Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f77c02a2-02a3-3b2e-9f62-fda462917634.roa
File:                     f77c02a2-02a3-3b2e-9f62-fda462917634.roa (raw, json)
Hash identifier:          N204vIBW9A3efNq0NbkF7jIPWrHYX08ZpZu1bPJ74cw=
Subject key identifier:   68:97:64:E6:2E:64:96:4D:8E:75:72:51:60:53:F2:DC:E5:9D:DC:69
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F432858471AA36A0D694010222FE2E200
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f77c02a2-02a3-3b2e-9f62-fda462917634.roa
Signing time:             Wed 04 Sep 2024 16:20:14 +0000
ROA not before:           Wed 04 Sep 2024 16:20:14 +0000
ROA not after:            Tue 03 Dec 2024 17:20:14 +0000
asID:                     11798
IP address blocks:        136.0.168.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 11 Oct 2024 21:09:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1a:a3:6a:0d:69:40:10:22:2f:e2:e2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Sep  4 16:20:14 2024 GMT
            Not After : Dec  3 17:20:14 2024 GMT
        Subject: CN=5810cb96-9d5d-480d-8ae0-f430cc5bf990
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a4:14:0c:6b:b4:d0:64:c4:dd:62:d8:db:6a:
                    7c:d3:46:64:1e:fb:e0:11:96:cc:1c:84:ca:60:b5:
                    6a:5b:53:70:09:77:f3:4d:85:e4:2d:a7:c8:4d:32:
                    68:e2:9b:b7:9c:37:f0:7e:75:7b:06:64:1c:30:ba:
                    fd:33:9a:6e:27:05:e0:bb:15:12:6d:a0:33:bb:24:
                    85:76:ef:38:2a:20:43:01:32:c7:82:76:a3:fa:74:
                    e8:8c:b1:2c:c1:38:fe:96:2e:59:20:d0:55:2c:d8:
                    e2:83:65:9c:bf:21:5b:97:cf:10:9b:5d:a4:6f:f2:
                    7d:cb:40:05:d1:0a:f4:86:1e:ec:06:39:ee:25:ff:
                    12:9c:bd:5b:fb:73:ca:1b:6d:b6:20:e9:3d:c4:20:
                    aa:41:d7:16:61:a9:a3:ef:97:b8:e8:c2:ca:d7:f6:
                    db:e5:6b:20:33:06:31:f5:78:70:9d:43:61:fd:c1:
                    f7:37:4c:36:5a:ac:7f:37:79:63:52:df:0c:a1:f0:
                    51:33:21:fb:d4:f2:2f:9e:74:4c:44:71:62:8d:f3:
                    73:c5:0a:a4:07:f3:dd:18:b8:0f:54:66:5f:37:d8:
                    6a:d4:f7:16:04:13:78:84:b6:15:36:75:68:8d:ae:
                    40:26:c3:23:ec:f8:f9:9e:84:6e:80:cd:15:4a:c0:
                    4e:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:97:64:E6:2E:64:96:4D:8E:75:72:51:60:53:F2:DC:E5:9D:DC:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f77c02a2-02a3-3b2e-9f62-fda462917634.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:87:79:70:8b:f5:0e:f7:76:52:15:9e:2e:c0:01:df:83:b9:
         59:aa:a1:4f:aa:95:1b:90:b0:dc:16:c0:22:fd:f9:cd:e9:60:
         ed:19:fd:bd:81:1d:90:46:c8:e2:e9:e2:e2:11:3c:18:85:c2:
         f1:8c:d8:c5:fa:fc:0f:e8:8a:fa:d4:89:b6:4c:2f:ca:5c:56:
         65:d0:f1:7a:1f:02:55:4e:d9:65:be:2c:b5:8d:fb:7a:30:a0:
         fa:e9:99:dc:99:35:72:b2:0e:13:ee:2d:b4:44:18:04:ba:e6:
         2c:7c:25:2b:c4:ed:79:9d:06:b6:46:b7:6c:82:ed:0f:0e:9d:
         18:0d:48:3c:1f:10:88:ed:af:8a:d7:e6:33:d2:8a:be:c9:51:
         13:05:db:c8:de:80:9f:ab:b3:8b:21:74:ba:87:d5:7d:ab:cc:
         23:61:66:47:5c:d0:73:2b:e0:fb:b0:24:73:3a:d4:82:d4:4d:
         b5:b1:de:49:be:73:47:91:15:be:c4:e4:88:9c:fb:86:53:fe:
         91:0f:3a:f9:85:21:04:1f:b2:c4:62:ee:ec:2b:e5:2a:94:d2:
         0b:da:dc:01:58:20:6a:f8:f4:c1:0e:5f:a6:29:e6:24:74:1d:
         b3:39:c1:ab:3b:64:53:c6:93:97:3f:9e:10:5d:0c:17:fa:fa:
         9a:45:3d:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 11 23:51:31 2024 by rpki-client on console-ams.rpki-client.org