Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/69233f52-8a17-4eb0-ae6a-62c861686718/cb39ed42-97f4-36f0-ae99-2f0ffdf2f02b.roa
File:                     cb39ed42-97f4-36f0-ae99-2f0ffdf2f02b.roa (raw, json)
Hash identifier:          hCnFuHqJi2KaT/mfDXKfY83pd5k1pTKRAGNPTmYBxNI=
Subject key identifier:   3A:29:34:43:37:B2:92:FF:A5:29:04:BF:F9:3B:EE:1A:51:B5:7A:31
Certificate issuer:       /CN=69233f52-8a17-4eb0-ae6a-62c861686718
Certificate serial:       010D0C9F43285845794B2EBF30A9B8C286CE9640
Authority key identifier: 79:00:BA:75:0D:A9:7C:C7:52:2F:26:3F:AB:EF:F3:8E:F3:84:81:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/69233f52-8a17-4eb0-ae6a-62c861686718.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/69233f52-8a17-4eb0-ae6a-62c861686718/cb39ed42-97f4-36f0-ae99-2f0ffdf2f02b.roa
Signing time:             Mon 08 Apr 2024 04:30:22 +0000
ROA not before:           Mon 08 Apr 2024 04:30:22 +0000
ROA not after:            Sun 07 Jul 2024 04:30:22 +0000
asID:                     64445
IP address blocks:        167.253.20.0/24 maxlen: 24
                          167.253.21.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 11 Apr 2024 16:14:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:79:4b:2e:bf:30:a9:b8:c2:86:ce:96:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69233f52-8a17-4eb0-ae6a-62c861686718
        Validity
            Not Before: Apr  8 04:30:22 2024 GMT
            Not After : Jul  7 04:30:22 2024 GMT
        Subject: CN=dd54f8e4-8516-4057-b354-555fc080782f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:60:79:3c:dd:58:bf:1d:13:30:7f:3d:da:25:
                    58:f8:a3:1c:49:ab:d7:1d:52:d6:e6:79:6c:51:6d:
                    15:91:a8:67:ea:c8:7b:25:23:7e:a8:fe:d3:71:5c:
                    1f:0a:19:0e:58:5a:ab:98:98:fb:26:04:f8:24:b2:
                    8c:0d:9d:b8:03:ec:0c:25:b5:04:18:63:f2:6f:46:
                    17:e9:65:42:1b:be:5a:cc:12:a4:05:2a:69:5c:d4:
                    97:2c:39:ae:8b:64:1e:4a:ad:7d:a9:13:89:f6:a8:
                    e0:45:2a:e9:63:06:73:55:a8:94:72:5e:2e:16:2f:
                    09:2f:a9:3e:7b:db:45:23:64:a7:d2:aa:0d:92:ad:
                    cf:5c:15:7c:60:9a:2e:86:24:42:b1:fa:30:26:9b:
                    36:e9:8f:7d:8f:af:59:6c:8d:66:bc:db:e6:cd:52:
                    28:54:f1:45:cf:a7:f3:0b:6b:b5:2b:9e:a9:c1:ad:
                    3f:12:c0:17:d4:99:c8:1c:8f:93:da:28:86:5f:52:
                    40:96:9e:16:bd:ad:26:1c:42:6e:f0:73:42:39:de:
                    6c:13:4e:44:5f:65:c4:45:d8:6a:e4:44:5f:08:8e:
                    e7:e5:c8:d6:7c:4b:53:9c:85:64:89:0a:ef:56:bf:
                    61:1b:c6:f6:04:63:bf:c0:a1:26:87:13:57:41:18:
                    3f:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:29:34:43:37:B2:92:FF:A5:29:04:BF:F9:3B:EE:1A:51:B5:7A:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/69233f52-8a17-4eb0-ae6a-62c861686718/cb39ed42-97f4-36f0-ae99-2f0ffdf2f02b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/69233f52-8a17-4eb0-ae6a-62c861686718/69233f52-8a17-4eb0-ae6a-62c861686718.crl

            X509v3 Authority Key Identifier:
                keyid:79:00:BA:75:0D:A9:7C:C7:52:2F:26:3F:AB:EF:F3:8E:F3:84:81:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/69233f52-8a17-4eb0-ae6a-62c861686718.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.253.20.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:9f:56:00:6d:fa:b4:8e:3d:7a:cb:b1:7b:7b:3f:b6:79:bc:
         e3:2b:5b:65:55:7d:9e:59:3e:f9:14:ae:53:ad:11:46:d8:e0:
         9c:d2:33:1e:54:3f:37:39:de:15:6a:3f:5e:f4:6a:b6:2d:b2:
         10:fa:d1:46:55:4c:fb:85:61:bb:59:f5:73:e9:f0:b6:7f:ae:
         31:be:ab:2e:c0:2c:19:54:7f:bb:c0:46:ba:27:d8:f5:54:13:
         5b:43:aa:b7:20:16:e1:8b:8d:67:3d:92:9c:8c:b4:ab:8d:ff:
         73:14:8f:1f:73:e7:0a:e1:bb:86:be:0b:cc:8e:c8:67:33:ca:
         ab:ed:26:c6:2b:9f:8c:4e:8c:8c:f1:15:70:06:d0:18:e5:82:
         a6:2f:df:74:f9:a0:de:db:8c:d2:dd:c6:20:c2:ca:40:96:da:
         a1:ff:9a:47:a9:fd:94:8f:02:e8:73:ec:51:27:5e:2a:eb:22:
         1e:a6:7b:f2:16:42:1e:cd:8e:37:6e:0e:e3:b1:2f:c9:3b:e2:
         86:93:ad:64:6e:f3:45:d6:97:46:36:81:63:9b:a6:9f:30:d8:
         55:73:9c:84:5f:33:65:d9:ab:d8:0d:b8:a9:c3:9c:ee:04:13:
         19:18:0f:ca:7d:87:b1:a4:57:5b:93:6f:2d:40:57:45:f6:4b:
         94:bf:8f:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:09:09 2024 by rpki-client on console-fra.rpki-client.org