Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89f4d634-a4d7-3ad5-93fe-e9611f8a1a15.roa
File:                     89f4d634-a4d7-3ad5-93fe-e9611f8a1a15.roa (raw, json)
Hash identifier:          E9R1st/jlI4KeOA9x46k3Qk1iteL+tS8VdlngBTJhHk=
Subject key identifier:   8A:C7:B1:AD:2E:B7:B0:4B:90:5E:1C:7A:1C:C8:7C:76:8A:1A:19:CD
Certificate issuer:       /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial:       010D0C9F4328584680B4E03EFF25EE569374FF80
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89f4d634-a4d7-3ad5-93fe-e9611f8a1a15.roa
Signing time:             Thu 11 Jul 2024 13:00:34 +0000
ROA not before:           Thu 11 Jul 2024 13:00:34 +0000
ROA not after:            Wed 09 Oct 2024 13:00:34 +0000
asID:                     16839
IP address blocks:        149.96.112.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Fri 13 Sep 2024 06:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:80:b4:e0:3e:ff:25:ee:56:93:74:ff:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
        Validity
            Not Before: Jul 11 13:00:34 2024 GMT
            Not After : Oct  9 13:00:34 2024 GMT
        Subject: CN=8acdbe80-80c9-421e-a83e-255b83d5977a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d6:2e:50:76:b6:ef:70:64:5c:05:a7:94:7a:
                    0b:1d:90:47:b0:ae:03:be:3b:31:5d:65:e6:bf:bd:
                    da:6e:54:52:14:8e:aa:a5:74:72:c3:97:6f:e1:86:
                    a3:fe:de:da:82:63:c1:4b:96:da:f3:88:21:2c:e2:
                    87:2a:6e:37:f9:49:dd:d9:f3:df:ac:78:1b:f1:db:
                    b3:6a:d3:09:fb:45:21:e9:2d:df:99:52:5b:b0:d8:
                    64:1a:ec:0a:b9:ea:b4:67:07:5e:cd:da:d7:a9:52:
                    35:a8:d4:ab:75:95:37:2e:37:c3:d3:d9:d9:63:dc:
                    e7:3f:ad:7c:14:52:80:95:b1:89:14:5a:88:71:db:
                    73:b1:ef:b2:c9:a9:fc:4c:5e:35:bf:d0:7e:4f:69:
                    65:e3:b5:ee:26:bd:fd:ce:75:21:54:e7:89:1f:1f:
                    c4:88:d0:d2:74:ee:60:e2:8d:3f:00:e9:31:5e:73:
                    43:bb:be:00:f3:c2:f5:71:e8:ac:a4:12:93:ed:a0:
                    d4:9c:b1:db:16:c8:42:b5:ee:0e:52:15:92:b2:9b:
                    ba:bf:7d:9e:f8:97:75:38:b0:c6:3d:7e:16:35:c7:
                    27:dc:b6:0f:bc:d3:ba:e4:1b:0c:69:ba:cf:f3:78:
                    40:5e:3b:c7:f8:2c:4e:31:2f:19:4c:6f:d1:54:07:
                    bd:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:C7:B1:AD:2E:B7:B0:4B:90:5E:1C:7A:1C:C8:7C:76:8A:1A:19:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89f4d634-a4d7-3ad5-93fe-e9611f8a1a15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl

            X509v3 Authority Key Identifier:
                keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.96.112.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:83:fd:d2:40:aa:e4:3a:a0:9a:ff:53:03:0b:73:ea:43:4b:
         d7:71:5a:f2:c1:f0:a8:83:c9:80:29:ac:69:56:9f:d4:3c:26:
         ba:51:65:2e:6e:7e:85:66:3e:89:9d:5c:56:b1:12:8d:a8:1b:
         72:50:18:11:b1:ec:88:92:1b:5d:62:62:cb:96:6e:59:93:32:
         8d:f1:36:2b:ce:32:98:67:77:10:93:a4:db:bf:c2:c8:99:35:
         34:f0:fb:3b:c4:3b:37:51:9e:50:e2:24:83:6b:06:99:c2:4d:
         20:90:c5:d0:e3:e4:54:ed:d5:5a:e4:cf:1c:87:fc:3f:ef:e8:
         19:79:72:ec:4f:20:4a:25:1a:6b:3a:78:b9:3e:de:4e:e5:3b:
         46:9f:52:f0:88:0d:3c:70:df:c8:da:21:24:73:03:9c:6c:32:
         c7:6d:3e:20:52:10:00:54:58:d3:de:60:ee:85:5e:da:0d:f2:
         3e:04:74:50:ed:da:09:e5:9a:c7:1a:b1:f1:bd:4c:e8:87:9c:
         59:9d:a6:87:a8:e6:1b:e6:e9:0a:ab:f2:99:7c:14:5b:84:dc:
         ef:b7:53:04:d6:95:24:c2:12:bc:91:f0:4b:90:e8:36:a2:2c:
         26:18:ad:c1:6e:7c:bc:d9:11:67:43:64:d1:d0:0b:b2:c1:00:
         d6:cd:f8:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 13 07:27:04 2024 by rpki-client on console-fra.rpki-client.org