Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/2f0afe8c-33ec-3dc4-9e72-40e497b3bf9e.roa
File:                     2f0afe8c-33ec-3dc4-9e72-40e497b3bf9e.roa (raw, json)
Hash identifier:          17ZDDhjEkMURN6yBG/WQsq4oY/Hl9eOECmMZljDQxUs=
Subject key identifier:   0D:39:B4:4F:B1:42:43:B1:27:D5:2B:7C:D6:AC:F1:EB:05:E4:3D:3F
Certificate issuer:       /CN=7a1d1c68-78c4-4731-a2e9-57408fe88b84
Certificate serial:       010D0C9F43285847C7FE35C1BCDA230887EB3F30
Authority key identifier: 42:EB:AF:07:72:0D:18:32:AF:C0:7C:01:BC:98:0F:E2:4A:93:C3:55
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/2f0afe8c-33ec-3dc4-9e72-40e497b3bf9e.roa
Signing time:             Tue 05 Nov 2024 18:38:01 +0000
ROA not before:           Tue 05 Nov 2024 18:38:01 +0000
ROA not after:            Mon 03 Feb 2025 18:38:01 +0000
asID:                     7029
IP address blocks:        165.140.93.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 20 Nov 2024 19:40:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c7:fe:35:c1:bc:da:23:08:87:eb:3f:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a1d1c68-78c4-4731-a2e9-57408fe88b84
        Validity
            Not Before: Nov  5 18:38:01 2024 GMT
            Not After : Feb  3 18:38:01 2025 GMT
        Subject: CN=697a8dbd-fed9-4dcf-96cb-706f8806b58a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:4b:5f:af:e0:79:2e:73:c6:08:85:fa:d6:0f:
                    9c:05:0b:17:1c:09:f5:47:48:23:70:08:d6:af:5b:
                    41:51:06:d6:da:14:8d:7a:80:49:b0:b0:1a:d0:de:
                    08:99:c7:16:96:08:e4:62:65:2c:0f:12:53:45:3f:
                    a6:80:89:c9:e4:5a:02:16:a8:c8:c4:ed:c0:f3:59:
                    88:62:a8:08:1d:fb:9a:b5:93:f5:e2:a7:ba:ff:e8:
                    e2:a3:02:86:70:32:19:c6:f3:33:35:7b:80:ca:f2:
                    a4:eb:e3:02:6c:d5:18:12:5e:c2:85:f6:33:42:af:
                    e4:98:fd:f4:e6:dc:b5:0a:6c:bb:96:20:31:67:a3:
                    e9:98:3b:37:75:7a:0d:c0:7f:7d:7d:30:10:a4:6b:
                    e8:bc:40:1f:eb:ae:af:76:02:7e:8c:4b:71:f4:6e:
                    90:c5:7e:62:48:0e:66:a1:6e:22:3e:98:2e:7c:05:
                    35:53:d6:c7:1f:5d:b4:50:de:1c:e8:6e:df:88:d6:
                    86:6c:e4:e2:c3:5f:c5:9a:8b:52:59:11:f2:95:c5:
                    1e:df:f8:f9:a8:32:e3:95:11:a1:9b:51:fd:7d:94:
                    f8:d1:7e:6f:17:3f:82:89:3f:89:ea:20:02:fe:e9:
                    3d:15:7f:24:72:1c:9f:ae:c9:48:28:4e:18:52:97:
                    41:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:39:B4:4F:B1:42:43:B1:27:D5:2B:7C:D6:AC:F1:EB:05:E4:3D:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/2f0afe8c-33ec-3dc4-9e72-40e497b3bf9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/7a1d1c68-78c4-4731-a2e9-57408fe88b84.crl

            X509v3 Authority Key Identifier:
                keyid:42:EB:AF:07:72:0D:18:32:AF:C0:7C:01:BC:98:0F:E2:4A:93:C3:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.140.93.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:fe:55:4a:d6:11:52:60:ad:81:6f:64:ee:4f:fc:5b:b4:8b:
         af:b0:aa:0e:05:51:c0:4d:32:5e:7e:ff:4e:52:49:d7:19:82:
         9d:78:f2:5c:ec:27:57:85:9d:19:6f:a5:93:e2:64:fe:9e:52:
         3e:cc:71:57:f4:56:89:85:a5:33:0f:57:4d:af:a0:8c:24:85:
         92:17:19:ff:d4:73:07:45:92:7b:51:18:6c:ea:40:99:40:c0:
         31:ad:72:0b:71:00:bb:0d:d8:12:d0:f4:20:77:a8:63:24:9e:
         79:39:d5:90:72:a5:6c:3c:ac:3a:4a:bf:d1:75:5b:04:a8:35:
         2d:a0:c2:29:bc:4b:73:f7:2c:e9:bb:9d:c1:4f:d9:33:f9:9d:
         d2:8c:e1:a8:d8:73:56:4e:0b:9e:88:e8:d9:31:3a:d9:a8:7f:
         98:6d:88:85:37:a3:b6:ca:dc:fb:0b:ee:e2:67:74:05:89:86:
         92:e8:b7:5a:03:90:ed:0e:9e:f3:97:fe:de:3c:4b:4e:86:7d:
         01:2f:93:21:8c:a5:b5:4d:15:45:1e:d1:0e:fd:af:86:87:ba:
         89:3d:a5:83:ca:28:71:71:fa:96:1c:9c:d2:5d:1c:2e:9a:55:
         62:04:50:07:20:d5:44:4f:4b:5b:0e:c4:7d:51:0d:83:9f:43:
         37:ff:77:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 22:21:00 2024 by rpki-client on console-ams.rpki-client.org