Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fbcf9a0c-747f-32c5-95d5-3faf57adf728.roa
File:                     fbcf9a0c-747f-32c5-95d5-3faf57adf728.roa (raw, json)
Hash identifier:          2g3lOUwSAsrAw2i2jXbm4h/e6Mz0GsZnDhpANhsgBf8=
Subject key identifier:   44:8E:D8:08:10:1B:22:B1:34:39:F7:4A:7F:10:23:3D:22:43:F7:CE
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F432858455333091C14396D1C7A2F5400
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fbcf9a0c-747f-32c5-95d5-3faf57adf728.roa
Signing time:             Mon 25 Mar 2024 13:00:33 +0000
ROA not before:           Mon 25 Mar 2024 13:00:33 +0000
ROA not after:            Sun 23 Jun 2024 13:00:33 +0000
asID:                     7029
IP address blocks:        151.213.88.0/21 maxlen: 21

Validation:               Failed, certificate revoked on Thu 16 May 2024 07:02:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:53:33:09:1c:14:39:6d:1c:7a:2f:54:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 25 13:00:33 2024 GMT
            Not After : Jun 23 13:00:33 2024 GMT
        Subject: CN=6aad590f-e969-402b-bfc5-1037d9651f95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:be:f8:b1:f4:f0:cf:b4:e3:cb:61:21:e4:bc:
                    ac:1c:e3:68:03:9d:4b:cb:11:07:13:23:1c:e0:48:
                    8c:f6:46:d0:e7:9d:f3:d5:fa:c0:be:50:4c:52:9d:
                    79:2d:34:79:e2:34:57:98:7f:17:04:c1:5c:66:7b:
                    ed:0f:cc:23:2d:74:58:3e:98:b1:68:7c:aa:cd:0d:
                    7d:62:06:7f:fd:b9:87:bb:0d:93:e7:b0:71:0a:b0:
                    58:98:23:81:fa:6a:12:b5:ba:b4:a7:d3:2f:c8:63:
                    e9:bf:1b:a1:4c:47:a5:c4:61:6b:9d:8f:58:d2:a3:
                    f3:61:a2:7f:ee:6a:86:87:99:a9:07:78:b5:d2:7c:
                    df:8f:1e:fa:23:11:b1:03:3c:ce:c2:9a:cd:69:da:
                    0c:7f:91:d1:78:54:84:78:3a:56:8d:51:e6:96:7b:
                    8b:24:50:d0:07:4d:54:83:f4:af:62:eb:73:be:5f:
                    d3:f6:47:97:93:5a:77:2d:00:ce:28:63:e8:07:3a:
                    7a:4d:9d:3b:44:52:fc:f1:d7:aa:b8:6f:12:86:c0:
                    5c:0d:2a:27:19:eb:d1:5b:bd:14:71:f6:f9:53:2c:
                    db:60:19:44:9d:85:5e:3c:54:7e:23:d6:4b:40:2e:
                    cf:44:14:0a:55:30:e0:5e:3b:52:2c:0b:90:36:40:
                    3d:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:8E:D8:08:10:1B:22:B1:34:39:F7:4A:7F:10:23:3D:22:43:F7:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fbcf9a0c-747f-32c5-95d5-3faf57adf728.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.213.88.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:9b:ae:1c:f4:1a:e2:4b:b0:ef:3d:78:8d:71:b9:a3:31:ac:
         00:d4:c1:a0:c0:e4:02:07:c5:7c:ed:b1:fd:4c:56:7a:bb:be:
         d9:46:7f:15:92:12:20:8d:d1:44:cc:9a:7f:b8:75:fa:fc:53:
         81:16:42:71:31:10:47:1e:b5:5d:a1:6d:ea:09:e0:36:c8:ae:
         21:47:bb:e3:28:1e:e5:79:fa:6d:23:09:17:a2:da:da:42:b5:
         b6:b1:dd:d1:5f:f8:63:4e:d2:e7:f2:a0:a0:ac:f7:8c:e5:94:
         3e:e3:ad:32:63:f2:12:d5:e5:cc:56:58:7e:d0:73:fe:9a:3a:
         dd:04:04:66:d2:e1:3e:5e:71:b6:60:44:27:85:a5:f9:96:46:
         20:76:ce:4a:34:4a:85:e6:64:b9:8d:ff:3a:12:ad:0d:51:a9:
         5a:6f:58:aa:95:c8:55:3c:53:99:80:39:5d:32:e0:70:1b:0b:
         5a:b1:ef:30:56:80:66:2c:93:e5:aa:69:31:30:52:4c:fa:f5:
         90:8e:c2:0c:b5:7d:06:62:89:7b:5d:c0:e5:85:db:ea:ab:0f:
         47:4e:55:ff:76:17:9a:b8:d5:b4:14:c3:8a:d2:2c:cc:10:70:
         3d:07:7d:70:9b:4c:2e:c4:40:06:4e:56:e5:c5:83:d3:83:41:
         bb:18:3a:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 07:46:22 2024 by rpki-client on console-ams.rpki-client.org