Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151/0f7f5b89-e375-3af7-9f14-b2bfdcfcf363.roa
File:                     0f7f5b89-e375-3af7-9f14-b2bfdcfcf363.roa (raw, json)
Hash identifier:          PPv65tCB7Ojhvau2A7riV15Q9J96Ap254bPEi+0CI4U=
Subject key identifier:   57:48:74:56:10:36:2C:C5:92:68:70:68:5E:BA:14:7D:BF:12:05:59
Certificate issuer:       /CN=0a2d75f1-8f4b-49d3-9661-209643086151
Certificate serial:       010D0C9F43285846599F25A7790B0659E148EF00
Authority key identifier: 0D:B3:3C:FC:9E:40:5D:1E:D0:4A:EE:B3:FA:F1:A8:B0:17:78:4C:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151/0f7f5b89-e375-3af7-9f14-b2bfdcfcf363.roa
Signing time:             Thu 27 Jun 2024 13:00:34 +0000
ROA not before:           Thu 27 Jun 2024 13:00:34 +0000
ROA not after:            Wed 25 Sep 2024 13:00:34 +0000
asID:                     39974
IP address blocks:        66.118.50.0/24 maxlen: 24
                          66.187.199.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 13 Sep 2024 17:08:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:59:9f:25:a7:79:0b:06:59:e1:48:ef:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a2d75f1-8f4b-49d3-9661-209643086151
        Validity
            Not Before: Jun 27 13:00:34 2024 GMT
            Not After : Sep 25 13:00:34 2024 GMT
        Subject: CN=426985dd-182c-4997-8411-55fe78a02738
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:70:8f:72:09:11:18:19:39:92:3d:de:f2:0d:
                    f2:f9:5b:3a:59:bf:7c:f5:ea:3a:6b:f3:77:ab:8a:
                    66:85:20:45:22:24:66:c2:88:3a:10:81:db:f7:b9:
                    90:99:43:8d:1b:7c:12:d0:60:30:77:c0:d7:88:10:
                    8a:5c:a0:5b:ab:59:c4:6d:5b:2e:4b:3d:d8:3d:49:
                    9e:d2:c7:1b:55:54:65:80:c3:14:26:c4:1d:fc:73:
                    11:eb:fb:60:41:f1:22:3b:3a:52:16:fc:49:0f:f9:
                    65:e5:75:90:d0:5a:fd:1b:ee:57:d7:89:d0:14:c5:
                    93:bd:c9:b5:5f:22:31:ca:bd:33:9b:52:30:a0:4e:
                    5a:04:1b:35:69:65:63:92:2b:3f:d4:38:5b:c3:23:
                    e0:0e:7b:96:3b:e1:94:d0:61:e4:04:ab:14:2e:2c:
                    69:39:a9:3c:8c:1d:16:fd:f5:2f:15:b5:3a:10:55:
                    c6:89:db:6c:f5:b9:d2:dc:95:ce:53:7c:14:42:f1:
                    f6:b5:3b:ba:76:cb:39:4c:50:2f:05:7b:7f:77:9d:
                    44:45:7f:f3:5f:e7:01:48:7d:31:8d:93:bf:f6:ff:
                    ab:34:ed:18:15:6d:e6:cf:6a:a2:da:fd:6d:52:3d:
                    72:31:ed:4a:dc:3c:da:76:9e:40:2f:05:05:d1:a6:
                    a7:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:48:74:56:10:36:2C:C5:92:68:70:68:5E:BA:14:7D:BF:12:05:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151/0f7f5b89-e375-3af7-9f14-b2bfdcfcf363.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151/0a2d75f1-8f4b-49d3-9661-209643086151.crl

            X509v3 Authority Key Identifier:
                keyid:0D:B3:3C:FC:9E:40:5D:1E:D0:4A:EE:B3:FA:F1:A8:B0:17:78:4C:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a2d75f1-8f4b-49d3-9661-209643086151.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.118.50.0/24
                  66.187.199.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:45:59:46:bf:f8:1b:0b:23:d2:01:3d:f3:e5:bc:d4:23:f4:
         86:72:1d:2b:62:74:f2:18:f2:b7:83:48:30:f3:e5:e6:ad:9b:
         87:7f:5f:42:ac:1d:bb:03:49:c7:80:a3:46:52:9e:26:73:ff:
         23:d9:4f:17:d1:d8:19:03:3b:f3:93:a4:88:31:6e:98:8e:d0:
         f2:20:29:fa:29:31:c4:07:03:8d:29:3f:a8:30:be:cb:99:e0:
         61:0e:cf:d7:d3:2e:77:ca:49:1c:69:42:04:13:67:c1:7e:90:
         de:2a:98:20:c5:04:8c:b7:f4:b5:25:ac:2a:e0:b0:d5:6c:3b:
         9d:ba:45:e0:51:b0:fe:6b:1b:11:82:78:f1:64:aa:da:af:5e:
         21:1b:86:2b:be:c9:c7:00:9a:c7:e2:8d:90:17:cf:c2:6c:da:
         b1:78:06:7f:f5:e5:82:f0:a8:dc:08:f3:b4:e9:4e:7d:cc:b6:
         fe:4c:2f:f8:56:26:ed:46:73:02:0d:24:17:ed:c2:c1:8b:84:
         17:64:a7:7c:e9:34:a3:dd:65:45:45:a9:e5:fb:d2:a1:a2:5a:
         dd:b8:06:8c:5b:2e:c2:4e:66:2f:b7:a0:0f:b7:f7:fe:a7:d4:
         9f:21:fd:60:7c:4d:1b:d2:35:dc:a1:7e:27:b9:59:d3:64:a1:
         96:9e:5e:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 13 19:11:19 2024 by rpki-client on console-fra.rpki-client.org