Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/51c04245-50dc-32f8-8d68-bd58e9d96104.roa
File:                     51c04245-50dc-32f8-8d68-bd58e9d96104.roa (raw, json)
Hash identifier:          Ri6Dq3zNhgzQNNkQvdgrZpZCxb0IvXPBvk1XE9p4zFs=
Subject key identifier:   6C:7F:9D:57:D1:63:7D:BE:2D:76:03:6F:E7:EE:A0:54:5E:44:62:19
Certificate issuer:       /CN=509a1ba4-f033-4e9b-89e1-8df073375b17
Certificate serial:       010D0C9F4328584633745238B5A2CF8CA8C9C142
Authority key identifier: 7C:CD:4D:63:F9:70:FB:BF:86:FF:3E:F8:45:0E:4F:AE:EE:99:57:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/51c04245-50dc-32f8-8d68-bd58e9d96104.roa
Signing time:             Thu 13 Jun 2024 20:53:37 +0000
ROA not before:           Thu 13 Jun 2024 20:53:37 +0000
ROA not after:            Wed 11 Sep 2024 20:53:37 +0000
asID:                     16509
IP address blocks:        208.71.244.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 09 Jul 2024 16:39:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:33:74:52:38:b5:a2:cf:8c:a8:c9:c1:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=509a1ba4-f033-4e9b-89e1-8df073375b17
        Validity
            Not Before: Jun 13 20:53:37 2024 GMT
            Not After : Sep 11 20:53:37 2024 GMT
        Subject: CN=4565f42b-1579-4811-8251-cb538e13340d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:98:81:8f:71:d9:0c:77:b6:15:f2:1b:07:f1:
                    34:02:7b:4f:04:c2:da:85:0a:3f:1f:97:2c:e1:0e:
                    36:b0:8a:11:e1:5a:d1:4a:1e:3f:89:f2:f7:30:76:
                    e8:eb:4a:69:0f:e3:96:26:cc:94:97:23:81:3f:19:
                    18:17:12:46:4b:43:d7:ac:42:5f:20:84:60:cc:11:
                    84:0f:a4:09:02:96:95:96:89:e1:9d:21:65:ed:b7:
                    ed:75:4e:bf:68:54:e9:81:4c:ca:59:e5:d7:6e:08:
                    fd:b2:3a:d5:fb:3d:a9:57:5d:80:0e:b9:2f:ad:f9:
                    c5:0f:7e:0b:5a:63:66:04:4a:85:4d:8f:44:9c:14:
                    e5:09:a1:b2:6c:0a:ea:a5:4b:6d:f9:35:1e:64:60:
                    b7:59:a2:b2:31:e0:02:d9:db:5a:04:1d:80:2b:b4:
                    e1:c8:f7:5c:25:cc:5c:19:e3:84:1e:9e:68:91:ba:
                    e1:ce:c4:b4:f3:65:c6:d8:b6:fd:a9:92:54:02:bb:
                    41:07:c6:a4:b0:52:48:08:08:74:34:f9:cb:d7:bf:
                    13:61:40:5e:ab:de:c8:2b:db:c6:5b:a3:ae:25:66:
                    da:36:be:1c:1f:75:0d:be:fc:20:ab:b0:0c:31:01:
                    ac:f4:a2:57:6c:fb:e4:d7:33:05:a3:21:e9:01:d8:
                    fe:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:7F:9D:57:D1:63:7D:BE:2D:76:03:6F:E7:EE:A0:54:5E:44:62:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/51c04245-50dc-32f8-8d68-bd58e9d96104.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17/509a1ba4-f033-4e9b-89e1-8df073375b17.crl

            X509v3 Authority Key Identifier:
                keyid:7C:CD:4D:63:F9:70:FB:BF:86:FF:3E:F8:45:0E:4F:AE:EE:99:57:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/509a1ba4-f033-4e9b-89e1-8df073375b17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.71.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:43:79:de:e5:87:35:36:f7:c1:0e:c7:bc:77:c7:34:c0:7c:
         a1:5f:c4:45:af:84:5a:cb:4a:74:07:05:52:4f:66:12:23:22:
         67:c4:cd:20:dc:ff:99:3e:41:c3:96:f7:14:14:21:db:e4:2a:
         71:0e:b7:17:31:c5:7f:62:76:60:f2:59:b6:0a:c7:f1:cb:25:
         85:8b:f9:7e:56:29:9f:34:06:e9:a2:58:48:4c:bf:c3:9f:52:
         9a:47:0d:ef:09:91:f2:1c:11:53:df:76:bc:62:5c:80:3d:14:
         b7:b8:16:ac:c4:09:01:88:a5:42:8f:a1:fc:85:40:c2:b1:46:
         7c:11:31:99:46:bf:68:60:57:94:72:ed:62:11:a9:71:ae:fc:
         1d:b1:d9:e0:8e:d3:e5:1f:ac:6a:e0:48:48:27:9b:77:10:f9:
         55:fe:80:b4:ea:e1:92:38:89:bb:11:ef:a6:ef:1f:96:4f:4f:
         ad:89:d2:2b:d9:09:ab:15:c2:fc:03:ea:27:5e:dc:46:5b:c1:
         89:be:8f:3e:a4:9e:79:de:bd:04:b4:cf:7a:76:81:b7:54:a0:
         1b:fe:59:c3:6e:e6:a3:3a:62:ac:f0:e1:b7:f3:0c:92:42:f5:
         ed:59:b7:47:23:d2:df:98:1e:d0:bf:63:2e:1e:fd:89:58:ec:
         53:1e:85:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 9 18:13:12 2024 by rpki-client on console-fra.rpki-client.org