:bf:db:
         c4:18:d0:67:03:a2:69:e2:fe:7f:dd:25:73:4f:92:0a:b3:fc:
         25:90:b8:db:c7:43:33:47:3c:2f:f2:f4:64:c2:60:28:bb:cc:
         81:51:9c:48:aa:02:e7:59:21:34:8e:08:f7:da:b4:bf:dd:01:
         26:55:d4:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 21:30:23 2024 by rpki-client on console-fra.rpki-client.org