Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/9b1fb7b4-c76e-3210-a034-d6b0b41a15fb.roa
File:                     9b1fb7b4-c76e-3210-a034-d6b0b41a15fb.roa (raw, json)
Hash identifier:          KudGUZXBORKMy9EXgVRriTJuHMLgIEzdlPGLZ8edBC0=
Subject key identifier:   5B:7C:47:81:CE:CA:8E:C2:D8:64:AE:A8:F0:56:93:EC:38:1B:98:19
Certificate issuer:       /CN=48f8534f-57cd-45ba-bfa4-ce60842463a4
Certificate serial:       010D0C9F432858451BC74DDB4F4BE07287F60300
Authority key identifier: E8:53:DD:09:72:55:3A:20:6A:9B:7D:EE:50:46:52:6A:5F:62:66:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/9b1fb7b4-c76e-3210-a034-d6b0b41a15fb.roa
Signing time:             Tue 05 Mar 2024 16:34:28 +0000
ROA not before:           Tue 05 Mar 2024 16:34:28 +0000
ROA not after:            Mon 03 Jun 2024 15:34:28 +0000
asID:                     36352
IP address blocks:        199.119.136.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 07 Mar 2024 14:18:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1b:c7:4d:db:4f:4b:e0:72:87:f6:03:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48f8534f-57cd-45ba-bfa4-ce60842463a4
        Validity
            Not Before: Mar  5 16:34:28 2024 GMT
            Not After : Jun  3 15:34:28 2024 GMT
        Subject: CN=e55505e8-da30-4f29-833c-b50c791149c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ee:e7:60:cc:58:5c:19:1a:15:6e:99:0b:d9:
                    7c:9c:80:0a:e0:c8:c8:fd:89:ff:7d:2d:08:f9:d0:
                    0a:85:6b:42:b0:30:29:22:b7:8a:ea:c4:c8:17:10:
                    9a:3d:d5:f9:81:7d:28:ee:4a:57:de:9d:4b:fa:0e:
                    66:26:dc:cb:32:47:b7:32:a4:f1:94:6d:6b:57:97:
                    66:20:77:61:ce:e2:dd:0b:27:13:e5:27:c1:eb:7f:
                    9c:ff:e0:3c:dd:23:1e:20:f1:83:93:d9:fc:d6:54:
                    6d:c0:8d:30:92:c8:28:a6:39:cf:ff:19:cf:cc:95:
                    ee:27:62:d5:1e:60:36:6b:22:c4:46:f5:2e:d9:2f:
                    8a:1f:01:3b:5f:16:dd:7e:cc:66:5e:2f:06:df:d5:
                    d4:55:75:9d:9a:5c:e0:e9:7c:cb:93:6b:45:07:ab:
                    c8:04:aa:2c:6e:9e:af:73:92:37:d3:8b:84:8d:29:
                    01:88:1f:b5:c4:e1:e0:c9:f2:8b:e6:26:cb:08:c9:
                    1f:66:db:2b:07:c4:82:d6:b0:0b:fe:c0:16:e5:f4:
                    9c:dd:47:b4:7d:9f:de:e8:20:38:b1:09:3b:99:2c:
                    fc:60:14:a0:88:53:35:43:1f:f4:91:71:7b:52:1a:
                    62:d1:6d:b3:35:6a:18:1d:d1:37:04:c5:3b:b6:3f:
                    73:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:7C:47:81:CE:CA:8E:C2:D8:64:AE:A8:F0:56:93:EC:38:1B:98:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/9b1fb7b4-c76e-3210-a034-d6b0b41a15fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/48f8534f-57cd-45ba-bfa4-ce60842463a4.crl

            X509v3 Authority Key Identifier:
                keyid:E8:53:DD:09:72:55:3A:20:6A:9B:7D:EE:50:46:52:6A:5F:62:66:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.119.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:8f:b4:7a:78:02:fd:4b:66:85:a8:db:fd:98:aa:bd:07:a6:
         c3:b4:e4:01:a7:7b:fd:36:e9:c4:0c:c7:59:22:a5:33:7d:bc:
         73:1d:ce:dc:68:6c:1b:d4:c7:ea:9a:e8:66:6a:95:8c:4e:03:
         0e:56:85:67:49:9e:6f:0b:77:5e:66:81:d2:04:03:9b:c7:72:
         98:8c:ca:16:01:67:b9:56:9c:83:ab:13:08:fa:93:a1:c1:a2:
         a6:33:85:c4:64:66:a8:dc:8b:55:00:5f:3f:5b:6b:0c:03:3c:
         de:0f:e3:0a:77:a6:41:a7:2e:cf:fa:8d:a9:95:b1:04:90:76:
         b3:ac:ba:a6:2f:e0:33:54:f6:c0:08:e7:9a:0a:09:0d:c2:50:
         1d:26:5a:82:6b:cf:f5:93:00:81:9f:8a:bd:11:10:e2:fc:b8:
         83:78:09:0c:86:f1:bc:de:5a:f5:13:b4:37:53:04:89:c8:76:
         01:81:38:50:93:9e:43:2f:32:bb:53:07:bd:54:cc:b3:8e:71:
         2a:49:53:0f:ec:9a:9f:b7:2d:09:84:93:31:2c:bb:39:17:61:
         5d:fc:cf:6c:e4:bf:70:f9:99:ac:f2:b0:4e:70:17:96:89:10:
         48:d3:40:65:8d:72:7c:47:54:b4:96:3b:28:8f:0f:aa:0d:f6:
         f7:d5:47:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 7 19:38:38 2024 by rpki-client on console-ams.rpki-client.org