Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/896f0624-c28d-44c0-93cf-3f879f877518/f38959c6-407e-331a-aa61-afad14c35926.roa
File:                     f38959c6-407e-331a-aa61-afad14c35926.roa (raw, json)
Hash identifier:          Rw7qXee6aMMg0VHGkoks/+0fmtsUJpT2AJsir9W7Gsc=
Subject key identifier:   82:81:2B:93:D7:5A:53:72:B3:53:28:26:BC:D0:45:F3:A9:CD:63:C4
Certificate issuer:       /CN=896f0624-c28d-44c0-93cf-3f879f877518
Certificate serial:       010D0C9F4328583DA44C4CDF767A537871BE0440
Authority key identifier: AE:65:9C:F0:57:7D:5C:5C:89:D1:60:E9:01:2F:27:A1:AB:B6:AF:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/896f0624-c28d-44c0-93cf-3f879f877518.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/896f0624-c28d-44c0-93cf-3f879f877518/f38959c6-407e-331a-aa61-afad14c35926.roa
Signing time:             Wed 06 Apr 2022 13:57:31 +0000
ROA not before:           Wed 06 Apr 2022 13:57:31 +0000
ROA not after:            Wed 31 Dec 2031 05:00:00 +0000
asID:                     500403
IP address blocks:        23.133.56.0/24 maxlen: 24
                          23.133.57.0/24 maxlen: 24
                          2602:fbb4::/40 maxlen: 40

Validation:               Failed, certificate revoked on Fri 22 Apr 2022 23:07:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:a4:4c:4c:df:76:7a:53:78:71:be:04:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=896f0624-c28d-44c0-93cf-3f879f877518
        Validity
            Not Before: Apr  6 13:57:31 2022 GMT
            Not After : Dec 31 05:00:00 2031 GMT
        Subject: CN=1c312178-b2db-4c90-bf00-71d3a7629e20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ae:39:89:76:3a:eb:be:66:ec:15:87:75:0d:
                    ca:55:35:38:4c:84:64:8d:5e:3f:5c:f3:9c:6f:56:
                    2e:4a:53:5c:44:35:23:5b:41:74:81:fd:b5:cd:e0:
                    38:b7:9e:f8:63:8c:29:b9:5f:fe:2f:9d:9f:99:34:
                    3c:59:b5:66:a1:b5:b8:f3:f2:6a:99:46:43:be:68:
                    5c:31:d3:8a:79:69:4a:13:c7:84:ba:17:aa:df:c1:
                    ac:59:47:22:69:24:41:59:00:9d:20:2e:50:16:bc:
                    b3:6e:e8:63:04:91:e2:ec:ad:c4:fa:47:b7:25:78:
                    07:02:14:fa:00:b1:94:b9:0b:0b:ea:49:fa:c2:72:
                    06:ec:ee:fb:e3:a4:5a:e1:06:3c:3d:2b:cd:3d:ef:
                    84:9b:48:0a:5e:9c:38:b6:fb:c9:b4:5c:e0:15:be:
                    fc:ea:41:8a:c3:9d:e3:b5:3b:e3:74:f3:c5:f2:bb:
                    98:43:c2:37:18:56:c0:fa:ef:27:5d:8e:19:5b:71:
                    19:a1:e8:1f:56:28:07:1a:4e:10:b8:93:ed:28:01:
                    1b:51:d1:a4:5b:68:21:5d:0f:99:d4:37:27:60:e4:
                    f6:17:1a:ce:aa:a7:2e:41:83:b1:91:ba:38:a5:d0:
                    9a:d2:57:47:27:44:02:c7:64:ee:09:97:43:bb:01:
                    ab:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:81:2B:93:D7:5A:53:72:B3:53:28:26:BC:D0:45:F3:A9:CD:63:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/896f0624-c28d-44c0-93cf-3f879f877518/f38959c6-407e-331a-aa61-afad14c35926.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/896f0624-c28d-44c0-93cf-3f879f877518/896f0624-c28d-44c0-93cf-3f879f877518.crl

            X509v3 Authority Key Identifier:
                keyid:AE:65:9C:F0:57:7D:5C:5C:89:D1:60:E9:01:2F:27:A1:AB:B6:AF:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/896f0624-c28d-44c0-93cf-3f879f877518.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.133.56.0/23
                IPv6:
                  2602:fbb4::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:65:3b:12:f2:a8:f8:c0:51:20:7d:11:a1:5b:7a:9b:37:fa:
         01:09:1a:21:fb:e9:0c:ff:19:ba:dc:1f:39:ef:96:3b:de:8d:
         76:76:30:06:89:e3:fa:ca:58:75:b1:79:7b:5d:0f:99:f4:c0:
         37:fc:e7:7d:e2:3d:dc:3c:4d:65:4a:05:86:d8:4e:2d:33:b7:
         43:16:df:ab:fe:6a:d9:e1:f6:67:33:ff:64:93:be:44:9d:c0:
         81:52:f8:96:aa:15:07:2d:b7:36:fd:c6:47:2b:ea:65:5d:b6:
         7e:60:55:ad:31:f6:87:4e:94:26:3c:ea:6a:c5:6f:9b:ab:b9:
         76:63:bf:a0:07:35:1b:c7:44:83:ce:a1:90:b8:bb:36:44:46:
         9e:16:78:ba:68:97:a1:0d:00:3c:3d:3a:da:f0:98:72:04:1c:
         11:50:e5:74:c0:50:d8:c0:39:2b:89:76:5e:b0:c6:43:71:21:
         1f:0f:c2:92:1c:a8:fc:dd:6a:fb:df:ea:03:69:70:a8:fe:4f:
         e2:3e:88:8b:e2:9d:18:3d:ef:10:ad:9e:15:7f:b8:8b:78:a6:
         d6:4c:9a:84:57:7a:68:88:6f:36:eb:ab:ba:65:87:ec:85:4d:
         f7:39:72:1b:4e:cc:32:05:7d:74:89:b3:84:74:74:ee:30:e6:
         17:d3:dc:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:50 2024 by rpki-client on console-ams.rpki-client.org