Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/1f04878c-6c83-3e5f-8cb5-4b3c0c6be69d.roa
File:                     1f04878c-6c83-3e5f-8cb5-4b3c0c6be69d.roa (raw, json)
Hash identifier:          OJYBn8glDO4F7mJ+zB6mLXrkPmhIqN6s3B3gADoV9YY=
Subject key identifier:   35:FA:A4:E3:A5:D7:12:C1:4B:5A:7B:3C:EC:E4:A8:13:74:E7:68:AF
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584766329EDB546A868DB6C83D00
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/1f04878c-6c83-3e5f-8cb5-4b3c0c6be69d.roa
Signing time:             Tue 01 Oct 2024 17:54:24 +0000
ROA not before:           Tue 01 Oct 2024 17:54:24 +0000
ROA not after:            Mon 30 Dec 2024 18:54:24 +0000
asID:                     11798
IP address blocks:        166.88.226.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 24 Oct 2024 17:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:66:32:9e:db:54:6a:86:8d:b6:c8:3d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Oct  1 17:54:24 2024 GMT
            Not After : Dec 30 18:54:24 2024 GMT
        Subject: CN=deaed7c1-969a-4680-90f4-1cea88dcbaa6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:18:1d:b9:fa:82:1e:2c:09:61:42:71:68:5f:
                    c0:3a:d8:67:7f:3a:b3:1a:88:4f:d1:b7:dc:f1:ec:
                    ad:84:21:f6:19:e7:cf:45:4e:69:e0:e3:88:b8:f0:
                    e5:ce:a0:fa:b5:a3:f3:4e:26:30:5e:f8:9f:f9:8b:
                    d2:d2:59:7d:72:65:74:7c:d3:71:6e:9e:64:88:d9:
                    b7:90:29:78:56:ee:6f:e5:17:ae:c2:e4:0a:d1:dd:
                    0a:3e:48:9b:30:d5:ed:46:39:86:fd:56:3a:90:0b:
                    2b:f5:e8:0c:fc:a8:4c:e5:34:1b:9d:b0:73:32:67:
                    9f:67:3c:a1:b2:ad:a8:0c:bf:0a:50:8b:37:89:8e:
                    7a:ca:47:0f:71:40:af:c5:03:6a:e7:63:72:ca:24:
                    da:1e:43:ae:f7:f2:01:10:79:92:9d:ed:23:48:e9:
                    54:13:19:65:a2:b3:e0:dd:d2:20:4f:60:64:f2:19:
                    33:4f:28:49:93:60:3b:bf:93:3b:b6:69:3f:e1:b2:
                    00:d9:b6:47:2a:cb:b8:53:88:90:83:61:d4:2f:e4:
                    90:36:ee:2e:d4:bb:7d:84:bd:9e:32:94:84:22:86:
                    12:9b:1c:4d:00:18:e6:e7:c8:96:12:51:d6:02:01:
                    3f:76:32:53:8e:8c:39:72:ca:1f:70:65:58:7a:75:
                    86:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:FA:A4:E3:A5:D7:12:C1:4B:5A:7B:3C:EC:E4:A8:13:74:E7:68:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/1f04878c-6c83-3e5f-8cb5-4b3c0c6be69d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.88.226.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:be:e3:e1:cd:52:ef:bb:5c:d2:31:b1:b0:a6:e1:b7:b8:83:
         59:7f:3a:c5:0b:4e:1b:3b:74:dd:ed:ae:33:58:6c:56:18:07:
         c4:c4:02:ae:89:45:e7:98:e2:dc:20:3a:16:f9:ce:bd:3c:60:
         b6:72:82:af:29:14:36:a6:14:e2:2c:44:28:37:fd:39:d0:a2:
         95:d0:5a:fd:6e:26:93:38:6b:c8:f3:7f:75:6c:d9:fb:b3:a0:
         9e:e9:01:79:d9:f4:7b:23:4c:95:93:ac:e2:c6:48:32:a8:07:
         1d:6b:21:47:41:3b:78:5f:3f:3a:2f:49:21:7e:dd:2b:a0:8a:
         47:48:16:2c:78:be:d7:84:ec:46:e1:98:49:d0:24:b2:73:3a:
         b6:ef:d0:6e:b0:2b:28:41:83:09:00:48:47:29:d8:d8:37:11:
         87:a8:1c:4a:9e:83:a0:40:4d:a5:91:66:4e:97:da:80:d1:f3:
         6a:16:22:d8:48:d6:a5:cb:5c:d5:ff:de:2e:8e:81:36:28:66:
         8f:79:9b:14:e2:7b:35:41:4c:84:35:4e:86:46:d2:cd:53:51:
         ce:4f:40:e4:85:9a:cd:87:20:8a:37:0f:36:68:34:06:a4:e8:
         0e:38:c7:55:f3:6e:49:90:0f:77:0d:4f:64:43:f5:55:7c:ae:
         e4:10:8a:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 24 19:10:33 2024 by rpki-client on console-fra.rpki-client.org