Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ff44f78c-6d70-421c-a422-92b3c44d921c/587a8913-4ac1-321f-b4f2-33738f26de72.roa
File:                     587a8913-4ac1-321f-b4f2-33738f26de72.roa (raw, json)
Hash identifier:          ihgfuwMlAzE3/JK7B+SOIz2GmY//Wh1q8oE4xN6WcIY=
Subject key identifier:   F9:77:E7:DA:7F:A1:08:31:93:6A:7C:8C:1D:6C:30:EB:53:27:91:97
Certificate issuer:       /CN=ff44f78c-6d70-421c-a422-92b3c44d921c
Certificate serial:       010D0C9F432858463003DE75C0DAF191D1A0EF80
Authority key identifier: 43:C5:A6:43:C3:B1:B3:7A:3F:E6:C8:A5:19:C2:52:4A:81:B1:A3:2D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ff44f78c-6d70-421c-a422-92b3c44d921c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ff44f78c-6d70-421c-a422-92b3c44d921c/587a8913-4ac1-321f-b4f2-33738f26de72.roa
Signing time:             Wed 12 Jun 2024 15:19:37 +0000
ROA not before:           Wed 12 Jun 2024 15:19:37 +0000
ROA not after:            Tue 10 Sep 2024 15:19:37 +0000
asID:                     395967
IP address blocks:        170.76.237.0/24 maxlen: 24
                          2607:b9c0::/32 maxlen: 32

Validation:               Failed, certificate revoked on Tue 09 Jul 2024 14:52:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:30:03:de:75:c0:da:f1:91:d1:a0:ef:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff44f78c-6d70-421c-a422-92b3c44d921c
        Validity
            Not Before: Jun 12 15:19:37 2024 GMT
            Not After : Sep 10 15:19:37 2024 GMT
        Subject: CN=80276eb6-faea-4cbe-9e70-044e7047d148
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:19:31:75:7e:bb:0d:8c:27:10:f9:d2:a0:c1:
                    88:8e:54:05:c0:a4:67:b8:df:a3:59:da:3f:ab:45:
                    d2:09:4d:90:d9:64:18:69:12:2c:07:9b:92:ed:9f:
                    64:09:39:50:17:fa:79:b8:15:1e:57:4d:a6:0d:ab:
                    54:45:93:31:54:7e:84:59:d8:8d:bf:ae:7a:32:50:
                    54:99:c6:d2:97:2e:ba:11:92:b6:19:f9:eb:d2:39:
                    9e:e0:e1:4a:ae:ba:e7:b6:fe:61:da:98:62:b0:9a:
                    fa:88:33:28:26:e5:43:f2:5b:b0:fc:b1:58:40:a5:
                    09:c7:2d:67:12:73:a4:3f:78:53:20:47:ca:03:b9:
                    3b:ce:e4:76:93:25:3e:0e:79:46:ab:90:26:fa:3b:
                    0a:97:72:77:ac:35:a5:07:c1:c7:8c:4b:3c:3f:b4:
                    66:49:63:17:ae:12:40:b5:b2:c7:a1:4f:ec:9e:04:
                    d4:c6:80:04:07:ba:8a:ea:2c:56:f3:c3:78:38:b9:
                    b3:e0:75:95:4e:ca:91:6e:dd:42:81:2e:83:1c:ef:
                    2e:fb:29:04:7f:d5:a6:ca:4e:ed:6b:93:29:80:2b:
                    c7:39:e9:87:4a:f7:aa:75:2a:09:62:38:fb:89:c1:
                    c3:8a:d6:05:57:12:dd:57:57:44:bd:9a:a3:cd:4b:
                    5f:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:77:E7:DA:7F:A1:08:31:93:6A:7C:8C:1D:6C:30:EB:53:27:91:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ff44f78c-6d70-421c-a422-92b3c44d921c/587a8913-4ac1-321f-b4f2-33738f26de72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ff44f78c-6d70-421c-a422-92b3c44d921c/ff44f78c-6d70-421c-a422-92b3c44d921c.crl

            X509v3 Authority Key Identifier:
                keyid:43:C5:A6:43:C3:B1:B3:7A:3F:E6:C8:A5:19:C2:52:4A:81:B1:A3:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ff44f78c-6d70-421c-a422-92b3c44d921c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.76.237.0/24
                IPv6:
                  2607:b9c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e6:10:29:24:7c:76:1d:73:49:62:56:19:2d:91:0c:97:96:f7:
         f4:12:81:49:a6:e9:0c:57:5c:bf:66:38:2e:1d:b9:56:66:a0:
         5a:84:af:77:75:40:46:d0:c4:f7:5c:3c:46:7c:6b:13:a0:d7:
         f6:35:64:e8:13:67:4a:b0:00:79:07:7b:4c:fd:2b:3b:00:c9:
         21:77:72:2f:a0:bc:2a:e0:00:7d:2e:1a:c8:0a:4b:f4:fe:b5:
         a5:1c:04:7b:3d:30:f8:43:1c:e5:00:8d:a4:f0:d7:b5:be:c4:
         df:8c:65:51:a6:b0:79:f7:4a:c5:e1:38:ec:4f:e5:24:c0:b3:
         a0:3b:2b:ba:1b:64:17:aa:20:55:75:f8:b6:d2:ce:21:35:a4:
         10:f5:67:4a:58:59:a2:33:fb:9b:2a:82:e2:c1:d1:95:e5:2b:
         87:f6:0e:e4:c2:ad:c9:7d:df:ea:05:12:1b:bb:ba:4e:22:b4:
         94:a4:91:98:e9:40:fe:a6:7f:60:8c:ef:e3:07:22:e3:ad:3a:
         e1:42:b6:30:30:4c:1f:34:41:af:38:6e:7e:63:b1:26:ba:0f:
         f2:99:77:87:fe:81:32:e7:5e:be:19:63:9e:ed:0a:96:ef:b8:
         c5:ed:64:68:1b:a3:6b:0b:80:0d:dc:60:6c:51:fb:37:6d:c2:
         40:d3:61:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 9 16:56:59 2024 by rpki-client on console-fra.rpki-client.org