Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4790bf08-5305-3100-a969-0072d8a5e9c1.roa
File:                     4790bf08-5305-3100-a969-0072d8a5e9c1.roa (raw, json)
Hash identifier:          tQsPJrV++3YJ54o4AGdL5NjQS5ShSGArXW59gD0u3+c=
Subject key identifier:   00:D8:23:5A:27:DD:8D:95:05:E7:87:E3:54:FD:DE:4A:69:ED:87:28
Certificate issuer:       /CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
Certificate serial:       010D0C9F43285845F253D72A661E771C48CDCE40
Authority key identifier: 0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4790bf08-5305-3100-a969-0072d8a5e9c1.roa
Signing time:             Tue 21 May 2024 13:00:34 +0000
ROA not before:           Tue 21 May 2024 13:00:34 +0000
ROA not after:            Mon 19 Aug 2024 13:00:34 +0000
asID:                     9009
IP address blocks:        216.158.193.0/24 maxlen: 24
                          216.158.219.0/24 maxlen: 24
                          216.158.215.0/24 maxlen: 24
                          216.158.214.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 12 Jul 2024 12:12:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:f2:53:d7:2a:66:1e:77:1c:48:cd:ce:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
        Validity
            Not Before: May 21 13:00:34 2024 GMT
            Not After : Aug 19 13:00:34 2024 GMT
        Subject: CN=54175292-1076-4360-9c60-d228d316760c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:df:a1:d2:ac:ac:73:38:8e:36:22:57:cf:c1:
                    84:db:c4:35:40:a3:f5:f7:53:e7:c0:7f:a9:8a:65:
                    c8:e2:71:84:fe:ac:25:18:88:b4:ac:32:13:01:29:
                    71:d1:a3:3b:74:00:b3:97:74:3a:1e:13:7f:4a:00:
                    23:99:a9:d7:50:55:8a:a5:6b:d0:d8:88:23:67:e0:
                    34:fa:de:8f:64:71:b3:79:5d:d2:be:29:6f:7e:52:
                    6e:42:c9:16:23:ff:ef:b8:5b:0b:70:70:64:82:13:
                    c6:54:23:5f:f7:ea:ff:16:fb:d5:9e:5c:d4:88:80:
                    5a:d7:e5:c3:f0:23:9c:1d:0c:7a:00:bf:9b:13:63:
                    55:9d:d7:5a:d1:00:ee:4b:79:43:03:1b:3b:0b:9e:
                    04:e9:61:1f:bd:c0:a6:e4:c1:b1:58:0e:b2:6a:6f:
                    0b:0c:56:81:d8:aa:09:e0:ce:5c:ff:ee:9e:92:5b:
                    46:f2:2c:99:90:9f:97:0a:c0:ac:f5:4e:5c:db:70:
                    f9:e8:23:e0:65:3e:87:a9:81:3b:31:21:4a:40:96:
                    e0:5a:5c:08:ca:c0:df:05:f7:63:c5:ba:c1:93:4f:
                    5e:f4:25:bc:b1:30:12:97:64:64:4f:f5:ba:28:fc:
                    0e:4b:0e:1f:fb:2d:e8:f9:70:7d:1b:a2:e6:78:64:
                    af:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:D8:23:5A:27:DD:8D:95:05:E7:87:E3:54:FD:DE:4A:69:ED:87:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4790bf08-5305-3100-a969-0072d8a5e9c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl

            X509v3 Authority Key Identifier:
                keyid:0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.158.193.0/24
                  216.158.214.0/23
                  216.158.219.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:59:a7:87:2f:20:47:6d:4e:41:9c:e5:c4:8a:f9:c5:e4:8e:
         8d:7c:1d:16:13:3b:0c:35:76:3b:66:b8:af:81:e4:0b:7b:b9:
         fc:34:09:4b:65:bb:bd:aa:bc:3b:dd:50:75:74:cb:23:97:9e:
         f3:d8:5c:99:5e:32:0b:a1:80:d9:a9:7e:0a:b5:0d:f8:9a:a3:
         03:d2:c4:f7:bb:f3:6c:ca:b6:4c:c0:53:3b:70:25:11:03:7b:
         d2:b7:97:ac:30:31:1e:4e:21:7b:20:ce:ab:63:0c:32:0b:56:
         75:18:3d:e8:68:4b:11:b4:b1:29:bc:94:e1:c0:cf:28:dd:9d:
         17:79:80:5d:81:ed:bc:0d:54:51:2c:e0:aa:cb:05:06:38:94:
         31:63:64:df:0d:68:fc:43:68:ca:86:59:ab:4c:6f:ef:62:ed:
         1b:45:9d:60:d2:4b:5d:31:57:7e:04:60:66:cc:e3:5b:18:f8:
         10:c9:70:89:04:d8:95:d1:2c:be:3d:fa:18:e3:11:16:4f:0d:
         af:8f:8c:d8:73:a9:78:fc:6d:88:43:f8:0c:2d:27:bb:93:ea:
         97:dd:1a:12:df:79:82:be:a9:34:99:53:70:9c:c5:7e:21:0f:
         15:b6:05:5b:05:c5:ae:c9:92:eb:10:96:13:f6:30:32:57:50:
         d2:08:ee:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 12 14:49:05 2024 by rpki-client on console-fra.rpki-client.org