Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/21161ff2-63e3-3c5f-bc7e-edde45a9fa54.roa
File:                     21161ff2-63e3-3c5f-bc7e-edde45a9fa54.roa (raw, json)
Hash identifier:          hTixoQS/MEA31gV2Y5RsGQ7iOXtMmzNExChsGPIYhDM=
Subject key identifier:   10:99:1E:32:29:52:89:82:47:6B:CC:BE:37:4A:87:B1:38:FF:54:D1
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F432858469F6A5D420A0D4E7D4AC94980
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/21161ff2-63e3-3c5f-bc7e-edde45a9fa54.roa
Signing time:             Mon 22 Jul 2024 13:00:36 +0000
ROA not before:           Mon 22 Jul 2024 13:00:36 +0000
ROA not after:            Sun 20 Oct 2024 13:00:36 +0000
asID:                     203020
IP address blocks:        172.94.48.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 04 Sep 2024 12:28:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:9f:6a:5d:42:0a:0d:4e:7d:4a:c9:49:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Jul 22 13:00:36 2024 GMT
            Not After : Oct 20 13:00:36 2024 GMT
        Subject: CN=b014f306-f643-4b35-aed0-9817909954e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:9a:2d:f3:d5:3e:e5:7f:8e:50:1d:00:74:72:
                    1e:2a:f8:cc:ca:4a:d9:f2:af:f8:4b:98:72:42:20:
                    7d:90:af:0a:0a:6e:4e:83:96:a2:c2:05:3f:24:b0:
                    e1:fa:9b:a1:0a:71:52:0a:4b:0d:bd:38:b6:1b:45:
                    d6:1e:4d:cc:ba:87:1f:62:df:6f:32:33:7e:b7:ed:
                    60:ed:43:60:51:87:cb:a2:95:06:28:ca:43:37:4f:
                    4e:6d:6d:f4:d3:57:48:db:9f:4c:3f:ca:ae:1d:ac:
                    b7:7c:c1:a4:fb:7a:89:90:43:3c:ab:a1:2b:32:aa:
                    23:34:96:c5:91:cf:82:24:49:e4:40:3f:93:90:e4:
                    00:b1:4e:65:16:d3:52:ec:5a:6d:d9:a1:e0:ea:0f:
                    bc:b5:ec:27:54:c7:df:f3:c3:d7:31:c0:13:12:7a:
                    34:47:fd:34:52:f9:ff:74:b9:42:e2:60:72:7d:2c:
                    bc:3a:e7:bf:01:7e:2d:c3:75:6d:63:6f:be:98:b4:
                    b2:a6:35:03:5e:86:32:e5:d5:5d:f7:ec:3a:f3:01:
                    b9:88:15:91:6f:c2:b4:ed:f3:e9:73:11:64:ed:0d:
                    36:2b:5b:4e:c1:3d:a6:98:26:45:89:af:06:a6:e7:
                    b3:5b:86:41:e0:db:59:25:6b:b8:ce:cb:f5:74:c8:
                    a9:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:99:1E:32:29:52:89:82:47:6B:CC:BE:37:4A:87:B1:38:FF:54:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/21161ff2-63e3-3c5f-bc7e-edde45a9fa54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.94.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:b3:0b:11:82:94:59:2e:1a:b0:0f:8d:b3:8a:c3:4f:8a:d7:
         a9:8f:0d:29:a2:59:a9:f6:f1:fa:8e:20:7b:b1:82:82:02:96:
         69:59:40:e1:10:32:b4:3a:f1:30:b1:07:46:88:86:b5:47:52:
         45:bf:2a:b2:5d:75:67:6e:55:cc:3a:9e:9d:9f:0e:1d:08:71:
         c2:6f:34:93:56:6a:1c:dd:05:28:22:cc:e0:58:59:8b:c4:1c:
         5f:91:d8:a8:a1:5c:25:15:23:16:83:04:62:71:bd:b2:09:f1:
         3c:a4:28:c9:7c:38:11:3a:97:e8:2c:8c:80:ec:eb:f0:b0:69:
         b0:22:7b:21:fa:f6:ba:c0:43:16:32:7d:40:2b:87:ee:64:ed:
         10:cf:b8:82:fe:0d:18:32:b6:34:eb:49:22:e9:f2:71:fb:63:
         e6:77:ec:06:1e:6f:b3:28:56:20:d7:ab:5a:ac:53:f0:fb:10:
         59:28:18:7d:dc:22:1c:e5:75:99:17:8f:89:5c:a4:d4:43:c8:
         e4:93:32:ad:1c:86:b9:bd:59:ec:02:76:b1:0f:08:2f:67:24:
         d8:c2:32:4d:17:d9:ee:d4:47:12:a4:93:b1:6b:41:36:b4:fa:
         6d:b3:f2:1c:59:72:bc:2b:ae:f8:59:28:15:ef:30:c8:19:91:
         b3:67:9e:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 4 13:38:39 2024 by rpki-client on console-fra.rpki-client.org