Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bb1f3de8-615a-4e8b-b393-bae42ab3e509/d0cdf9bb-bce5-33d8-b597-eb34e23c3bff.roa
File:                     d0cdf9bb-bce5-33d8-b597-eb34e23c3bff.roa (raw, json)
Hash identifier:          KqaV/Ux6rLeHurMzLvlEEDEVnqM1ZCQaUMXCENRslTQ=
Subject key identifier:   D4:74:00:72:83:15:C1:5D:3E:A1:ED:D7:84:47:19:87:92:B4:E9:91
Certificate issuer:       /CN=bb1f3de8-615a-4e8b-b393-bae42ab3e509
Certificate serial:       010D0C9F43285845CB931A70375A14D9853D36C0
Authority key identifier: 28:0E:FC:03:1C:0C:25:48:4F:D3:1A:14:D4:A9:B6:05:F8:59:C6:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bb1f3de8-615a-4e8b-b393-bae42ab3e509.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bb1f3de8-615a-4e8b-b393-bae42ab3e509/d0cdf9bb-bce5-33d8-b597-eb34e23c3bff.roa
Signing time:             Tue 07 May 2024 15:51:34 +0000
ROA not before:           Tue 07 May 2024 15:51:34 +0000
ROA not after:            Mon 05 Aug 2024 15:51:34 +0000
asID:                     399970
IP address blocks:        149.112.154.0/26 maxlen: 26

Validation:               Failed, certificate revoked on Thu 09 May 2024 20:02:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:cb:93:1a:70:37:5a:14:d9:85:3d:36:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb1f3de8-615a-4e8b-b393-bae42ab3e509
        Validity
            Not Before: May  7 15:51:34 2024 GMT
            Not After : Aug  5 15:51:34 2024 GMT
        Subject: CN=9adc2d4e-32a4-46e2-943f-6ae440b0ff5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:70:f2:bb:1a:5a:7f:4a:ec:9e:83:46:db:df:
                    8b:f3:91:c1:a7:7c:6d:d7:9b:09:79:a8:d6:2e:27:
                    1d:33:3a:b3:5f:5a:b5:69:a7:fc:3f:49:23:e2:5b:
                    16:4f:00:30:aa:15:70:8f:14:55:fc:40:6d:f4:cb:
                    a4:f2:29:2d:6a:a9:0b:73:97:8c:ba:29:a7:d0:00:
                    56:e4:0e:5f:6a:51:35:f9:8c:90:d0:86:d9:62:19:
                    b6:df:6c:19:f8:b9:a6:5f:a5:cd:f6:94:4a:15:11:
                    ea:e7:08:85:54:7a:c5:5b:a1:41:ec:b4:09:bb:c9:
                    d5:a9:3f:95:2f:cc:f0:b5:ad:84:2e:65:6e:01:71:
                    ce:38:49:63:5b:7e:38:83:28:55:43:34:38:5c:d9:
                    99:ae:7c:1c:c8:ab:19:06:0f:a4:b7:86:24:ec:25:
                    4a:54:a5:00:68:7f:8e:87:10:8e:ac:5e:51:b6:d0:
                    d4:c9:00:89:18:7f:9e:5c:da:6a:57:1f:59:ae:9f:
                    28:1e:c4:27:8a:7c:eb:11:4f:e3:a9:b0:b4:4b:f3:
                    f6:ae:92:1f:c6:25:63:63:60:7a:5f:9f:45:7a:53:
                    bd:0a:9b:be:cd:f5:a4:b2:9c:e9:0c:7c:3f:b6:6e:
                    f8:26:c7:75:4d:1b:9e:c1:8f:57:a7:d5:82:74:a4:
                    c1:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:74:00:72:83:15:C1:5D:3E:A1:ED:D7:84:47:19:87:92:B4:E9:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bb1f3de8-615a-4e8b-b393-bae42ab3e509/d0cdf9bb-bce5-33d8-b597-eb34e23c3bff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bb1f3de8-615a-4e8b-b393-bae42ab3e509/bb1f3de8-615a-4e8b-b393-bae42ab3e509.crl

            X509v3 Authority Key Identifier:
                keyid:28:0E:FC:03:1C:0C:25:48:4F:D3:1A:14:D4:A9:B6:05:F8:59:C6:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bb1f3de8-615a-4e8b-b393-bae42ab3e509.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.154.0/26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:82:14:d7:8c:8c:96:07:9e:97:30:69:69:29:5e:cf:6a:89:
         e3:b0:69:b4:63:6b:2c:41:7c:b2:7e:6b:91:73:1b:7b:7a:13:
         05:1a:7f:d2:35:5b:48:0b:a2:54:70:19:1c:3b:36:fd:e4:42:
         a0:1a:33:a8:19:ce:8a:f8:ae:d9:4c:b8:91:26:f7:c9:e0:3e:
         91:14:db:de:e6:4e:d8:83:37:ab:fe:c6:81:90:34:d7:12:82:
         9e:18:de:91:61:64:c2:c0:f1:cc:ee:9b:80:6c:8f:70:d3:b7:
         dc:a4:0d:54:8c:90:c9:c9:96:ab:20:97:4b:27:8e:ff:7c:b1:
         3d:ee:57:f4:9a:99:d5:99:5e:13:b3:0c:96:c9:a3:77:1f:57:
         91:b8:87:ac:b9:6f:8e:de:09:dd:85:98:5e:39:78:0c:5b:f4:
         15:e7:83:ff:69:69:64:98:ca:41:79:8c:01:24:fb:1c:c7:1b:
         bb:0c:d6:45:53:d2:da:d0:d7:81:2e:a6:35:3c:d4:9e:8b:c9:
         8e:4a:c5:58:b6:29:82:e0:8f:97:4e:c7:f3:c3:f2:6a:5d:47:
         c3:0f:e9:db:2b:59:0f:a0:8f:b1:0b:63:11:7a:36:8c:fb:b8:
         89:de:1a:e8:25:52:a2:c1:d2:e2:3d:38:95:40:d5:fb:5d:e8:
         cf:d4:3b:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:06 2024 by rpki-client on console-ams.rpki-client.org