Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e913f922-e9fc-45ee-8396-8a56c0f5bd25/fe942a2c-4856-315c-9042-e4d8bbb75e5b.roa
File:                     fe942a2c-4856-315c-9042-e4d8bbb75e5b.roa (raw, json)
Hash identifier:          JLq35jKnQcrjUZwSHhWBfatMpjdlDuzW9NnhKt1jFUA=
Subject key identifier:   7A:5B:32:D0:4D:BA:8E:74:7F:BF:CF:69:CD:E4:B5:C9:62:3B:B9:B7
Certificate issuer:       /CN=e913f922-e9fc-45ee-8396-8a56c0f5bd25
Certificate serial:       010D0C9F4328584664C9F8DFC0C9B35254AEFD20
Authority key identifier: 68:56:3A:04:01:CC:85:41:D9:AE:56:B3:21:0B:FF:86:26:E8:C1:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e913f922-e9fc-45ee-8396-8a56c0f5bd25.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e913f922-e9fc-45ee-8396-8a56c0f5bd25/fe942a2c-4856-315c-9042-e4d8bbb75e5b.roa
Signing time:             Mon 01 Jul 2024 13:00:33 +0000
ROA not before:           Mon 01 Jul 2024 13:00:33 +0000
ROA not after:            Sun 29 Sep 2024 13:00:33 +0000
asID:                     53356
IP address blocks:        204.235.252.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Wed 18 Sep 2024 20:09:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:64:c9:f8:df:c0:c9:b3:52:54:ae:fd:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e913f922-e9fc-45ee-8396-8a56c0f5bd25
        Validity
            Not Before: Jul  1 13:00:33 2024 GMT
            Not After : Sep 29 13:00:33 2024 GMT
        Subject: CN=d1fc320f-d7ae-4944-883b-a8cee5da2397
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:97:7d:98:bf:40:cd:fe:85:8d:a9:2c:58:6b:
                    f8:1f:47:7b:82:68:56:fe:86:f5:ec:0a:ea:52:03:
                    5f:61:55:68:a2:8c:ad:fa:1a:e4:7d:7f:5f:50:f4:
                    d3:8a:8e:d3:57:3d:98:80:63:94:94:f8:8d:58:67:
                    89:86:0a:62:61:01:73:ab:2f:2f:2f:b4:75:1a:cb:
                    19:c8:5e:20:e9:ce:68:d4:c2:9b:00:f7:f7:70:cf:
                    d5:99:e1:da:95:58:9f:e7:95:7c:36:dc:11:58:5f:
                    00:56:b1:b2:eb:cc:0a:10:c5:c0:26:8b:30:05:e1:
                    33:44:41:29:8c:76:14:77:4a:02:58:10:cd:7e:e9:
                    db:f3:77:9a:34:46:90:1b:07:5e:f0:9d:ca:c0:a9:
                    39:85:5e:29:ae:12:bc:8f:58:52:3d:d3:9d:c9:2d:
                    3d:d5:85:a9:0f:36:78:cb:c1:61:eb:96:fe:ee:03:
                    c0:94:56:8e:3f:fc:ea:61:a7:56:d4:c5:12:84:95:
                    a0:ea:f7:b7:e5:6c:05:e1:27:95:21:2f:97:f5:7f:
                    11:c0:5d:c9:94:2d:58:32:ca:b2:5a:0e:34:73:bf:
                    a9:c2:b5:6a:b4:30:a4:32:43:d7:f0:ba:11:3c:1b:
                    45:fc:20:89:fb:3b:b5:75:5a:e5:21:5b:e5:a5:eb:
                    e7:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:5B:32:D0:4D:BA:8E:74:7F:BF:CF:69:CD:E4:B5:C9:62:3B:B9:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e913f922-e9fc-45ee-8396-8a56c0f5bd25/fe942a2c-4856-315c-9042-e4d8bbb75e5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e913f922-e9fc-45ee-8396-8a56c0f5bd25/e913f922-e9fc-45ee-8396-8a56c0f5bd25.crl

            X509v3 Authority Key Identifier:
                keyid:68:56:3A:04:01:CC:85:41:D9:AE:56:B3:21:0B:FF:86:26:E8:C1:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e913f922-e9fc-45ee-8396-8a56c0f5bd25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.235.252.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:e2:26:ef:f6:ec:fd:e9:13:1e:0b:36:b7:d1:7b:2c:95:d8:
         e7:57:7c:94:1d:e1:55:e8:50:69:f4:2e:26:53:9d:7a:81:0f:
         81:32:88:ca:6c:81:70:51:3f:05:05:59:57:b2:c7:73:e7:24:
         75:cb:24:68:f4:dd:ec:63:71:e7:12:15:e5:aa:73:1d:cc:92:
         80:d2:05:4e:72:25:c1:78:1d:d9:84:80:a3:d9:0b:a6:db:43:
         e5:66:f3:fb:2b:cc:20:31:1f:37:1e:44:b9:43:cb:6f:9b:97:
         6a:6f:11:62:ac:46:f5:35:a5:2b:74:87:30:85:db:3b:33:25:
         6e:83:ba:8b:ea:33:f2:93:91:ba:06:03:f8:02:9b:08:a1:f1:
         78:25:bc:c1:c3:49:b3:64:7c:46:ba:d6:0b:37:65:ff:4a:68:
         3f:3e:fc:2e:35:ed:a4:0f:4d:a9:bb:1c:39:b2:cb:db:26:4e:
         e3:9e:34:69:05:bb:68:83:25:9d:eb:c3:5d:bb:92:dd:33:c4:
         1e:eb:4e:db:1b:0f:4b:e1:d0:32:01:02:d8:41:a1:63:68:f6:
         09:0a:53:05:87:0c:53:2f:e0:88:b1:d2:ee:76:ee:34:6b:de:
         34:4f:9a:88:28:ae:12:3f:99:11:9a:ce:59:0e:c3:83:c6:33:
         94:cf:7b:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 22:27:24 2024 by rpki-client on console-fra.rpki-client.org