Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/48abe917-abae-34c0-80a4-730782d28a25.roa
File:                     48abe917-abae-34c0-80a4-730782d28a25.roa (raw, json)
Hash identifier:          bko3hfdh5hZi/KfxLNMn+F+ZYIV/t55foJOLef3xtS0=
Subject key identifier:   15:65:F1:8E:41:25:6E:3E:0A:78:68:9B:36:8D:2D:5D:7E:64:4D:3F
Certificate issuer:       /CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3
Certificate serial:       010D0C9F43285847794FAE54270948553DDE9200
Authority key identifier: A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/48abe917-abae-34c0-80a4-730782d28a25.roa
Signing time:             Tue 08 Oct 2024 14:13:18 +0000
ROA not before:           Tue 08 Oct 2024 14:13:18 +0000
ROA not after:            Mon 06 Jan 2025 15:13:18 +0000
asID:                     215659
IP address blocks:        65.87.7.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 09 Nov 2024 15:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:79:4f:ae:54:27:09:48:55:3d:de:92:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3
        Validity
            Not Before: Oct  8 14:13:18 2024 GMT
            Not After : Jan  6 15:13:18 2025 GMT
        Subject: CN=b52bc143-e96e-41f6-9381-9b4966eb2e17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:25:6b:ed:4f:25:66:f8:85:8b:f6:53:d3:7d:
                    73:c6:53:c6:4f:ed:66:76:26:1f:cb:8a:bc:42:27:
                    fd:9c:7d:ed:e9:9d:8e:cd:b8:d0:36:a5:d0:0f:e2:
                    e0:48:ed:43:b8:5e:42:5f:35:be:d0:6f:e9:ba:24:
                    1b:55:ed:f6:63:d1:90:94:9d:8c:f1:62:cd:f3:b7:
                    5b:27:80:8d:32:7a:f4:3f:59:33:48:01:d7:4b:04:
                    5b:74:9b:c4:6f:47:10:30:bc:62:60:09:71:8f:69:
                    e4:b8:0f:ff:42:dc:e9:1d:25:6a:93:71:3b:38:43:
                    1a:6d:6c:fd:49:f7:a9:d5:47:7e:a6:84:a1:23:dc:
                    36:af:39:c0:7f:1d:c1:d5:24:6c:46:c0:2f:e1:da:
                    7c:1f:3a:89:4f:4d:b6:6a:60:fb:6e:af:15:93:28:
                    9d:0e:3d:66:f5:45:38:d7:fb:8c:ca:b8:8e:a7:f7:
                    ee:2f:b7:09:08:53:93:87:11:65:bb:41:47:96:a5:
                    58:d1:92:08:22:6e:1b:08:51:e3:3f:95:89:58:b3:
                    c8:3f:8d:70:1e:b2:d6:aa:3d:e0:57:e6:6c:8b:d9:
                    0a:40:88:58:25:2a:31:ac:b6:d2:66:ad:eb:8c:9e:
                    65:e0:fc:a8:9c:58:59:44:e9:c8:24:e1:28:c7:7e:
                    db:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:65:F1:8E:41:25:6E:3E:0A:78:68:9B:36:8D:2D:5D:7E:64:4D:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/48abe917-abae-34c0-80a4-730782d28a25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.crl

            X509v3 Authority Key Identifier:
                keyid:A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.87.7.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:d9:e6:df:70:9d:1e:44:f0:75:51:07:f2:c0:d1:63:2a:4b:
         46:4c:92:f1:26:37:8b:60:03:9f:42:d7:5c:d4:0c:de:9a:2b:
         d0:a3:1f:ee:06:1d:92:c1:70:a2:13:96:b4:4a:a3:17:7c:47:
         dc:14:ee:4b:aa:ff:64:cf:f8:a7:f8:c0:9b:fa:ba:35:f9:0f:
         49:bd:05:94:f0:a2:6a:b5:05:d6:90:0a:ab:75:d9:41:93:75:
         db:83:3d:3d:41:64:8a:bc:a1:0e:21:25:26:0e:cf:19:c8:f2:
         0b:e9:85:91:b6:8e:61:03:ef:ac:e9:b6:9a:08:95:c2:02:1d:
         c5:96:f0:47:35:e0:f8:d9:27:a6:d9:68:18:2f:e2:ff:3c:49:
         42:f4:a3:f0:8f:22:c8:eb:e7:df:e6:ca:21:d5:10:a8:cd:57:
         41:38:fc:bb:02:f6:85:db:15:2c:8a:e5:d0:ef:d5:c0:bb:0e:
         74:0c:59:ef:9f:7a:f5:be:65:db:8d:33:44:18:17:31:c5:dc:
         f6:e0:11:fa:42:7d:09:61:5b:41:eb:20:a5:fa:b3:39:a5:33:
         8a:94:1e:e6:32:2f:7c:f6:e7:97:9b:2a:88:d0:9c:78:a6:33:
         c8:8d:8a:6b:63:76:01:49:c0:c3:03:0d:e9:b0:7e:db:05:d3:
         9d:eb:e9:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 9 18:21:11 2024 by rpki-client on console-fra.rpki-client.org