Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3174558a-e5e5-3175-ac26-9a476a3d2390.roa
File:                     3174558a-e5e5-3175-ac26-9a476a3d2390.roa (raw, json)
Hash identifier:          IbNIV3iaqDYzv7BbmzQ5XFAqkF9D405N7Pwxid9KC3U=
Subject key identifier:   CF:DE:61:DE:42:45:8F:7C:46:D4:50:5C:22:63:71:B3:5C:2D:30:9A
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285846F11C10C775175E76DD122F00
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3174558a-e5e5-3175-ac26-9a476a3d2390.roa
Signing time:             Tue 20 Aug 2024 19:19:22 +0000
ROA not before:           Tue 20 Aug 2024 19:19:22 +0000
ROA not after:            Mon 18 Nov 2024 20:19:22 +0000
asID:                     3356
IP address blocks:        136.0.117.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 09 Oct 2024 16:17:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:f1:1c:10:c7:75:17:5e:76:dd:12:2f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Aug 20 19:19:22 2024 GMT
            Not After : Nov 18 20:19:22 2024 GMT
        Subject: CN=7f0ca392-0fc6-4d93-aa18-83d17e8daa4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:cb:4d:ed:ca:a5:09:a3:21:76:b8:f4:b0:31:
                    01:95:54:df:fd:03:47:b7:a5:c5:20:56:f1:bf:b8:
                    1d:0f:6a:16:7d:fb:79:0d:ee:bb:44:e8:76:f4:09:
                    fc:a8:29:e7:d8:da:04:02:7b:26:5d:f9:4f:46:7b:
                    b9:6a:b9:31:fd:42:b5:ec:52:16:1a:b5:f7:33:02:
                    d1:85:45:3c:a8:6a:24:1a:df:c4:9e:d6:8d:9d:13:
                    6e:d6:b2:fb:f9:e0:6f:91:43:4b:23:24:23:a0:0a:
                    90:82:ab:1e:2e:4c:ca:a8:6b:bb:76:70:ae:83:1b:
                    ef:1e:9f:ac:76:d5:c1:22:b6:bb:d0:34:de:e3:f4:
                    b5:b2:51:c3:a5:6d:4e:37:6e:94:91:f3:cd:60:71:
                    78:dc:6b:2c:ba:28:b9:25:83:65:ef:af:2a:17:c2:
                    fc:c0:e3:99:95:5b:84:ce:4a:6c:3f:c0:6d:d3:dc:
                    23:8f:67:66:ff:f1:2c:00:3a:b6:fc:24:8d:02:e4:
                    f4:25:bc:58:5e:cd:94:99:6e:f4:65:83:72:5f:e5:
                    1c:8d:05:f1:e7:68:cb:bd:15:3c:34:7e:38:ce:18:
                    44:36:7e:08:ca:8f:7e:0b:80:4a:93:d0:69:40:ae:
                    e6:90:93:c1:73:fa:a2:2e:bd:8c:ce:d8:ba:80:a2:
                    5a:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:DE:61:DE:42:45:8F:7C:46:D4:50:5C:22:63:71:B3:5C:2D:30:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3174558a-e5e5-3175-ac26-9a476a3d2390.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:fe:b2:25:27:9c:69:d6:fd:6c:cb:0e:38:69:ee:c3:49:71:
         77:b1:eb:51:9c:c2:e0:d8:6f:c8:b1:ca:2f:20:be:01:42:41:
         71:3b:6f:bd:c6:04:36:2d:ab:ea:64:a9:1d:94:9e:d9:0b:10:
         44:2e:be:4f:8c:3a:50:62:9c:25:da:20:88:ca:d0:e2:92:6b:
         17:c8:c2:59:9a:5a:e7:d3:46:11:4b:81:9d:77:9f:c4:e7:36:
         c4:c9:12:af:96:10:ea:41:c0:ff:17:20:01:2e:4e:b4:46:88:
         6e:1c:f6:ea:8b:90:24:26:6e:9b:ac:18:39:12:b2:f9:f8:74:
         f8:f1:e7:d3:aa:69:70:7e:c5:45:a6:f0:70:1d:9a:a2:5a:a0:
         34:48:f5:dd:b7:f7:c1:08:6d:b9:05:37:11:0e:a7:0e:a9:8b:
         b8:77:1d:21:f5:51:43:6f:53:0c:63:3d:2c:51:01:e9:be:d6:
         8b:06:89:14:80:c6:ea:59:8d:4c:1d:e7:93:82:cf:d8:10:c3:
         2e:68:aa:c6:9d:8d:d1:45:71:f7:3b:14:52:42:15:02:3b:88:
         18:e1:20:37:d3:2e:3a:60:12:fe:52:54:3b:a2:d0:fc:17:a2:
         9c:ad:1f:70:49:09:43:c6:b3:89:de:fb:59:41:8b:4a:d7:f3:
         89:ca:a9:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 9 23:14:48 2024 by rpki-client on console-ams.rpki-client.org