Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/1828a239-89e4-3281-b44a-d5186f409115.roa
File:                     1828a239-89e4-3281-b44a-d5186f409115.roa (raw, json)
Hash identifier:          sxavzHMMuHxEXa7iesHpEzYwYwlWkhvmplV9EMgId+o=
Subject key identifier:   4C:37:C8:8A:4E:5A:7A:F3:D4:C0:37:CE:2E:10:D3:EC:53:63:C9:8A
Certificate issuer:       /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial:       010D0C9F4328584680B4E3EC9C549EA3DBC31B00
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/1828a239-89e4-3281-b44a-d5186f409115.roa
Signing time:             Thu 11 Jul 2024 13:00:34 +0000
ROA not before:           Thu 11 Jul 2024 13:00:34 +0000
ROA not after:            Wed 09 Oct 2024 13:00:34 +0000
asID:                     16839
IP address blocks:        149.96.116.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Fri 13 Sep 2024 06:08:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:80:b4:e3:ec:9c:54:9e:a3:db:c3:1b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
        Validity
            Not Before: Jul 11 13:00:34 2024 GMT
            Not After : Oct  9 13:00:34 2024 GMT
        Subject: CN=717629cf-3e33-49ee-9522-6a3a92ea6cc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:85:37:a8:ad:19:c9:a2:fc:3f:93:9a:f3:19:
                    8d:be:8a:d7:d7:ad:a0:3f:34:39:08:48:a0:50:b9:
                    71:6e:4a:37:f7:41:24:7e:24:4e:00:36:07:da:97:
                    f8:2c:b5:84:29:e6:2b:30:01:98:d4:4f:71:2d:7e:
                    b5:e6:97:93:f0:9b:08:4a:78:58:7d:39:35:e7:ff:
                    0d:6d:a3:c7:9f:eb:59:93:31:07:6f:66:b1:d9:04:
                    f2:86:38:69:d0:00:40:55:cb:ed:58:99:d6:a8:af:
                    2f:15:e8:09:60:e0:20:68:6d:31:9a:24:ba:74:0b:
                    46:0b:f4:a9:70:4b:b9:07:25:45:15:88:1f:a5:1b:
                    f6:5c:a1:1c:36:59:d6:11:e0:9d:18:f3:ef:84:39:
                    99:ac:57:5b:5e:ac:21:61:00:e1:3f:d8:94:c7:c6:
                    e7:5b:29:4e:7d:02:61:cb:6d:57:e0:7e:7a:71:24:
                    0c:28:cf:0a:78:81:73:3e:6f:8f:23:90:38:8f:c4:
                    50:13:b8:0f:a0:0b:c8:65:18:6b:fc:ee:72:af:b6:
                    67:2e:46:15:f6:17:1b:0a:a2:45:2d:d1:e4:71:58:
                    ee:3a:b3:6f:c3:59:69:9d:b8:f2:dc:21:70:f8:75:
                    61:ce:f8:6e:f5:9a:3a:3f:e1:48:19:44:0f:d4:e8:
                    cb:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:37:C8:8A:4E:5A:7A:F3:D4:C0:37:CE:2E:10:D3:EC:53:63:C9:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/1828a239-89e4-3281-b44a-d5186f409115.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl

            X509v3 Authority Key Identifier:
                keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.96.116.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:f8:42:57:79:df:f1:84:26:ff:69:41:28:1b:54:6c:0b:d8:
         0b:9f:e0:76:92:85:7c:2b:12:19:36:2a:0d:67:4b:57:d4:56:
         3b:dd:64:d2:31:0a:a6:55:f3:d1:80:df:aa:6f:b1:80:ba:cc:
         56:ec:df:f8:a4:7c:b3:50:e7:fb:34:7b:79:d9:69:b4:50:8d:
         c8:08:c0:ee:7d:6a:f5:10:f1:cc:ef:e2:a4:ee:34:be:1b:1b:
         ec:7b:c6:f7:1e:f7:17:1f:a1:2e:72:5c:e3:e4:88:78:db:63:
         3d:ef:d9:7e:c2:19:75:db:1e:ae:22:d4:57:12:3a:60:ea:5d:
         4d:be:05:25:a5:84:da:58:30:47:50:d8:c3:f6:54:bb:79:57:
         0b:89:ca:41:fa:10:89:3a:de:ac:7f:89:65:fd:07:f7:61:1f:
         f2:cd:2e:09:9e:e5:6e:71:5e:0f:6f:38:f2:18:8c:ed:ce:1e:
         1a:76:15:e1:b0:5e:ab:0b:ce:7c:5b:22:75:4b:57:3e:ff:84:
         a2:d4:7b:4b:d1:c9:6a:a3:2a:de:b2:f4:0d:17:13:50:59:3e:
         84:be:f4:9f:ab:46:23:82:a3:66:68:cf:6c:7c:44:fb:28:24:
         eb:df:24:d2:ac:2c:da:51:69:5f:72:ab:6a:1f:93:a2:02:00:
         9c:8f:93:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 13 07:27:04 2024 by rpki-client on console-fra.rpki-client.org