Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/19eb5fa6-cef4-3155-92ce-9aa4eea3725e.roa
File:                     19eb5fa6-cef4-3155-92ce-9aa4eea3725e.roa (raw, json)
Hash identifier:          kR1D5RMriTPQzRY5Rlz//z+u1/ImLYGdShVRrblfT9M=
Subject key identifier:   14:1E:F7:E2:1F:E2:05:2D:76:C4:9E:D8:B9:EF:F9:BA:9A:03:AA:EA
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584766329EBF2315E94FFE801880
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/19eb5fa6-cef4-3155-92ce-9aa4eea3725e.roa
Signing time:             Tue 01 Oct 2024 17:54:24 +0000
ROA not before:           Tue 01 Oct 2024 17:54:24 +0000
ROA not after:            Mon 30 Dec 2024 18:54:24 +0000
asID:                     11798
IP address blocks:        166.88.220.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 11 Oct 2024 21:09:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:66:32:9e:bf:23:15:e9:4f:fe:80:18:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Oct  1 17:54:24 2024 GMT
            Not After : Dec 30 18:54:24 2024 GMT
        Subject: CN=98d91861-51ee-4cb3-a8a6-434bce3b4a71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:c2:26:a5:74:57:e6:f2:1c:0a:7f:c0:15:10:
                    63:1e:83:e5:75:84:d7:02:cb:e1:fc:e7:ea:ce:c8:
                    ca:ed:5a:77:2b:84:4f:ff:cb:2f:be:81:b4:96:55:
                    7a:2a:90:2a:e7:5f:11:6d:12:57:79:68:d7:ce:4c:
                    3f:be:90:ec:b3:eb:32:a4:c3:69:77:8f:9b:0b:91:
                    ce:bc:b0:5d:f1:8b:10:bb:74:73:bb:f1:1a:e1:f8:
                    80:e6:1a:79:d1:a7:ed:20:41:1f:1d:3e:ab:1b:7d:
                    a3:00:48:95:8b:80:93:96:57:89:78:b1:f6:28:ea:
                    b5:05:3c:76:e4:b5:7a:ad:f1:1a:d8:0f:ce:db:79:
                    95:b4:34:ae:b3:2d:8f:49:52:dc:fe:9c:e9:07:77:
                    07:9e:f8:dc:98:fc:a9:6d:ef:43:88:3a:a3:7b:6d:
                    b6:e3:3e:f5:c2:10:16:7a:a0:96:22:c4:57:c1:1a:
                    9b:e6:2f:97:8d:c6:7a:8d:b9:c8:b2:7f:21:16:6d:
                    88:c0:cf:54:3e:0f:9f:1c:7f:9c:1a:13:a5:56:4b:
                    d7:f9:88:ea:71:08:8d:e7:2d:b6:7f:00:c2:bd:d7:
                    46:b1:0c:3d:b1:f4:4c:e6:34:ef:a5:6f:21:5f:71:
                    d9:45:68:8e:da:b2:59:0d:e7:99:2f:d8:c7:df:15:
                    32:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:1E:F7:E2:1F:E2:05:2D:76:C4:9E:D8:B9:EF:F9:BA:9A:03:AA:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/19eb5fa6-cef4-3155-92ce-9aa4eea3725e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.220.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:13:48:f7:fd:7a:99:0b:5c:5b:ab:b1:4c:92:ff:30:5c:49:
         25:e3:16:58:ec:84:32:95:bf:1d:4f:6f:7c:6c:c1:4b:97:61:
         2a:1b:55:74:b9:d4:88:73:a3:95:82:a8:dd:40:54:a4:bd:fb:
         06:b4:a4:db:a9:07:7a:7e:63:d7:65:6a:bd:48:30:98:86:76:
         23:0e:74:57:0b:7d:8f:15:9f:40:af:0a:a1:10:4d:e0:66:21:
         fe:ec:6b:6f:a6:01:3d:05:a2:34:14:74:64:d9:35:18:70:48:
         85:eb:be:2b:9e:ea:82:e1:25:47:f2:bd:c2:46:6c:d7:f5:26:
         53:05:e6:8f:da:9c:64:57:ce:00:0c:ef:a5:76:10:3c:ff:a3:
         2a:fa:b8:cb:41:5a:d4:3a:3c:46:bf:f7:35:24:36:00:c4:45:
         d3:db:59:e1:6a:88:fd:e1:f9:46:bc:92:7b:bf:0b:db:fa:a0:
         49:23:9c:d5:19:f9:b5:54:95:19:55:f0:d1:31:65:2b:ba:63:
         bc:23:b9:10:5a:da:48:56:c1:65:d9:f6:a9:d4:a8:c0:fe:d8:
         b6:a0:95:4b:15:69:36:25:33:43:d3:2c:e2:e5:fe:5d:c1:24:
         e1:29:9b:24:98:08:de:eb:88:49:ff:fd:f6:19:2a:6d:e5:56:
         7d:76:28:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 11 23:51:30 2024 by rpki-client on console-ams.rpki-client.org