Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/12f600f9-93ef-39b4-be5e-2daab2b96860.roa
File:                     12f600f9-93ef-39b4-be5e-2daab2b96860.roa (raw, json)
Hash identifier:          KauDAE8hfW7H3hk7l30AwEYdiyn/UlmDAbFMkGOvFuM=
Subject key identifier:   0C:CA:D8:46:18:A1:3E:F7:82:90:41:2E:BB:B2:15:7F:24:16:5F:54
Certificate issuer:       /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial:       010D0C9F4328584680B4E0DF71217E31CEBF5D00
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/12f600f9-93ef-39b4-be5e-2daab2b96860.roa
Signing time:             Thu 11 Jul 2024 13:00:34 +0000
ROA not before:           Thu 11 Jul 2024 13:00:34 +0000
ROA not after:            Wed 09 Oct 2024 13:00:34 +0000
asID:                     16839
IP address blocks:        149.96.176.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Fri 13 Sep 2024 05:43:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:80:b4:e0:df:71:21:7e:31:ce:bf:5d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
        Validity
            Not Before: Jul 11 13:00:34 2024 GMT
            Not After : Oct  9 13:00:34 2024 GMT
        Subject: CN=f6c88584-41e7-40f5-b471-4d811c836c47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:72:c8:f6:8c:7f:ca:ba:43:ff:af:88:e4:ad:
                    0b:4f:dd:7d:8a:fa:78:5e:56:19:80:84:d7:d5:5b:
                    65:3c:18:b8:71:52:11:cf:c4:a2:84:d3:83:ad:e2:
                    ee:3d:22:ea:2c:05:8a:98:ea:a3:cc:da:01:b0:b8:
                    5c:51:63:83:bd:70:b2:70:0d:9a:20:c0:cd:03:9f:
                    04:83:fe:b3:2f:33:4f:89:ec:03:80:78:38:55:6c:
                    e9:14:2e:e8:fc:6f:cd:28:3c:5b:11:0c:d5:69:fe:
                    61:2e:b1:b3:b6:86:aa:d8:b5:e9:5b:9f:c6:8a:68:
                    d6:40:34:8c:62:56:d3:e4:f6:87:32:e8:3c:f5:df:
                    2c:21:17:0f:8e:f8:2f:e2:83:a2:5a:2b:fc:49:94:
                    e2:c2:fb:07:5f:97:de:ad:b0:a2:db:9e:cc:1a:22:
                    36:e6:4e:45:84:99:21:3e:ec:bf:f0:47:18:87:a2:
                    b3:db:c9:fb:73:c3:7d:3f:a8:1d:1e:5d:2c:07:d2:
                    ce:66:a2:57:bd:65:b8:c6:16:20:c2:bd:e5:ee:2c:
                    cd:de:2f:15:14:24:81:d8:00:75:91:5e:f9:e4:95:
                    e0:07:a8:11:a4:3f:e7:85:ff:ea:03:3f:b2:05:34:
                    c1:d3:e3:d2:31:e3:65:21:fe:8c:10:7d:3a:b4:2d:
                    63:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:CA:D8:46:18:A1:3E:F7:82:90:41:2E:BB:B2:15:7F:24:16:5F:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/12f600f9-93ef-39b4-be5e-2daab2b96860.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl

            X509v3 Authority Key Identifier:
                keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.96.176.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:f5:d5:35:e7:b4:78:7d:d6:2e:91:53:99:8e:48:05:4c:40:
         fd:8e:3c:2a:8e:c5:2b:61:7a:8e:4d:12:92:2f:0d:11:d5:ca:
         5c:bc:d5:98:d2:82:52:33:b9:4c:0a:22:f3:06:59:63:66:2a:
         53:9b:00:e4:47:44:4e:2f:8f:58:fb:76:f7:64:a5:c3:42:20:
         76:3b:e0:34:7a:05:7c:4f:29:24:27:6b:15:38:a6:b3:a3:d5:
         bc:98:d6:30:1b:7f:0d:bd:01:a4:34:8d:d1:a7:49:35:0d:ba:
         d1:67:dd:a9:ee:7a:e0:ed:3f:08:f9:10:0d:f5:f5:99:a1:2d:
         e0:f5:d5:57:10:1f:70:ea:08:6c:1b:ff:78:1b:a4:d3:47:ba:
         20:1d:32:e8:12:62:0c:c9:28:34:c1:dd:ee:45:ab:48:ed:17:
         5b:70:63:1f:8e:26:32:b2:09:91:09:7b:9d:e0:bb:bd:bf:7d:
         80:7a:34:cc:48:82:1d:e9:bf:f5:69:11:23:41:35:fd:ac:27:
         2a:15:48:f2:3a:60:57:c4:62:e5:b5:90:77:51:e1:9d:0f:35:
         d3:2f:6f:5a:6a:ba:d5:d5:25:a9:75:8c:5a:db:7b:a1:0a:fb:
         bd:67:20:f1:66:ad:ab:e9:23:a3:47:72:37:13:6c:a6:56:e7:
         bc:26:0b:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 13 06:20:12 2024 by rpki-client on console-fra.rpki-client.org