Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/ac2eeb66-c325-3bdb-a03d-aaa92d0c056a.roa
File:                     ac2eeb66-c325-3bdb-a03d-aaa92d0c056a.roa (raw, json)
Hash identifier:          pOh8uaRQLsKi4n72GlWIJRufOVNNshmuOty/+HaQGYE=
Subject key identifier:   B6:38:CF:56:11:4E:F3:B6:8B:D8:0E:E4:46:12:F8:81:B1:73:C9:82
Certificate issuer:       /CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d
Certificate serial:       010D0C9F4328584785BBAFC8C71553BD1F6867C0
Authority key identifier: E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/ac2eeb66-c325-3bdb-a03d-aaa92d0c056a.roa
Signing time:             Sun 13 Oct 2024 01:00:31 +0000
ROA not before:           Sun 13 Oct 2024 01:00:31 +0000
ROA not after:            Sat 11 Jan 2025 02:00:31 +0000
asID:                     174
IP address blocks:        63.174.142.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 02 Dec 2024 15:26:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:85:bb:af:c8:c7:15:53:bd:1f:68:67:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d
        Validity
            Not Before: Oct 13 01:00:31 2024 GMT
            Not After : Jan 11 02:00:31 2025 GMT
        Subject: CN=70588c70-a4a1-43c6-a07e-63a1b287694f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c8:26:4e:bc:c0:40:97:94:92:c1:66:06:c4:
                    1a:6d:88:7a:fe:e2:31:6a:de:bd:75:4b:f6:f4:e4:
                    73:e6:be:a7:22:02:e7:06:86:8f:3b:e7:72:8a:ab:
                    8f:da:0e:95:ea:dd:56:f6:df:98:46:5f:aa:dc:09:
                    dd:e3:77:f3:f3:45:1d:a4:a8:95:50:83:31:ea:a2:
                    63:20:13:0d:25:22:89:4b:b0:25:d5:be:32:fc:30:
                    d9:70:20:bc:73:1a:e5:41:32:fc:47:8e:74:e8:25:
                    76:c2:79:a2:15:6e:1e:1a:64:1f:d6:bf:72:4b:cf:
                    e5:18:43:30:4b:1b:01:4a:3d:05:42:2e:bd:90:6e:
                    fa:7d:c6:45:0a:40:76:0b:0c:8b:a3:a0:8e:b2:6c:
                    a7:97:44:5b:0e:0a:fb:f9:e4:94:96:21:48:88:a7:
                    a3:8b:e8:cf:56:43:39:40:68:98:cb:05:24:03:7d:
                    be:c2:97:64:b0:0d:87:50:68:93:06:0e:5f:bb:cb:
                    57:18:82:e1:a7:b6:c8:34:da:8a:83:04:cb:d6:d4:
                    dc:26:f8:27:96:55:b0:2e:93:d1:72:c3:20:3f:1d:
                    c0:12:96:b0:67:39:db:6e:0d:a7:7d:4f:f7:b4:94:
                    09:fd:14:e7:31:bf:89:a1:dd:7a:3d:a1:42:87:77:
                    9b:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:38:CF:56:11:4E:F3:B6:8B:D8:0E:E4:46:12:F8:81:B1:73:C9:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/ac2eeb66-c325-3bdb-a03d-aaa92d0c056a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.crl

            X509v3 Authority Key Identifier:
                keyid:E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.174.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:d1:62:db:fc:97:bc:c0:ab:ab:42:20:bc:f7:fa:10:03:3a:
         b4:b2:32:cc:9e:bb:0e:44:c8:8c:96:c7:80:1d:f7:8c:4b:25:
         97:ef:66:63:b1:0f:25:26:b6:ca:55:20:f0:ab:95:f0:38:5d:
         a2:0a:26:2b:9d:99:bd:e6:82:28:55:8d:54:78:76:df:06:a4:
         0a:51:6b:b5:19:74:e8:02:1c:0e:84:38:15:10:c0:b2:68:a8:
         cc:ae:09:bd:7f:2d:a9:49:49:9c:fd:2d:0b:18:74:b7:26:c5:
         11:d9:2d:d4:b5:98:a0:e4:8a:41:09:57:ac:46:83:b6:1d:1d:
         8a:2e:cc:d8:db:36:b8:e8:d8:8b:e9:e7:a4:dc:7d:97:9a:70:
         a4:16:39:4f:ac:30:75:31:d4:90:a0:18:7e:05:81:9e:8f:85:
         cd:af:cc:84:96:9a:4b:76:08:b1:32:1f:10:1a:31:0d:ad:d0:
         4b:73:90:d4:a9:6e:47:65:b1:dd:72:8b:8f:67:3a:b8:bf:4e:
         58:aa:b2:2e:89:ef:a6:01:b1:7c:7b:c6:c8:31:a6:b4:f3:84:
         57:b3:41:fe:91:59:ab:e4:3b:0e:9f:1e:d8:da:53:fc:36:06:
         e0:f9:dc:68:95:14:b2:02:22:15:d9:49:fe:b2:d8:d1:44:7a:
         6e:68:65:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 2 18:00:58 2024 by rpki-client on console-fra.rpki-client.org