Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b5ff9b8d-352f-3d46-9aff-f6ccde0a9040.roa
File:                     b5ff9b8d-352f-3d46-9aff-f6ccde0a9040.roa (raw, json)
Hash identifier:          j/9AsnqMt3Hp7AmdbEYPNHA3k/lsUp9VpDIuOCPMsC8=
Subject key identifier:   FA:16:76:CA:0D:83:D9:81:9E:5A:B1:27:00:BF:61:92:CD:9C:A5:56
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328583F073145A3AE0DCEF832B3F700
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b5ff9b8d-352f-3d46-9aff-f6ccde0a9040.roa
Signing time:             Thu 25 Aug 2022 12:00:00 +0000
ROA not before:           Thu 25 Aug 2022 12:00:00 +0000
ROA not after:            Sun 24 Aug 2025 04:00:00 +0000
asID:                     701
IP address blocks:        138.89.128.0/18 maxlen: 18

Validation:               Failed, certificate revoked on Tue 05 Dec 2023 19:31:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:07:31:45:a3:ae:0d:ce:f8:32:b3:f7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 25 12:00:00 2022 GMT
            Not After : Aug 24 04:00:00 2025 GMT
        Subject: CN=89a3767a-4382-489e-a1ea-25c490558520
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:2d:38:3b:85:67:68:4f:6c:4f:e3:1d:90:53:
                    be:59:c8:2a:71:b5:5e:06:7e:68:89:3c:2e:6a:99:
                    6e:df:b4:f3:80:2c:8e:6b:79:b8:7a:0f:67:c8:c3:
                    5d:17:b1:58:d7:b1:dc:63:56:3e:42:35:5f:47:12:
                    7b:c6:70:e1:2e:03:dc:30:53:0a:3b:ed:af:1f:cd:
                    08:b5:31:17:35:fd:19:c7:f2:fb:3c:7c:34:bd:b3:
                    c1:7c:d7:2e:cb:f7:fc:07:f7:8e:8f:8f:91:70:6d:
                    e4:3d:d1:4e:6a:a6:64:b8:5e:b4:b7:2e:5b:75:32:
                    8c:0c:cc:9b:ca:1d:15:85:8a:e8:be:2f:3b:7f:b4:
                    3a:2d:8e:2c:2d:84:c2:cf:11:3e:d8:e9:04:b9:76:
                    96:b5:91:41:91:bf:08:87:ce:63:e0:f2:7d:a1:00:
                    54:fd:a7:67:a7:9e:79:e6:40:3b:aa:83:7b:cf:87:
                    e3:e0:99:1d:d4:f7:41:14:64:68:24:d5:ac:52:cf:
                    50:d7:56:fd:a8:71:b8:c7:d2:98:93:58:18:c2:20:
                    e2:94:20:54:ab:5c:e2:a0:f4:2b:ec:27:f7:f5:01:
                    61:f2:6d:81:ec:be:29:f6:b7:1d:6c:92:82:39:7a:
                    16:ad:56:ed:1b:95:9b:64:cd:c3:92:8e:45:c0:2a:
                    dd:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:16:76:CA:0D:83:D9:81:9E:5A:B1:27:00:BF:61:92:CD:9C:A5:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b5ff9b8d-352f-3d46-9aff-f6ccde0a9040.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.89.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:c6:52:56:fc:4d:b6:2b:42:bc:de:9d:54:2a:ee:b4:3b:23:
         20:ec:f9:39:a8:9b:6e:2d:ba:9a:8d:83:b6:83:2e:4d:7e:72:
         49:b5:3c:e0:04:2d:0c:6e:4f:4a:05:0f:48:dd:03:44:fa:18:
         92:7c:3d:9d:93:3b:80:80:d9:e7:80:f5:50:d5:26:0d:dc:24:
         c0:ac:66:34:74:b4:cb:82:8a:65:7c:29:e0:16:ce:b3:f0:07:
         ae:98:51:01:e6:5e:0f:a9:21:c6:4b:89:5d:27:43:2c:45:35:
         ca:c9:fa:f4:8f:37:e5:03:0d:6b:2e:fd:28:34:54:56:63:aa:
         cc:11:6a:d7:18:e9:bb:f8:32:01:ee:49:96:17:d2:6d:e3:e9:
         ca:3d:3f:3c:44:74:a4:9a:68:f4:44:f9:74:f5:b6:54:34:18:
         91:41:ef:2a:21:da:b7:aa:6e:07:47:fe:ec:55:1d:07:b3:7e:
         7a:47:07:f6:fd:4d:a2:a2:87:30:a1:c9:48:4f:ca:3e:c3:a1:
         8a:a2:94:71:ba:03:46:58:50:49:fd:3c:ae:ec:c9:94:9b:32:
         73:1b:82:66:de:f2:0e:de:c3:b5:06:af:a3:9b:54:f4:2e:03:
         88:3c:05:80:41:78:da:9e:1f:a3:cd:39:54:45:92:81:91:bd:
         e7:51:40:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:47:36 2024 by rpki-client on console-ams.rpki-client.org