Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f8791c17-503c-4afd-9a0b-412c175e957d/0a3d6a86-536e-3020-a341-8b6de2ef8981.roa
File:                     0a3d6a86-536e-3020-a341-8b6de2ef8981.roa (raw, json)
Hash identifier:          jNxPfTI3NkGwtly3i6XArziTV9J4ygws3U+tD64ZBF8=
Subject key identifier:   4E:2E:0E:11:F9:3F:2C:BC:B8:17:93:B9:F1:F0:0A:DA:92:8E:33:55
Certificate issuer:       /CN=f8791c17-503c-4afd-9a0b-412c175e957d
Certificate serial:       010D0C9F43285846B88A834308AFBEF2A939D280
Authority key identifier: 40:E0:29:06:4B:D3:A4:F6:07:8B:63:B4:BC:A6:C7:94:35:DA:A4:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f8791c17-503c-4afd-9a0b-412c175e957d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f8791c17-503c-4afd-9a0b-412c175e957d/0a3d6a86-536e-3020-a341-8b6de2ef8981.roa
Signing time:             Wed 31 Jul 2024 13:00:38 +0000
ROA not before:           Wed 31 Jul 2024 13:00:38 +0000
ROA not after:            Tue 29 Oct 2024 13:00:38 +0000
asID:                     13213
IP address blocks:        69.168.227.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 24 Sep 2024 21:35:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:b8:8a:83:43:08:af:be:f2:a9:39:d2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8791c17-503c-4afd-9a0b-412c175e957d
        Validity
            Not Before: Jul 31 13:00:38 2024 GMT
            Not After : Oct 29 13:00:38 2024 GMT
        Subject: CN=c7e0f0aa-be95-4845-aa85-6d8d9998cb64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:f6:b9:ae:21:eb:51:e3:70:c8:d7:00:2b:be:
                    53:3b:4e:8c:db:85:90:dc:e7:6e:f1:93:1a:2e:c3:
                    53:35:55:e3:31:47:db:98:aa:05:f3:fa:b8:1a:be:
                    b5:a5:13:90:be:38:75:81:b7:56:ab:41:ed:c9:36:
                    23:91:aa:f9:63:6f:63:17:8b:60:d9:bb:a0:6b:0c:
                    34:59:46:e9:d7:0c:3d:1b:e3:c2:1c:a9:84:46:46:
                    f3:01:54:65:a6:4e:43:18:a6:bb:5b:52:bb:f2:9c:
                    1e:ea:69:7b:d1:31:8b:d4:dc:a7:16:1a:c3:f4:07:
                    6b:ba:fb:af:c6:61:cc:a7:bb:ba:5d:9f:77:df:20:
                    a9:a1:fb:ad:8a:f7:22:a0:a2:0c:c2:fa:88:31:42:
                    2b:c4:71:b9:ac:ee:ad:45:eb:c1:bf:d8:9e:b5:d9:
                    2a:e1:53:27:e6:9a:a9:cf:61:21:30:85:29:4c:62:
                    7d:d7:bb:93:f3:87:5c:fd:b0:57:40:bd:b1:e9:bd:
                    7a:0f:73:49:c0:cd:2d:5a:0c:5a:0d:4e:87:f2:fe:
                    c0:98:12:b9:b6:f8:97:11:fe:db:28:78:28:fe:fb:
                    cd:02:a3:ee:c5:aa:90:22:02:71:0f:ef:7d:5b:4f:
                    53:70:5e:02:52:0c:32:8a:10:7a:31:ad:27:dc:1d:
                    d2:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:2E:0E:11:F9:3F:2C:BC:B8:17:93:B9:F1:F0:0A:DA:92:8E:33:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f8791c17-503c-4afd-9a0b-412c175e957d/0a3d6a86-536e-3020-a341-8b6de2ef8981.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f8791c17-503c-4afd-9a0b-412c175e957d/f8791c17-503c-4afd-9a0b-412c175e957d.crl

            X509v3 Authority Key Identifier:
                keyid:40:E0:29:06:4B:D3:A4:F6:07:8B:63:B4:BC:A6:C7:94:35:DA:A4:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f8791c17-503c-4afd-9a0b-412c175e957d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.168.227.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:db:4c:51:92:da:b9:32:87:d4:c0:98:24:53:8a:72:97:69:
         7a:ed:b5:ad:31:a9:33:3d:fb:50:72:0b:ef:01:f5:ac:65:24:
         2a:31:3d:0a:b3:91:3c:07:d0:d3:15:24:3f:23:70:95:09:1d:
         24:1a:e1:07:27:dc:fe:f0:9d:d9:7f:3c:6f:72:7b:42:1c:32:
         9f:11:07:57:16:cc:c8:c4:41:31:ae:c2:07:80:84:51:b2:ac:
         b1:a5:74:f8:83:be:21:e3:f0:92:0b:52:83:3d:b2:9d:98:56:
         f5:21:71:da:93:3d:87:de:6e:83:be:8d:dd:9c:0a:dc:b8:fa:
         51:c8:48:46:21:7d:d2:c7:e9:58:1e:19:5f:43:82:c1:fd:e9:
         29:78:61:0a:0a:58:32:38:6e:eb:ff:99:63:a2:ce:6e:c8:00:
         ab:d9:ea:60:b3:8c:76:e6:2e:1c:13:72:62:2f:7a:8d:b1:b6:
         e4:b9:e8:44:a0:43:36:a2:92:ae:a0:63:78:04:6f:73:74:5c:
         63:96:14:ff:3b:d5:65:fb:9c:01:62:9c:f3:24:73:f2:f8:01:
         8a:11:5e:ff:97:e6:03:7d:b4:98:26:8e:de:0b:a9:c8:3d:c5:
         09:95:a3:96:fa:6f:d6:b5:6e:d9:84:05:b4:7d:df:ee:91:b2:
         99:91:68:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 24 23:11:54 2024 by rpki-client on console-fra.rpki-client.org