Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/22fd14a2-0bbd-3597-96d0-69a4e64e52fc.roa
File:                     22fd14a2-0bbd-3597-96d0-69a4e64e52fc.roa (raw, json)
Hash identifier:          CQHd3OoXtNDyK1X0snAY2aAT+UdnNkd53zFX+4ACAGU=
Subject key identifier:   35:5B:3F:40:EE:0F:0D:10:FB:FB:84:94:CD:D7:8E:32:33:38:CC:7E
Certificate issuer:       /CN=61078829-6930-46b0-9ac8-91898d36b056
Certificate serial:       010D0C9F4328584524801BB8C72FF5CE54A2D200
Authority key identifier: 20:45:D5:DA:27:BB:4B:89:4D:D4:82:B9:66:A0:0B:C0:B6:B6:54:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/22fd14a2-0bbd-3597-96d0-69a4e64e52fc.roa
Signing time:             Fri 08 Mar 2024 19:33:18 +0000
ROA not before:           Fri 08 Mar 2024 19:33:18 +0000
ROA not after:            Thu 06 Jun 2024 18:33:18 +0000
asID:                     33548
IP address blocks:        205.157.144.2/32 maxlen: 32

Validation:               Failed, certificate revoked on Sat 09 Mar 2024 03:24:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:24:80:1b:b8:c7:2f:f5:ce:54:a2:d2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61078829-6930-46b0-9ac8-91898d36b056
        Validity
            Not Before: Mar  8 19:33:18 2024 GMT
            Not After : Jun  6 18:33:18 2024 GMT
        Subject: CN=49779194-989d-4d88-81c6-8fabecf430cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:3c:8f:87:ae:fa:fd:e1:3d:d1:cb:02:93:37:
                    1e:33:b4:bc:3b:a9:37:d7:a2:cf:5c:d9:d1:91:96:
                    5e:30:94:06:8e:b8:7a:62:76:e1:bd:72:01:25:8e:
                    e9:da:b8:33:98:3f:02:32:98:86:71:91:e8:ab:73:
                    b7:81:be:1b:4b:66:c3:4e:d5:24:30:e3:31:df:c0:
                    ca:7f:0e:d2:6e:20:b1:dc:32:36:29:24:f5:80:04:
                    ec:14:6c:ee:f7:16:f8:4c:bf:13:40:8d:8a:f9:8c:
                    1b:43:ac:91:30:5a:79:d2:f6:28:63:2f:40:51:56:
                    e7:f1:91:f5:ff:f2:d8:d6:05:0b:50:06:d9:c3:9a:
                    40:05:f0:27:ca:ca:4d:3f:36:e8:ee:bf:ea:eb:95:
                    e7:36:86:1e:12:f2:89:cb:c5:bf:d4:fe:98:4a:d3:
                    45:5b:70:c5:c0:14:47:7b:56:d8:ff:1c:91:90:ab:
                    0a:fe:30:2c:55:ed:d8:da:22:4f:2d:19:76:78:4d:
                    70:18:cc:28:a5:4d:b7:62:60:43:d3:eb:bb:ce:00:
                    6e:bc:00:0c:5f:29:ca:2d:52:f8:74:42:aa:8d:80:
                    02:ab:64:4c:ed:8f:8f:d9:2b:c1:bc:8c:46:16:c9:
                    b6:8c:4e:6e:07:7a:d9:2f:e2:0a:74:ca:bd:28:81:
                    07:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:5B:3F:40:EE:0F:0D:10:FB:FB:84:94:CD:D7:8E:32:33:38:CC:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/22fd14a2-0bbd-3597-96d0-69a4e64e52fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/61078829-6930-46b0-9ac8-91898d36b056.crl

            X509v3 Authority Key Identifier:
                keyid:20:45:D5:DA:27:BB:4B:89:4D:D4:82:B9:66:A0:0B:C0:B6:B6:54:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.157.144.2/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:d6:38:44:38:34:9a:8f:e3:de:5e:59:fb:ea:75:6a:91:3f:
         78:bf:25:e5:e8:17:b0:b4:27:84:b1:96:f4:bd:9d:4a:fc:7b:
         2a:64:88:67:8a:b8:3d:29:1b:ae:53:6a:15:51:97:ee:dc:b9:
         67:07:0f:b5:fb:96:2a:42:07:6b:50:7b:3c:9a:6c:9c:d7:22:
         42:9e:c0:c0:d1:73:34:69:e3:f5:cc:a2:81:0b:11:4e:92:48:
         5c:f9:5c:19:9d:9c:bb:dd:35:80:ed:21:5e:fa:b1:75:33:f5:
         1d:e3:10:52:17:c7:37:c6:3a:c2:f4:ad:cd:97:5e:a1:4e:2b:
         05:d8:1e:d0:e1:80:34:09:be:e8:72:9d:3c:13:f5:12:fb:f6:
         38:e8:37:3c:08:80:2d:60:81:0a:f3:67:c1:f4:30:8d:bc:1c:
         5f:74:20:d0:aa:50:13:bd:f0:ba:2f:0d:7c:b5:fe:80:06:d3:
         d9:cf:ef:aa:d3:1c:55:1d:13:3f:18:84:0e:9d:34:8b:80:3b:
         72:62:87:ad:ae:28:4d:d0:16:a3:70:be:65:83:d9:64:e2:6e:
         47:d2:8c:12:4e:70:d4:ef:ad:ca:50:df:a9:32:b3:a0:5d:dc:
         20:2f:40:10:59:36:c0:0f:d4:29:9d:cf:b6:0b:e5:8e:36:43:
         6b:64:e5:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:09:08 2024 by rpki-client on console-fra.rpki-client.org