Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8624f59e-f908-3302-ab95-200989ecfdf0.roa
File:                     8624f59e-f908-3302-ab95-200989ecfdf0.roa (raw, json)
Hash identifier:          Pe1SOFEduiXUXnCY+03dTX4xnmDf0G3YCeMX0SJs+ZY=
Subject key identifier:   99:E7:24:16:7E:BE:28:33:28:82:51:69:89:21:D6:A3:48:48:EA:80
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584777DB25A79C47752DFF886900
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8624f59e-f908-3302-ab95-200989ecfdf0.roa
Signing time:             Tue 08 Oct 2024 01:42:42 +0000
ROA not before:           Tue 08 Oct 2024 01:42:42 +0000
ROA not after:            Mon 06 Jan 2025 02:42:42 +0000
asID:                     400536
IP address blocks:        142.111.40.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 01 Nov 2024 17:28:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:77:db:25:a7:9c:47:75:2d:ff:88:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Oct  8 01:42:42 2024 GMT
            Not After : Jan  6 02:42:42 2025 GMT
        Subject: CN=b79be53a-b9ca-4a61-b756-dc5d47da56ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:d7:c4:4e:10:04:e4:01:93:0a:85:10:a6:50:
                    b3:bd:dd:0c:39:8e:74:51:2d:fa:49:1e:aa:02:c6:
                    f5:50:f7:48:73:8a:f2:22:0b:bc:48:fc:fa:87:e5:
                    7e:9d:eb:c1:df:90:e0:13:7f:0b:b3:27:e6:97:c7:
                    45:62:b5:47:07:2f:ab:93:b0:a6:40:91:b6:8a:d2:
                    4d:0b:1b:f1:c3:62:13:0e:2c:a7:17:b5:e4:09:6d:
                    57:d4:2d:f9:72:66:01:16:3d:1a:5e:64:ca:72:4b:
                    cb:f4:5c:b0:e0:c5:47:2d:cb:01:cc:0c:3b:53:01:
                    93:d0:f1:17:cd:5d:2c:f3:40:40:a5:b3:f8:c5:08:
                    56:42:d8:39:04:ab:db:c6:5c:bf:1c:2f:4c:7d:f3:
                    db:ce:81:d9:e4:41:28:d9:80:88:98:08:c1:38:93:
                    74:e1:26:b7:d3:be:ce:40:19:4e:3a:54:57:5a:6f:
                    da:3b:98:0b:1e:75:e9:90:35:f4:e4:0b:9d:06:23:
                    fa:03:09:69:70:9d:59:5b:59:cc:2e:83:b4:91:eb:
                    78:7e:cf:0c:a5:ac:2a:21:7e:f7:ff:93:4e:64:42:
                    ee:ce:b8:44:10:48:1a:bc:50:3c:92:2c:51:cf:ef:
                    0a:06:b0:60:29:b3:4d:4a:bf:64:dc:81:76:68:23:
                    5a:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:E7:24:16:7E:BE:28:33:28:82:51:69:89:21:D6:A3:48:48:EA:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8624f59e-f908-3302-ab95-200989ecfdf0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:71:86:3c:24:af:bd:37:64:fe:8c:a4:4f:81:d2:10:ff:3f:
         5c:36:4e:49:28:eb:06:52:69:cc:0f:67:ef:ec:fa:99:37:5a:
         c7:10:f4:5f:71:f9:e6:b5:9f:78:9e:e6:5d:4a:8a:a7:dd:71:
         7f:f1:52:89:fe:75:3a:80:00:7a:46:cb:21:bc:86:3f:5e:ca:
         4c:9e:28:aa:b9:c1:64:79:fd:30:2a:ee:ff:bb:4a:2b:b1:b6:
         5f:c8:c9:6c:e9:82:85:a4:55:67:5f:80:7d:11:af:47:a4:c8:
         d5:67:1b:73:97:08:28:a0:68:15:f4:e9:49:81:70:db:2a:bc:
         56:d3:05:3a:fc:6b:c5:86:56:04:55:35:55:97:d5:74:fc:a3:
         01:b4:28:16:c7:02:d9:07:41:70:8d:01:5d:bd:85:48:9e:d0:
         c1:ba:20:37:50:74:37:98:30:80:ec:ae:cd:b6:79:51:a2:c9:
         9a:19:98:ca:83:39:ef:cf:c0:5f:1b:11:4e:7e:5e:1e:f7:c6:
         68:f9:05:58:52:2f:f7:c4:ae:c1:41:3c:2f:5e:9d:20:57:82:
         a3:1a:61:4f:b8:b3:85:cf:fd:cb:f4:fc:51:4b:ef:e2:28:0a:
         3b:b6:82:16:aa:b7:8a:e1:f2:6e:b8:64:97:6b:87:04:c1:44:
         9b:0f:37:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 1 20:38:00 2024 by rpki-client on console-ams.rpki-client.org