Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28d0c262-8ea2-444a-ab1e-6d07c3483e45/d2943ff9-3b12-3595-b71f-3f130b00e896.roa
File:                     d2943ff9-3b12-3595-b71f-3f130b00e896.roa (raw, json)
Hash identifier:          7HarrTA3Sfr4lSn7X+suHHilHVV7Vuzzm3Xfrec2sus=
Subject key identifier:   D3:04:AB:23:CB:44:BD:97:6F:72:79:41:66:93:ED:8E:4C:D4:CD:C8
Certificate issuer:       /CN=28d0c262-8ea2-444a-ab1e-6d07c3483e45
Certificate serial:       010D0C9F432858451B7AF13936C2C4D9B95C7E80
Authority key identifier: 7B:FD:21:C3:F3:A0:5F:FC:74:CB:DE:A6:8F:D9:34:04:EC:8B:08:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28d0c262-8ea2-444a-ab1e-6d07c3483e45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28d0c262-8ea2-444a-ab1e-6d07c3483e45/d2943ff9-3b12-3595-b71f-3f130b00e896.roa
Signing time:             Tue 05 Mar 2024 14:00:31 +0000
ROA not before:           Tue 05 Mar 2024 14:00:31 +0000
ROA not after:            Mon 03 Jun 2024 13:00:31 +0000
asID:                     396356
IP address blocks:        216.150.74.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 19 Apr 2024 18:28:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1b:7a:f1:39:36:c2:c4:d9:b9:5c:7e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28d0c262-8ea2-444a-ab1e-6d07c3483e45
        Validity
            Not Before: Mar  5 14:00:31 2024 GMT
            Not After : Jun  3 13:00:31 2024 GMT
        Subject: CN=32d2bd3a-54c9-426c-9f72-cb1dfac24ec5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:7f:9b:ad:8b:ed:e3:f0:55:40:97:49:58:73:
                    ec:05:0d:a3:6c:0d:45:1e:fd:99:83:c8:2a:86:b4:
                    e6:ec:a5:3a:53:d3:53:14:42:34:fd:b8:c8:82:78:
                    be:26:b8:1d:1e:29:08:86:10:30:13:71:74:d6:56:
                    6c:30:a6:f2:14:6e:0b:95:bb:c7:97:06:ff:5c:34:
                    73:cb:16:30:b6:15:75:f5:c7:0c:4a:3c:8b:0b:7f:
                    33:b8:68:6c:4f:70:53:57:c0:97:08:0f:75:4a:83:
                    27:57:7d:d6:b5:a7:ad:dc:d7:59:20:ef:ae:34:cd:
                    37:ac:21:4f:cf:2d:04:73:28:e2:8a:1f:bf:06:44:
                    80:e6:8a:05:44:b5:b3:08:0d:26:c4:0d:e1:5a:60:
                    86:c1:fb:b5:8a:e3:15:fc:a1:f1:ed:fd:10:32:08:
                    9a:15:88:08:74:52:ea:d5:19:51:4b:75:a7:de:90:
                    a1:82:6a:60:54:11:e2:a2:07:a4:58:a1:b6:9f:77:
                    c0:16:4a:cf:99:7e:13:90:88:27:a3:0a:3a:35:ac:
                    e6:7e:1f:30:97:e5:ea:0b:2b:13:15:ea:52:e7:dd:
                    f4:27:29:a3:65:24:d1:c9:ba:53:51:cb:64:d7:fb:
                    6c:74:fd:f2:02:dd:50:2d:64:8e:51:e7:c3:3d:d0:
                    54:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:04:AB:23:CB:44:BD:97:6F:72:79:41:66:93:ED:8E:4C:D4:CD:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28d0c262-8ea2-444a-ab1e-6d07c3483e45/d2943ff9-3b12-3595-b71f-3f130b00e896.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28d0c262-8ea2-444a-ab1e-6d07c3483e45/28d0c262-8ea2-444a-ab1e-6d07c3483e45.crl

            X509v3 Authority Key Identifier:
                keyid:7B:FD:21:C3:F3:A0:5F:FC:74:CB:DE:A6:8F:D9:34:04:EC:8B:08:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/28d0c262-8ea2-444a-ab1e-6d07c3483e45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.150.74.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:e9:2e:e5:36:35:b9:60:dc:b3:0c:d2:f5:a2:05:1f:d6:0a:
         65:f1:96:0e:f0:83:ad:26:c4:4c:a8:8e:8f:72:9f:33:c9:d7:
         3e:c0:6f:33:0f:a3:b2:3d:da:f1:37:e0:27:61:ca:93:b4:75:
         4a:49:e9:30:71:bf:4d:97:c2:9e:10:2b:83:cb:e0:93:85:04:
         52:63:37:13:91:55:30:0b:73:36:80:4b:fe:b6:3f:06:40:7b:
         0c:2e:80:a1:14:0a:48:8b:13:95:c8:7c:a5:65:60:3d:8a:48:
         06:b7:5e:7f:89:95:24:04:20:30:27:7f:13:db:59:a3:23:e1:
         18:5a:72:4e:72:ab:74:ad:46:2e:7b:d8:d0:45:23:68:94:e9:
         4b:32:37:30:f9:06:5a:4e:87:60:c6:83:64:e0:a7:4f:34:d5:
         88:f6:72:1d:97:b9:e2:ed:21:27:4f:29:43:c0:79:86:1f:b8:
         00:21:d0:17:4e:4d:a2:2b:a3:1b:9e:eb:cc:3d:5d:84:96:33:
         a3:22:41:a9:ae:26:a4:03:26:15:c4:76:b9:ab:c6:5e:cb:80:
         4e:0a:7e:a0:eb:3b:6f:28:82:6e:8c:48:63:0a:cd:31:3c:b8:
         f4:14:9b:6e:b3:13:4c:18:fa:75:14:b6:d3:fa:88:36:0a:8d:
         73:f6:cf:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 21:44:05 2024 by rpki-client on console-fra.rpki-client.org