Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bb1f3de8-615a-4e8b-b393-bae42ab3e509/5835d96e-e4ba-3340-8c1d-da589185468f.roa
File:                     5835d96e-e4ba-3340-8c1d-da589185468f.roa (raw, json)
Hash identifier:          4qePa21N+466j1grxpmdcHJ0aqHGoxEFKT4pPlptbpI=
Subject key identifier:   00:F6:7B:D8:D4:0F:E3:B1:00:E5:9B:7D:79:68:66:BB:E2:AE:8D:26
Certificate issuer:       /CN=bb1f3de8-615a-4e8b-b393-bae42ab3e509
Certificate serial:       010D0C9F43285845BAB6E4981939C4F9A5369580
Authority key identifier: 28:0E:FC:03:1C:0C:25:48:4F:D3:1A:14:D4:A9:B6:05:F8:59:C6:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bb1f3de8-615a-4e8b-b393-bae42ab3e509.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bb1f3de8-615a-4e8b-b393-bae42ab3e509/5835d96e-e4ba-3340-8c1d-da589185468f.roa
Signing time:             Wed 01 May 2024 14:54:56 +0000
ROA not before:           Wed 01 May 2024 14:54:56 +0000
ROA not after:            Tue 30 Jul 2024 14:54:56 +0000
asID:                     399970
IP address blocks:        149.112.154.0/25 maxlen: 25
                          149.112.155.0/25 maxlen: 25

Validation:               Failed, certificate revoked on Wed 01 May 2024 15:15:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:ba:b6:e4:98:19:39:c4:f9:a5:36:95:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb1f3de8-615a-4e8b-b393-bae42ab3e509
        Validity
            Not Before: May  1 14:54:56 2024 GMT
            Not After : Jul 30 14:54:56 2024 GMT
        Subject: CN=18ec56d2-7f26-418a-b29e-3b49f91083df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:1e:79:8e:25:9a:09:2e:bd:06:d5:17:35:3e:
                    db:87:f1:80:47:31:c2:c1:3b:fb:85:d6:f2:ab:06:
                    f1:e8:16:61:13:9e:26:40:7f:e7:eb:a1:7d:de:6d:
                    dd:0f:9b:af:cc:fb:69:cd:5f:57:e2:1a:3c:28:ba:
                    8f:ba:c0:73:00:68:6b:e1:c3:8e:ab:1d:6f:30:f2:
                    e6:bf:f8:56:02:1d:8a:da:d1:f5:be:83:5f:d1:74:
                    4c:53:4d:93:05:c0:a0:d9:53:dd:88:1c:28:ca:f3:
                    02:94:40:58:8d:56:4f:ff:ba:de:a4:5a:d7:12:84:
                    88:0f:e8:83:59:1b:25:c1:f6:a3:00:ab:2c:7e:16:
                    1a:a5:9d:45:e9:40:6a:9a:e0:cf:05:04:f2:a7:f5:
                    ad:35:65:8c:d0:a7:d5:ed:c7:93:04:0c:b5:97:45:
                    a7:55:42:d8:79:a3:37:ec:49:5c:a7:f1:84:38:69:
                    ee:3e:d3:c3:0e:16:2f:67:72:1a:fc:7b:34:71:3f:
                    2a:b4:c6:03:66:e0:ee:5b:09:d2:a6:15:11:5d:24:
                    0d:d2:39:b9:74:20:d4:b0:65:43:17:ce:60:3b:cc:
                    7e:4c:5b:6d:5e:c5:51:ca:c0:d5:6b:63:51:f1:44:
                    11:da:19:b2:10:27:57:7e:83:84:19:1a:5e:a2:df:
                    77:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:F6:7B:D8:D4:0F:E3:B1:00:E5:9B:7D:79:68:66:BB:E2:AE:8D:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bb1f3de8-615a-4e8b-b393-bae42ab3e509/5835d96e-e4ba-3340-8c1d-da589185468f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bb1f3de8-615a-4e8b-b393-bae42ab3e509/bb1f3de8-615a-4e8b-b393-bae42ab3e509.crl

            X509v3 Authority Key Identifier:
                keyid:28:0E:FC:03:1C:0C:25:48:4F:D3:1A:14:D4:A9:B6:05:F8:59:C6:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bb1f3de8-615a-4e8b-b393-bae42ab3e509.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.154.0/25
                  149.112.155.0/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:d9:42:2d:5b:dd:5b:bd:d4:28:98:62:a4:9d:8e:a1:68:89:
         f6:50:1d:bd:7a:cb:be:36:83:39:06:29:fc:f1:d4:cd:8d:9c:
         5a:84:07:96:2d:29:38:66:16:3d:d5:c8:fe:10:4e:20:a8:bd:
         e2:33:b3:e7:d7:f7:04:e9:00:96:26:34:5a:b1:a4:d7:63:f9:
         f2:b6:49:ec:3e:87:74:28:2c:a3:17:01:73:43:62:4c:f5:15:
         9a:6b:79:6c:7a:8d:71:e3:c5:c3:07:d1:c9:a2:37:8b:1a:3e:
         34:7c:f0:9b:42:47:a0:76:75:5a:8e:1e:80:2b:4f:48:29:b2:
         44:c4:1d:20:cb:7a:05:c9:88:82:ed:45:9f:b0:c2:83:75:b6:
         fd:8d:70:ac:ec:ff:14:de:6b:6c:d2:f4:e5:7a:5e:b8:7e:3b:
         d9:8f:45:18:d1:68:50:29:f0:29:69:8e:e7:07:f0:93:a2:72:
         ef:3a:86:6a:5e:68:80:15:9a:ad:95:10:de:f4:d7:7f:31:da:
         59:8e:e1:d6:3f:32:fa:93:d9:d8:cb:e1:6a:bf:b0:a4:11:89:
         b2:f1:04:c4:11:46:09:45:be:19:40:63:ea:8e:9e:fc:1b:4d:
         4b:a1:80:2c:44:e2:b3:75:2e:9d:8a:49:6f:f8:01:75:98:61:
         a8:61:37:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:06 2024 by rpki-client on console-ams.rpki-client.org