Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/02129c51-7980-3bad-9bb9-0159606e3830.roa
File:                     02129c51-7980-3bad-9bb9-0159606e3830.roa (raw, json)
Hash identifier:          x7QXeK/J2r/nuptBkJHhX3g8sboh47GPd4ty3ZGCMMY=
Subject key identifier:   44:07:E4:AC:97:4E:C6:15:37:D6:7F:A2:63:02:14:17:02:A4:5A:5F
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584309FA3F5D9F7BEE198CBEE700
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/02129c51-7980-3bad-9bb9-0159606e3830.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     15169
IP address blocks:        142.251.26.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 29 Mar 2024 20:23:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:fa:3f:5d:9f:7b:ee:19:8c:be:e7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=1639de49-739e-4614-9fbd-f1a445240247
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:d0:5d:b9:a3:a8:1e:01:e2:34:62:94:f0:02:
                    02:15:71:da:65:c2:3b:d0:d1:0d:e9:c1:b1:13:67:
                    a7:cc:5c:f7:30:9a:1b:7c:4e:b5:b6:42:e7:2a:3b:
                    65:8a:aa:6d:83:48:e0:12:90:d0:6a:cb:4e:27:df:
                    f4:7d:b1:d4:89:d4:01:d8:f4:1c:78:c5:15:f3:e3:
                    4e:47:7e:33:51:e9:ae:8f:30:75:ea:e7:2f:95:b7:
                    ad:d7:d5:1d:ae:23:27:21:87:e0:0e:94:53:77:7d:
                    49:9c:5f:1c:99:72:48:d8:70:65:a4:0e:2e:cd:d8:
                    24:25:d7:94:bd:53:22:fb:35:a2:21:69:84:34:46:
                    54:17:02:04:c3:9d:84:80:10:f0:4e:6a:9d:6f:da:
                    26:46:c2:f4:4e:e8:79:e3:ae:2d:9b:1b:0e:50:bf:
                    b8:e2:a0:72:60:9f:77:f1:e0:40:0c:40:f2:38:c6:
                    4c:3d:01:ba:ac:8c:c3:3c:76:cf:1f:bc:e5:17:80:
                    22:be:75:e6:15:7c:6e:af:b7:0a:70:42:35:62:0f:
                    10:57:3e:15:5c:3a:21:2e:b0:b6:de:6c:d3:90:34:
                    61:85:27:a0:32:82:4f:fc:72:de:28:dc:d7:e6:a2:
                    fc:bd:a4:3c:b9:8c:d1:18:54:92:f7:6f:3f:d1:0c:
                    13:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:07:E4:AC:97:4E:C6:15:37:D6:7F:A2:63:02:14:17:02:A4:5A:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/02129c51-7980-3bad-9bb9-0159606e3830.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.251.26.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:64:6e:de:49:df:0c:9c:45:a0:d4:73:00:3d:d6:c4:82:70:
         ef:7c:94:e6:11:5d:2d:42:39:cc:eb:d2:c0:cf:07:37:b2:ca:
         b6:6d:eb:a2:9a:f5:c8:4f:8d:ec:e5:fd:9f:b3:d0:a1:ad:2e:
         fe:f6:58:49:51:42:94:f7:00:95:25:12:59:89:59:88:37:c3:
         7b:26:e9:0b:a0:67:de:d6:87:47:68:a4:ca:3f:ca:0b:81:ef:
         24:d4:54:fd:2c:7b:bb:c6:6f:1c:4c:0c:f5:4b:2e:20:38:ad:
         84:b8:9d:87:99:88:f2:0b:2b:89:a8:db:41:9a:f9:3b:93:aa:
         65:44:a9:b9:d8:81:5e:e2:d9:e5:5f:64:2e:b7:a8:77:62:70:
         a5:fa:08:55:f5:a2:8d:0c:14:1d:b5:86:fa:5e:ba:79:56:ae:
         3b:7f:6d:e2:89:cf:d4:f3:06:df:1f:87:66:6a:37:38:80:e9:
         34:4a:4b:5e:8e:87:52:36:12:cc:3d:89:9f:83:d4:9d:8b:4b:
         ac:ea:06:39:c9:8e:be:28:c0:8a:65:80:81:c8:22:0e:33:7f:
         9e:b7:59:dc:9a:be:78:c0:f9:6f:22:bb:d5:47:62:f8:02:aa:
         87:1f:99:cb:dd:b0:0e:03:81:b3:bf:b0:0d:9c:64:47:8c:08:
         5a:f1:74:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 21:30:23 2024 by rpki-client on console-fra.rpki-client.org