Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/7736be55-6b42-339a-809b-83c1af4da983.roa
File:                     7736be55-6b42-339a-809b-83c1af4da983.roa (raw, json)
Hash identifier:          3uWtl++IFSycdGdnvCerWiK10N0dqEKe5niNNNdBQSk=
Subject key identifier:   39:76:B5:6A:FD:E5:C6:D5:DA:17:B7:90:89:69:3C:3B:89:62:3A:4D
Certificate issuer:       /CN=a302dc9c-12e9-4b66-8c6d-e2994a21a1bd
Certificate serial:       010D0C9F432858477661063A496C28FE8F52F800
Authority key identifier: 0F:DC:2F:6E:33:64:5F:E3:7B:D2:58:C7:5E:84:68:D9:5C:1D:22:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/7736be55-6b42-339a-809b-83c1af4da983.roa
Signing time:             Mon 07 Oct 2024 13:00:40 +0000
ROA not before:           Mon 07 Oct 2024 13:00:40 +0000
ROA not after:            Sun 05 Jan 2025 14:00:40 +0000
asID:                     393474
IP address blocks:        64.90.141.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 19 Nov 2024 14:49:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:76:61:06:3a:49:6c:28:fe:8f:52:f8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a302dc9c-12e9-4b66-8c6d-e2994a21a1bd
        Validity
            Not Before: Oct  7 13:00:40 2024 GMT
            Not After : Jan  5 14:00:40 2025 GMT
        Subject: CN=07ad7e7b-237a-4949-9f88-fe8e4b8c046a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:3b:e9:5e:34:ef:02:45:1b:e6:bb:b5:5c:41:
                    8c:8d:fb:e4:4d:3c:70:35:06:08:9f:92:66:c4:9a:
                    b0:4a:12:b5:df:6a:4c:07:88:2f:6d:21:8d:b7:e2:
                    cb:97:41:b1:5d:77:65:3a:33:59:00:31:4e:1b:7f:
                    09:77:7f:ca:62:e7:81:4f:0d:95:7d:98:9f:14:d2:
                    70:96:83:e4:8f:75:1a:66:5b:e4:9a:87:7d:f4:a1:
                    00:79:b8:3a:b2:f9:e2:80:97:35:18:c5:34:3f:3e:
                    d1:ec:84:7e:ee:19:e2:25:c7:b1:9b:82:b6:54:62:
                    00:89:e6:1d:1d:93:8d:4f:91:4e:4b:1d:df:ed:cb:
                    b8:bb:c7:1d:2e:a3:e8:62:b2:62:8f:be:5d:47:01:
                    3a:ce:9f:7f:ae:1d:ae:8c:c8:c3:cb:cd:ba:27:f8:
                    49:4b:aa:ae:91:d6:6b:3b:83:0f:2f:37:42:1f:90:
                    21:d9:c4:47:f5:2d:13:d2:a1:d1:55:8f:5e:14:bf:
                    89:9a:ba:6b:57:54:ef:f3:c5:29:34:2c:d7:11:e5:
                    99:6d:4d:78:6c:5e:b2:23:02:eb:90:b4:0a:3e:3b:
                    5b:4e:c1:a3:da:ed:3c:ab:f6:13:36:09:e0:df:6c:
                    2a:1d:3e:26:95:7d:5c:ca:a7:32:87:83:aa:a5:59:
                    b0:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:76:B5:6A:FD:E5:C6:D5:DA:17:B7:90:89:69:3C:3B:89:62:3A:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/7736be55-6b42-339a-809b-83c1af4da983.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DC:2F:6E:33:64:5F:E3:7B:D2:58:C7:5E:84:68:D9:5C:1D:22:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.90.141.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:56:7f:c8:c5:bf:ca:ae:b8:f4:cd:cd:82:e1:f3:8b:31:98:
         1d:c4:72:44:b1:e6:aa:8e:4f:e1:95:27:1f:4c:37:b7:28:3f:
         fb:be:1a:e9:d0:85:ef:50:2c:90:9b:82:45:25:72:e0:da:44:
         e0:48:fb:db:9f:4e:b5:c0:b6:ea:f3:29:17:f8:31:68:ab:6a:
         42:cb:24:e2:7f:1d:4f:e0:3d:6c:35:7f:73:5c:6c:bd:0f:45:
         63:00:0a:d9:e7:fe:69:ff:4a:e6:0f:a4:cc:97:31:a2:c7:fd:
         21:66:6a:41:b0:1f:b9:b3:36:6d:11:0d:b4:87:fc:bb:a3:0b:
         55:0a:c3:11:34:23:63:e8:0b:55:0e:5b:c0:6a:8c:19:3e:52:
         96:3c:5c:98:d0:76:a0:f5:59:e5:31:cc:0e:20:db:ad:1d:12:
         94:88:52:26:49:68:2c:60:02:93:49:02:ee:ed:8f:98:71:a6:
         17:4c:55:44:2c:54:87:f2:94:c2:4e:54:ef:df:00:2b:46:b2:
         f6:9c:a5:44:39:a4:4f:95:d6:87:e8:f2:c7:b7:08:15:3f:eb:
         9c:9a:18:07:85:5f:fd:08:07:44:e1:ab:5d:79:33:3c:2b:9e:
         91:b7:81:48:16:91:13:06:98:0c:d2:9b:23:e7:2e:87:a4:a6:
         42:3b:ed:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 17:32:29 2024 by rpki-client on console-fra.rpki-client.org