Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/40d25563-b36a-33ad-ba1f-f97847b8307e.roa
File:                     40d25563-b36a-33ad-ba1f-f97847b8307e.roa (raw, json)
Hash identifier:          27FxIBPfQrh8nKmKcpB7o3Yd0vQK89s9XODROIQgspg=
Subject key identifier:   C8:9E:1D:0A:80:D7:72:B6:1F:AD:6C:7C:FA:20:AD:A2:5C:33:EC:4A
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC167622A710E
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/40d25563-b36a-33ad-ba1f-f97847b8307e.roa
Signing time:             Fri 30 Nov 2018 01:10:07 +0000
ROA not before:           Thu 29 Nov 2018 05:00:00 +0000
ROA not after:            Sat 27 Nov 2027 05:00:00 +0000
asID:                     13335
IP address blocks:        172.69.236.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Fri 25 Oct 2024 00:45:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:62:2a:71:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov 29 05:00:00 2018 GMT
            Not After : Nov 27 05:00:00 2027 GMT
        Subject: CN=16da4003-21eb-4de1-9cd1-2c6556b409e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f8:44:ba:f0:7e:09:16:7f:df:9e:9a:77:1c:
                    4f:f9:4b:c1:dc:0f:43:c4:26:c4:9a:c9:a9:93:df:
                    74:8f:4f:9b:25:fa:69:82:63:7f:dd:57:38:5f:7c:
                    19:bc:e2:78:a1:94:e8:4b:7e:15:a2:69:02:1e:b6:
                    93:fb:16:e0:a0:e0:a7:b8:dc:e9:f4:c3:6d:eb:04:
                    77:b4:69:e5:ec:f7:a1:c4:7b:14:02:08:05:aa:90:
                    34:b4:46:d5:d3:9f:02:89:8d:cd:30:42:2c:6e:09:
                    54:30:29:58:d6:3e:31:7b:ed:eb:06:9c:1f:2b:39:
                    25:12:b4:89:98:92:cb:6d:3e:8e:c2:55:02:ed:cf:
                    b3:5f:ee:88:fb:81:5e:20:7c:b8:fb:45:51:49:84:
                    0a:ea:d5:97:6c:ba:6b:9b:79:be:21:df:92:6c:31:
                    86:13:d6:81:cc:a6:e7:b5:c1:9e:0f:5b:11:39:57:
                    cf:a9:1d:49:dd:9f:fc:58:45:06:fb:c7:a5:87:d7:
                    ec:27:e4:c2:cd:69:bb:be:c6:5f:4e:48:9f:c9:e1:
                    fa:ec:97:d8:71:68:d3:64:4c:2e:be:6f:d9:9c:0b:
                    b2:03:a9:ec:f1:01:ce:90:40:0b:ab:ea:3d:e0:3e:
                    bd:a6:77:54:46:51:41:c0:f4:55:d4:ee:2f:a5:72:
                    9b:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:9E:1D:0A:80:D7:72:B6:1F:AD:6C:7C:FA:20:AD:A2:5C:33:EC:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/40d25563-b36a-33ad-ba1f-f97847b8307e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.69.236.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:ce:fc:f9:03:d7:35:3e:a9:63:ae:91:9e:b8:b0:6b:e4:10:
         13:02:d7:ed:d5:10:05:a5:e4:b0:a2:7f:c4:83:fe:da:ab:1a:
         84:55:b9:7a:e4:d2:d7:36:e0:31:65:fa:06:c7:28:64:24:22:
         33:78:43:4d:6e:e5:53:ad:f7:e8:a9:c9:c7:4d:78:d3:bf:01:
         33:94:73:97:90:53:43:e2:40:47:c6:01:0e:25:69:06:bf:7f:
         c6:fe:89:b6:df:ea:05:4d:82:2f:e0:5c:7e:bc:67:5b:b9:07:
         74:47:07:b8:4c:e9:da:dc:4a:26:c8:24:c9:7a:dc:68:a4:b7:
         6f:09:6d:8f:6a:9b:18:94:49:5e:eb:0c:df:16:3b:df:6e:df:
         33:18:2d:5c:25:23:49:9c:a8:75:3d:ee:08:53:31:e9:fe:cb:
         47:02:02:a9:48:48:77:ad:a9:53:18:5b:ba:c5:71:bf:77:ba:
         22:ca:93:de:01:b1:7f:0c:83:96:69:e3:e4:06:a1:e9:bf:c4:
         49:8c:84:5b:de:0a:e5:ff:66:bd:85:f7:29:69:ba:8b:4c:33:
         0f:61:1a:b8:6d:ee:65:a4:83:82:15:cb:f5:6b:aa:8d:3e:16:
         c1:73:cb:4c:80:b3:28:5d:cc:3b:1f:a8:b3:a1:bc:5e:67:24:
         a3:02:01:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 25 03:08:45 2024 by rpki-client on console-fra.rpki-client.org