Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/5266c251-6c51-31b4-a4bb-0831e505b878.roa
File:                     5266c251-6c51-31b4-a4bb-0831e505b878.roa (raw, json)
Hash identifier:          r30grcR6/8Vy31xl4PgowHE+Y6CZLUYMO5mT6VVY42c=
Subject key identifier:   44:FF:FD:54:46:5C:2D:22:F5:93:C9:B2:09:EC:C7:B2:D2:7C:3F:DB
Certificate issuer:       /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial:       010D0C9F4328584680B4E3D891B20B9B8A15A200
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/5266c251-6c51-31b4-a4bb-0831e505b878.roa
Signing time:             Thu 11 Jul 2024 13:00:34 +0000
ROA not before:           Thu 11 Jul 2024 13:00:34 +0000
ROA not after:            Wed 09 Oct 2024 13:00:34 +0000
asID:                     16839
IP address blocks:        149.96.104.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Fri 13 Sep 2024 06:11:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:80:b4:e3:d8:91:b2:0b:9b:8a:15:a2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
        Validity
            Not Before: Jul 11 13:00:34 2024 GMT
            Not After : Oct  9 13:00:34 2024 GMT
        Subject: CN=5e99207c-fe24-4bab-9915-a7ff462e20d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:b2:96:33:ca:ba:79:b6:c9:7b:27:15:c0:78:
                    86:1a:96:06:a6:46:5d:9e:6a:d2:85:7f:46:88:06:
                    e7:d6:06:c7:99:30:75:79:5b:5b:d1:a9:46:d9:9e:
                    9b:24:d4:f8:b4:ef:79:de:e3:9d:df:61:e4:0b:7d:
                    ba:da:a0:01:11:cc:df:4e:0d:e2:3c:88:18:9e:b3:
                    bb:e2:2f:95:0e:27:15:ad:64:03:27:73:b3:45:b1:
                    cb:92:f9:d9:1f:5d:63:e3:f6:4f:b1:9c:33:a1:6c:
                    48:e8:a4:91:4d:c6:f4:04:0b:c2:89:a2:f4:d3:11:
                    9b:a1:74:c0:7e:cd:dc:7a:e7:fa:67:d0:0c:fe:33:
                    b4:c9:b0:a5:b8:d7:2a:d9:33:0a:9e:15:12:dc:db:
                    73:ab:a6:d8:03:3d:7a:bf:ed:16:df:48:43:c3:bb:
                    65:79:c9:e1:74:b3:7d:cf:dd:1a:03:fa:c0:05:c6:
                    c2:f9:17:b8:99:4e:b7:d7:64:9a:d9:1a:dc:eb:7e:
                    cb:ac:08:87:1d:40:33:84:3d:28:90:14:a0:60:07:
                    3b:74:41:cd:4b:84:c5:48:80:ca:18:41:8e:48:27:
                    2d:5e:54:ce:11:ee:cf:c7:b1:3f:7b:6a:d8:e5:94:
                    ee:b5:13:b7:cf:06:b9:af:a3:74:53:be:9d:44:9c:
                    c1:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:FF:FD:54:46:5C:2D:22:F5:93:C9:B2:09:EC:C7:B2:D2:7C:3F:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/5266c251-6c51-31b4-a4bb-0831e505b878.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl

            X509v3 Authority Key Identifier:
                keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.96.104.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:aa:ac:cb:8b:bb:d3:0a:cd:1a:6e:f7:a0:22:92:66:62:d1:
         52:0e:e0:e7:f6:63:d5:37:b8:cd:37:5c:f8:e9:4b:41:9d:af:
         ca:34:7b:9e:06:15:a8:05:9a:86:d8:f3:b1:11:46:e0:21:94:
         f8:29:c8:03:44:47:d4:38:37:db:9d:06:a5:26:cd:2a:b1:05:
         79:14:0b:cd:bc:79:7f:ed:8c:f5:dd:00:41:d5:bc:85:76:55:
         35:fb:5e:d3:c7:13:11:62:cb:bf:0a:00:37:b6:42:d2:ff:94:
         2e:4d:ad:3e:c4:0a:bf:9d:74:9d:f7:02:d0:25:a8:5c:f9:95:
         b4:45:31:5f:be:bb:6d:26:15:f5:a2:83:6a:29:5f:2f:50:f8:
         1d:c5:63:9d:42:87:18:53:f5:4a:81:03:8d:28:4d:48:39:f1:
         ad:b1:58:83:a6:69:1a:9e:13:fb:7d:f2:6c:73:d4:61:b9:f0:
         ae:48:27:0e:a2:15:95:80:3d:43:b5:5c:71:80:11:90:2e:12:
         1e:8d:15:37:18:e9:c8:35:12:00:17:4f:29:5d:e0:ed:f3:49:
         1f:d9:66:8c:7b:9b:d5:66:bc:0a:9e:f0:6f:df:7f:16:f4:49:
         3c:bd:81:64:80:29:23:f8:bf:f2:9f:9b:4d:ce:5b:a5:f4:0c:
         3a:11:eb:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 13 07:27:04 2024 by rpki-client on console-fra.rpki-client.org