Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/75b7835c-dba7-37af-ac6f-5518d4137563.roa
File:                     75b7835c-dba7-37af-ac6f-5518d4137563.roa (raw, json)
Hash identifier:          f7kqTE2CZtq/NkhUyHEFBZzRSv8cy/t9vZcK4LnSIOk=
Subject key identifier:   16:67:E7:92:4F:44:68:28:62:69:E3:D2:89:C8:26:29:FF:F5:47:49
Certificate issuer:       /CN=66ee137c-4201-4a21-a4f5-2f3161305281
Certificate serial:       010D0C9F4328584643A3784BA72F5728B026CA68
Authority key identifier: 93:AB:BA:5B:78:E6:75:D1:1A:42:E2:19:57:D6:1E:B4:6E:0D:DB:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/75b7835c-dba7-37af-ac6f-5518d4137563.roa
Signing time:             Wed 19 Jun 2024 16:01:33 +0000
ROA not before:           Wed 19 Jun 2024 16:01:33 +0000
ROA not after:            Tue 17 Sep 2024 16:01:33 +0000
asID:                     8075
IP address blocks:        23.154.88.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 27 Jun 2024 02:46:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:43:a3:78:4b:a7:2f:57:28:b0:26:ca:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66ee137c-4201-4a21-a4f5-2f3161305281
        Validity
            Not Before: Jun 19 16:01:33 2024 GMT
            Not After : Sep 17 16:01:33 2024 GMT
        Subject: CN=7444dc76-e820-4a54-936e-e26c9181a8b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:37:fa:3e:9e:2a:a7:4c:62:7a:a4:dd:ba:bc:
                    4a:45:18:da:1c:fa:44:51:3b:f0:dd:00:09:63:4f:
                    1a:f6:87:54:b1:5b:c1:56:5b:7e:7f:65:82:8c:c1:
                    aa:c9:75:1e:42:0e:7e:ee:87:c2:90:68:56:fe:9c:
                    01:65:27:33:c9:80:99:9d:a4:d9:5f:e7:3a:ff:e7:
                    a2:4b:c3:cb:be:03:a5:cf:50:5a:f6:cf:27:fb:90:
                    51:da:69:26:c3:48:58:61:b0:ab:de:38:24:72:7f:
                    d7:9a:a6:3e:bc:0c:19:7c:38:bf:36:a0:f8:66:4b:
                    35:16:d5:ea:9c:e1:e8:54:0e:dc:27:eb:9f:56:06:
                    43:65:1b:78:5d:c3:6c:94:42:46:a0:4b:11:7a:f6:
                    f3:1e:c7:9e:72:11:07:7b:f8:87:18:27:40:99:4b:
                    6f:36:09:10:65:1b:fb:ee:04:35:55:75:d5:1f:80:
                    b3:a2:97:cb:03:9a:f4:10:ad:59:8d:e9:20:73:72:
                    c9:48:7e:27:a1:f1:5f:01:95:09:7f:7c:e4:fe:ea:
                    e4:b6:32:3f:b1:5e:43:a6:7a:51:55:1c:18:17:ee:
                    40:cd:b0:04:ab:f5:b8:c8:d8:57:18:26:82:02:82:
                    4e:28:a6:37:c9:99:2b:fd:04:68:81:b1:5e:3d:2a:
                    14:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:67:E7:92:4F:44:68:28:62:69:E3:D2:89:C8:26:29:FF:F5:47:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/75b7835c-dba7-37af-ac6f-5518d4137563.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/66ee137c-4201-4a21-a4f5-2f3161305281.crl

            X509v3 Authority Key Identifier:
                keyid:93:AB:BA:5B:78:E6:75:D1:1A:42:E2:19:57:D6:1E:B4:6E:0D:DB:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.154.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:1e:ea:02:e9:ca:10:7d:45:5d:4c:d2:0a:28:64:bb:ab:fa:
         64:6d:e0:f3:a2:d8:36:e7:bc:01:a4:43:8c:e9:97:71:e1:3b:
         95:f5:8b:39:4c:49:10:3e:a7:4c:a6:4b:fb:fd:e5:b8:d6:87:
         b1:54:ec:3a:79:60:b1:91:dd:c2:9d:e9:29:50:19:be:52:6e:
         c3:75:46:c9:8f:6f:5b:b0:77:15:ed:37:87:98:ed:f1:3a:11:
         6f:19:22:10:da:04:de:c5:6d:ad:50:6d:fc:bf:04:79:1e:53:
         ef:be:8d:51:84:44:d0:6a:75:ee:62:ff:a7:2e:6e:9c:19:fe:
         22:c8:81:c3:a8:83:0b:a2:f3:79:23:80:28:12:a1:fc:08:76:
         cf:7c:56:6d:06:4e:06:10:79:81:6d:75:c2:ae:22:49:9e:26:
         8b:c8:90:36:a7:46:e2:d9:11:81:a3:ff:68:90:b8:bf:ed:f2:
         7d:f2:a6:a5:0c:94:98:08:81:74:1a:27:52:f6:8c:a6:d6:af:
         46:63:12:c3:52:51:fc:40:e8:95:0d:4a:5e:5f:73:37:a1:c6:
         6e:6a:5d:92:38:20:38:9c:09:e0:7b:14:ea:12:78:8f:ca:34:
         e7:d9:0a:8b:08:2f:b4:99:b3:0a:7c:cd:6b:0a:90:7c:58:6d:
         de:5b:b0:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 27 07:39:38 2024 by rpki-client on console-ams.rpki-client.org