Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/039263a6-ee9d-3c10-b026-64d873f9fda7.roa
File:                     039263a6-ee9d-3c10-b026-64d873f9fda7.roa (raw, json)
Hash identifier:          PpD5kyK/KcYAM2wi778tRnoEkaH6FlXUb+LZ0bbSv8Q=
Subject key identifier:   8B:8F:E5:86:F8:73:87:D0:36:D4:0E:68:55:F1:D4:63:0E:3F:ED:E7
Certificate issuer:       /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial:       010D0C9F4328584680B4E1526452CB9BEE591780
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/039263a6-ee9d-3c10-b026-64d873f9fda7.roa
Signing time:             Thu 11 Jul 2024 13:00:34 +0000
ROA not before:           Thu 11 Jul 2024 13:00:34 +0000
ROA not after:            Wed 09 Oct 2024 13:00:34 +0000
asID:                     16839
IP address blocks:        149.96.212.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Fri 13 Sep 2024 05:30:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:80:b4:e1:52:64:52:cb:9b:ee:59:17:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
        Validity
            Not Before: Jul 11 13:00:34 2024 GMT
            Not After : Oct  9 13:00:34 2024 GMT
        Subject: CN=e4829aba-ed38-4c28-bfc5-e99b0e3ef306
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:39:95:c4:ca:04:a6:71:f1:b3:a0:b7:d4:ad:
                    4e:f3:42:17:a0:47:31:7d:f4:30:b7:ce:ce:0a:d9:
                    8c:54:33:6b:b3:7b:9f:8e:a2:20:49:59:55:c4:04:
                    06:73:40:63:83:be:8c:fc:6e:8b:7e:d8:8c:0a:7b:
                    7b:51:fa:77:cd:b4:22:5e:04:01:90:75:9b:9b:7c:
                    ad:f3:2f:c3:4e:15:4d:d8:04:41:81:5b:2a:5c:9e:
                    66:20:20:27:34:0f:a6:2e:21:68:68:58:49:22:ed:
                    b9:85:5a:5a:d0:59:cc:e1:e7:82:f0:99:16:5e:90:
                    02:a7:b3:c5:91:18:d2:74:4a:fd:be:66:92:e5:c1:
                    a1:7d:90:91:c6:ef:86:95:4a:fc:42:e5:ae:d7:39:
                    95:3c:a0:38:f9:dc:a2:bf:39:82:8b:52:e1:a6:9f:
                    24:f1:b3:b6:ae:67:65:97:c4:6e:64:7c:a6:f2:d9:
                    7e:69:da:51:52:53:8b:b8:f3:5c:04:5d:6e:f6:19:
                    d0:42:52:e0:57:ca:81:fa:d1:48:ef:38:91:5a:32:
                    9a:21:88:18:21:09:d1:76:2d:3d:b9:50:33:27:dc:
                    13:2e:b0:98:9f:75:2f:52:be:2d:1b:c6:92:dc:a0:
                    dc:2f:73:7d:24:43:23:22:e0:76:6c:f5:51:d1:2b:
                    74:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:8F:E5:86:F8:73:87:D0:36:D4:0E:68:55:F1:D4:63:0E:3F:ED:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/039263a6-ee9d-3c10-b026-64d873f9fda7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl

            X509v3 Authority Key Identifier:
                keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.96.212.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:b0:41:51:35:f1:0e:06:c9:40:8c:ca:f4:6b:a5:0c:a2:6d:
         72:05:2e:3c:0c:6e:57:a8:61:02:98:14:ac:5a:69:29:e0:d9:
         d8:40:85:46:e9:84:a2:88:c5:24:1a:68:dd:90:de:e9:3d:f2:
         a3:f1:03:73:53:e3:00:7d:97:34:bc:40:18:31:9c:d4:43:d4:
         32:89:7d:e4:08:96:dd:e5:e1:4b:90:4f:33:57:49:08:1c:38:
         95:37:e0:bc:f3:e1:19:c0:03:46:fb:28:fa:49:f9:3a:d3:25:
         cf:eb:65:84:27:9f:1d:ef:51:98:34:f2:b4:f1:ac:ac:ad:47:
         a8:ed:f2:59:16:a3:86:32:1c:c6:43:b2:20:37:c2:af:3b:17:
         d5:66:d2:8f:4c:f2:00:d5:cc:af:95:e0:a0:39:17:6a:12:51:
         27:45:61:97:90:b7:8e:82:8b:ad:b3:44:c9:b0:57:76:bd:c1:
         6e:83:9c:f7:16:c0:0b:3e:73:ca:a2:10:43:4c:5a:c7:0f:be:
         41:a4:96:0d:a7:60:99:5b:3a:21:37:f9:0b:f5:d1:88:1f:cb:
         5c:30:fc:6d:8c:87:11:03:80:b0:d8:5b:a3:3a:17:4c:fe:56:
         98:8b:46:b6:b9:39:7f:38:e0:0e:ed:6f:90:28:72:71:5c:3c:
         6b:37:51:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 13 06:20:12 2024 by rpki-client on console-fra.rpki-client.org