Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/7949d224-337e-3f72-9d6d-1106f7aef806.roa
File:                     7949d224-337e-3f72-9d6d-1106f7aef806.roa (raw, json)
Hash identifier:          2ZhyL/BO6GqXc2bDGiAycATom4AdZZsoiiZS/2H8P4g=
Subject key identifier:   44:F9:38:20:27:94:F5:CD:6E:33:90:3D:2A:99:C0:93:61:F1:10:5A
Certificate issuer:       /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial:       010D0C9F43285846970A543DA1EBCDAA374E8C00
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/7949d224-337e-3f72-9d6d-1106f7aef806.roa
Signing time:             Fri 19 Jul 2024 13:00:35 +0000
ROA not before:           Fri 19 Jul 2024 13:00:35 +0000
ROA not after:            Thu 17 Oct 2024 13:00:35 +0000
asID:                     19905
IP address blocks:        199.91.136.0/21 maxlen: 24

Validation:               Failed, certificate revoked on Tue 17 Sep 2024 09:22:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:97:0a:54:3d:a1:eb:cd:aa:37:4e:8c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
        Validity
            Not Before: Jul 19 13:00:35 2024 GMT
            Not After : Oct 17 13:00:35 2024 GMT
        Subject: CN=5d5b7e92-8a24-4d56-b729-202bd560a2fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e5:fb:bb:ef:68:cb:09:7d:49:11:a1:11:85:
                    22:63:00:83:62:33:7f:b1:0e:f3:3d:75:99:21:49:
                    50:00:8e:50:08:32:6f:62:48:69:2f:09:a0:d6:24:
                    a9:e6:60:e2:81:8d:c5:4c:29:1b:d0:b9:a2:c8:c6:
                    db:d4:53:d3:4d:a5:36:0c:07:9b:6c:0d:5e:66:74:
                    5d:d6:22:bb:47:c6:33:73:f0:29:eb:44:5b:de:3c:
                    49:23:39:08:e4:ca:1b:b6:c2:01:5f:22:57:be:bb:
                    33:4a:a5:77:a2:58:64:9a:09:52:81:2b:f4:bf:9f:
                    6b:0b:fc:c2:f3:81:20:fa:31:40:e3:b8:bc:2c:09:
                    b0:ba:32:5a:3d:00:b0:d8:1e:f2:89:54:21:a7:60:
                    e0:c7:81:6e:4f:e5:5e:9e:f0:8a:c0:a4:46:59:61:
                    50:24:5e:30:e6:02:c8:0c:5d:77:b0:81:55:34:1e:
                    37:02:40:ad:87:c6:f3:f7:e0:6a:05:f4:7f:76:54:
                    33:27:cf:1c:65:c7:66:db:6e:81:95:10:c0:8e:fd:
                    12:0a:19:ae:9f:53:27:ef:15:23:5e:ca:f6:2b:49:
                    6c:9f:aa:8f:8d:c9:ec:d0:18:6f:6b:86:3e:6f:c6:
                    01:55:a4:81:4a:1f:f3:bd:e5:1f:ce:75:f5:e7:43:
                    c7:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:F9:38:20:27:94:F5:CD:6E:33:90:3D:2A:99:C0:93:61:F1:10:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/7949d224-337e-3f72-9d6d-1106f7aef806.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl

            X509v3 Authority Key Identifier:
                keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.91.136.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:bc:a4:16:ae:88:5f:73:96:0f:82:b4:a0:b0:ee:6e:36:04:
         e0:96:67:bf:e3:1f:32:2a:75:73:f0:88:ee:22:d1:7f:f7:20:
         fc:c9:89:95:08:53:a6:d0:7b:65:1a:94:91:10:78:b7:03:a2:
         09:68:18:51:40:80:e1:21:d4:4a:8c:a9:0f:c3:a2:69:4c:c7:
         e8:79:05:7c:74:3f:fe:7c:57:73:f6:a7:98:2e:1e:02:75:6b:
         bb:9d:ef:a1:ec:9c:23:b3:1b:15:6d:40:be:ef:8e:e7:3c:22:
         3a:89:f4:c7:ef:31:2b:03:42:13:e6:99:f4:90:58:74:2e:fe:
         02:53:d9:6d:6b:fb:d6:c7:12:ed:50:ef:d5:f4:26:a8:fa:5d:
         42:8a:a1:b3:ea:44:9d:f8:a7:9a:52:bc:1a:69:ed:d8:0d:bd:
         08:20:4f:48:51:51:0c:fa:60:e1:81:49:90:64:f8:e1:46:c2:
         9e:91:36:e6:48:16:1b:64:e1:af:6e:16:e6:f9:b4:ae:76:10:
         68:69:cb:35:28:af:b3:ce:66:ce:76:99:fe:c7:c5:18:46:d1:
         22:a0:58:b0:c5:ee:3a:c1:38:95:36:1b:a1:b2:b7:b9:35:8f:
         91:d2:37:ae:90:63:e3:88:92:39:47:7d:de:6b:b1:77:29:35:
         37:86:31:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----