Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS26930.roa
File:                     AS26930.roa (raw, json)
Hash identifier:          xJR0b07hSFYzB7IzusEe+aiX3beWTD2eHN8bYj3ZUUg=
Subject key identifier:   36:66:39:26:7D:69:55:6E:77:48:D5:7F:41:93:5D:18:AC:F3:32:B2
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       32E1FFE22D72D1E0BBE65D143AE455D57912812A
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS26930.roa
Signing time:             Fri 05 Apr 2024 04:30:33 +0000
ROA not before:           Fri 05 Apr 2024 04:25:33 +0000
ROA not after:            Fri 04 Apr 2025 04:30:33 +0000
asID:                     26930
IP address blocks:        157.254.34.0/23 maxlen: 23
                          157.254.222.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 06 Apr 2024 02:53:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:e1:ff:e2:2d:72:d1:e0:bb:e6:5d:14:3a:e4:55:d5:79:12:81:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Apr  5 04:25:33 2024 GMT
            Not After : Apr  4 04:30:33 2025 GMT
        Subject: CN=366639267D69556E7748D57F41935D18ACF332B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:8a:b6:1f:97:15:73:11:00:9a:6e:e8:29:54:
                    87:5a:82:b1:5b:f8:be:37:30:89:9c:6b:33:60:20:
                    f8:85:03:26:70:20:6e:67:8e:6a:5d:01:f8:3d:07:
                    dc:d9:81:db:a0:77:22:81:14:b9:fc:7b:08:2a:c6:
                    09:d7:3e:48:6d:cd:53:0c:cf:aa:61:b5:18:2c:7c:
                    04:74:e4:2e:b8:85:47:5d:b2:c0:f2:a0:46:d7:94:
                    3b:64:2f:40:d0:24:0c:d8:60:a0:c0:d0:0b:13:2f:
                    91:c0:9b:81:e1:91:68:48:3e:68:b6:f2:80:be:50:
                    ae:b0:07:f5:09:b1:57:d2:27:be:0e:63:d4:ce:af:
                    ac:7c:c9:ea:42:47:9b:8c:ba:5a:ef:a6:ce:87:47:
                    eb:4b:b0:8b:17:45:3b:29:2b:67:58:03:dc:fb:11:
                    09:00:da:28:63:b0:c8:ff:b1:ff:e3:bf:1d:6a:55:
                    e3:1b:9e:42:1b:c5:6d:b7:3f:b7:e2:83:e6:9c:bf:
                    ca:1d:21:a6:cb:bc:50:5b:1f:3e:38:78:c5:e6:09:
                    6d:02:25:0a:c8:1a:7e:e6:3a:d5:0b:f8:b6:43:3e:
                    86:29:fc:bd:73:f1:6f:69:7d:8a:36:c9:d8:d7:2d:
                    75:0c:81:ae:d1:af:d4:b6:07:df:cc:a8:d5:da:99:
                    0b:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:66:39:26:7D:69:55:6E:77:48:D5:7F:41:93:5D:18:AC:F3:32:B2
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS26930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.34.0/23
                  157.254.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:15:bf:2c:4d:d9:d2:7b:bc:f2:ea:21:68:6e:04:f5:9d:bf:
         4c:0b:82:a2:4b:04:11:4b:a6:ea:a8:77:79:11:4c:3b:db:57:
         32:cd:b7:cf:5e:4b:1d:68:55:70:89:4d:78:40:82:da:df:90:
         35:8e:91:87:55:41:43:63:e5:44:70:c3:c0:1a:98:e0:14:95:
         a3:b3:18:07:15:58:d5:73:72:52:a3:b8:cb:2e:1b:2a:6f:f3:
         f2:44:3c:62:2d:13:ac:59:48:05:9b:2e:75:99:b9:7d:54:91:
         37:b1:e5:31:59:6e:cf:7f:37:1b:5f:7c:7e:ec:b4:7b:27:41:
         f4:c8:7f:1a:26:0f:ba:e5:2c:10:45:50:80:b2:14:62:d9:f6:
         1c:be:b5:cc:59:1e:0f:62:a4:44:aa:b1:fe:7d:4e:2c:ca:f2:
         31:3a:e6:a6:53:16:de:3b:37:ee:08:4b:6e:d3:6f:b0:c7:6f:
         75:90:48:e3:e5:17:a3:c8:38:c2:74:76:0a:83:05:5d:23:8a:
         00:0b:a4:db:be:6c:9f:36:f9:7e:84:5c:04:a3:f3:5e:3c:b1:
         37:80:3a:a5:bd:8f:82:96:b6:1e:2c:c9:de:d5:00:0b:8e:06:
         cb:b1:8d:1b:8b:ec:77:e1:20:43:c8:97:53:77:f6:a9:8e:5c:
         d5:d9:b4:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 6 03:55:41 2024 by rpki-client on console-fra.rpki-client.org