Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d3cb3950-63ec-3148-a2a5-c9c2542411d8.roa
File:                     d3cb3950-63ec-3148-a2a5-c9c2542411d8.roa (raw, json)
Hash identifier:          61NZAt3jEdgjX+297E/wwQfHdGD7iV17LftfWBOKhOQ=
Subject key identifier:   23:75:45:B3:C1:66:DB:7E:D9:81:07:EF:2A:89:D7:DF:85:66:52:F7
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285846F11C10EEFBCF27115FBE6300
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d3cb3950-63ec-3148-a2a5-c9c2542411d8.roa
Signing time:             Tue 20 Aug 2024 19:19:22 +0000
ROA not before:           Tue 20 Aug 2024 19:19:22 +0000
ROA not after:            Mon 18 Nov 2024 20:19:22 +0000
asID:                     3356
IP address blocks:        136.0.120.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 27 Sep 2024 16:38:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:f1:1c:10:ee:fb:cf:27:11:5f:be:63:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Aug 20 19:19:22 2024 GMT
            Not After : Nov 18 20:19:22 2024 GMT
        Subject: CN=fac40367-b01e-4dde-9d25-9623d2b7f44b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ba:ba:16:28:47:ff:3c:ce:10:33:3b:3c:fd:
                    87:ee:21:d1:00:69:e1:31:f6:6d:48:6e:8b:41:ec:
                    51:c2:ed:f5:b3:54:9d:a5:aa:ca:6b:4b:0a:64:c6:
                    63:db:ee:cd:be:5d:13:ad:ca:32:0a:8e:dd:f7:9b:
                    b8:ce:8d:ad:3f:ba:b1:2d:d7:4e:0d:4d:92:82:60:
                    7c:1f:a8:b5:20:33:d8:d8:5e:f6:e2:d8:44:98:b0:
                    6b:ac:1a:02:42:9e:f2:65:90:e8:b8:0c:1c:0a:cc:
                    96:db:6d:3c:10:ea:c0:cd:a8:37:75:b9:91:94:8a:
                    ed:a8:dc:92:76:88:53:0b:4f:2d:e6:5a:31:69:5b:
                    8f:b1:db:f5:c7:8f:95:40:f0:05:28:8f:e4:cf:81:
                    20:0e:02:7e:38:fc:8b:84:56:47:96:01:89:6b:0f:
                    1d:a9:b8:2e:8d:0f:15:f7:d6:32:32:5f:0b:07:38:
                    8d:fb:40:57:e8:a5:a5:69:89:fa:2f:04:b2:0d:42:
                    7d:66:67:46:a6:ba:1a:f8:50:90:be:6b:4e:75:dd:
                    69:fc:4d:c1:c8:6e:de:14:54:dc:d8:8f:de:12:46:
                    05:d7:e4:3f:9c:0f:0c:24:51:6a:93:0d:46:56:47:
                    c4:01:a5:d6:8c:96:ef:e6:3b:8c:68:18:06:a0:01:
                    64:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:75:45:B3:C1:66:DB:7E:D9:81:07:EF:2A:89:D7:DF:85:66:52:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d3cb3950-63ec-3148-a2a5-c9c2542411d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:79:f7:27:78:4c:62:1f:ca:fb:3a:e2:4f:90:54:94:94:a4:
         1d:04:94:d7:65:88:c7:4c:70:a9:50:d6:2a:0d:a4:68:45:c4:
         c5:e6:09:51:fa:24:d8:ca:da:7d:9b:34:d0:eb:92:91:3a:01:
         d0:01:f9:5a:65:e5:65:ff:2d:45:60:2c:5f:5a:7d:3f:5e:cb:
         5f:5b:ce:68:93:04:80:13:1f:28:dd:c5:a4:78:1d:77:2d:28:
         15:84:74:f3:38:c2:ed:5c:ac:c1:0c:ac:55:c4:50:1e:aa:d7:
         e2:45:a3:c4:1b:12:7d:0b:85:4d:2e:a4:09:8d:7f:a4:f6:39:
         99:53:56:26:3e:8c:9f:dd:6f:78:13:df:6e:25:c3:48:56:f9:
         ad:2e:7e:b3:89:90:f3:0d:eb:70:c5:95:5b:d3:f8:0a:16:3e:
         6b:d0:c1:3d:ba:f7:09:5b:ff:f2:50:d7:b4:af:83:e0:42:b2:
         6d:91:ad:c7:a3:c9:ec:b9:ee:95:c3:43:b8:05:2f:ee:7f:45:
         b0:d7:ca:06:ea:a9:f5:7a:ee:24:84:2d:ac:00:44:7d:bb:04:
         77:01:52:72:83:cc:3f:25:dd:af:4c:2b:46:6d:a0:fd:4a:ab:
         86:fa:ad:be:57:56:df:ad:0f:4b:b0:c3:d2:43:9d:80:dc:57:
         ee:10:b9:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 19:42:22 2024 by rpki-client on console-ams.rpki-client.org