Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e898f125-ac52-3307-9a92-684290ed9fe7.roa
File:                     e898f125-ac52-3307-9a92-684290ed9fe7.roa (raw, json)
Hash identifier:          b78Kf9RksewHelqHlsVouLzZOxGLhNqjuDtfOFuEULQ=
Subject key identifier:   54:64:15:E1:D7:68:40:E3:76:DA:A4:7E:BC:E3:E9:76:1F:1F:AB:DC
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328583FC4EBEA5FEED580FA9E21B240
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e898f125-ac52-3307-9a92-684290ed9fe7.roa
Signing time:             Mon 31 Oct 2022 12:00:00 +0000
ROA not before:           Mon 31 Oct 2022 12:00:00 +0000
ROA not after:            Sun 02 Feb 2025 05:00:00 +0000
asID:                     15169
IP address blocks:        142.250.190.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:24:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:c4:eb:ea:5f:ee:d5:80:fa:9e:21:b2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Oct 31 12:00:00 2022 GMT
            Not After : Feb  2 05:00:00 2025 GMT
        Subject: CN=72a9222d-a583-43de-a533-ca0cc9ef1169
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:90:72:b5:2e:81:23:d8:64:4b:e2:70:5f:db:
                    37:d9:68:91:5a:dd:09:16:53:ee:75:d4:ad:48:43:
                    49:f2:12:1c:84:4c:85:8a:5d:04:f3:d8:25:8d:70:
                    aa:43:40:7f:94:57:f2:75:ed:94:2e:8a:02:7d:aa:
                    8d:0e:a5:f1:7e:75:34:84:e7:f4:2c:42:93:f1:f6:
                    d1:5e:7c:47:ee:c9:97:5b:7c:91:6b:a2:e4:05:d1:
                    2b:71:57:c8:6b:88:ba:0c:34:53:20:cb:79:1b:ed:
                    10:f9:50:a3:4a:61:f9:94:b0:76:5a:8f:c2:99:58:
                    01:d6:a2:03:54:02:71:ca:4e:8d:ea:15:89:73:98:
                    b3:ef:d1:cf:cd:79:54:e3:39:d3:0e:d5:1f:19:05:
                    89:29:3d:4b:d3:bc:65:f5:07:46:c4:bd:38:4e:d6:
                    c9:be:7e:8c:57:c6:5c:62:92:21:73:1d:bd:b4:33:
                    37:06:7d:40:07:8c:7c:35:9a:e8:4b:51:d5:65:09:
                    e0:e2:f9:a0:78:15:cc:c5:00:56:f9:81:f5:43:18:
                    e9:4b:e8:3c:62:48:2a:aa:41:d1:98:c9:64:17:07:
                    01:88:d4:03:08:0f:dc:f5:6a:7e:b6:23:99:6b:5c:
                    9f:20:66:aa:cf:f2:60:9a:01:ab:36:ae:5a:7a:85:
                    35:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:64:15:E1:D7:68:40:E3:76:DA:A4:7E:BC:E3:E9:76:1F:1F:AB:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e898f125-ac52-3307-9a92-684290ed9fe7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.250.190.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:fb:33:b0:aa:c6:f2:cd:05:ac:9d:11:a6:97:f1:57:53:12:
         fa:fd:04:5d:11:66:dc:3f:62:51:f0:04:84:6a:15:a1:0f:0b:
         24:c2:e8:87:a5:2c:e0:63:66:2e:ec:3d:f6:af:4c:55:d5:5d:
         09:f7:ef:84:d4:a7:63:63:8f:ff:6f:a5:ee:36:a8:14:45:f5:
         32:1e:cf:50:4d:60:9a:ce:b8:30:fd:eb:8e:cd:ae:3e:5c:c1:
         e1:dd:86:c0:1d:a3:f0:31:53:5d:2b:f2:3d:13:71:33:b6:78:
         6d:90:02:b9:43:a9:e5:3b:d1:49:f2:ba:bc:e3:5d:03:d6:be:
         75:4b:35:7f:a5:37:73:6f:63:45:e4:25:22:eb:4a:72:5f:af:
         80:7e:29:92:1e:6f:7a:51:03:b8:6b:af:7b:f1:f3:3c:52:bb:
         b0:b9:d9:ce:a3:ae:bd:26:13:db:5c:0e:b8:bd:56:24:f7:29:
         19:58:b5:d7:7a:ab:a6:1f:a4:1e:28:4d:e3:27:8b:0b:b5:f0:
         30:36:18:dc:6f:68:0c:bf:0d:91:85:7b:c7:02:53:be:d4:b9:
         69:21:c1:a0:49:46:01:f5:9b:4c:8f:03:f0:ea:cf:b2:02:1b:
         b7:50:a0:57:72:7e:2c:9d:73:79:43:86:83:c1:31:2d:e6:0b:
         d0:38:ca:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 02:40:49 2024 by rpki-client on console-fra.rpki-client.org