Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4/35ee0a1d-da18-34d1-838f-c5798da92eff.roa
File:                     35ee0a1d-da18-34d1-838f-c5798da92eff.roa (raw, json)
Hash identifier:          4b+lFWqQUzn0VHB5eEC3pJlanbh4kdKQVDpIG7DhKz0=
Subject key identifier:   2A:3A:C2:3E:07:1F:8F:6A:97:78:50:FB:B0:61:BC:5C:39:C9:08:B1
Certificate issuer:       /CN=a2b83ae7-52b6-45b4-92c9-c12f7bb009f4
Certificate serial:       010D0C9F43285846AD5FBF54BCF7EEFD329CFF80
Authority key identifier: 19:0C:93:71:9D:2F:15:4D:BE:12:71:AC:B5:BC:75:C8:03:28:0E:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4/35ee0a1d-da18-34d1-838f-c5798da92eff.roa
Signing time:             Sat 27 Jul 2024 13:00:38 +0000
ROA not before:           Sat 27 Jul 2024 13:00:38 +0000
ROA not after:            Fri 25 Oct 2024 13:00:38 +0000
asID:                     400422
IP address blocks:        134.65.198.0/24 maxlen: 24
                          134.65.199.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 06 Sep 2024 16:56:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:ad:5f:bf:54:bc:f7:ee:fd:32:9c:ff:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2b83ae7-52b6-45b4-92c9-c12f7bb009f4
        Validity
            Not Before: Jul 27 13:00:38 2024 GMT
            Not After : Oct 25 13:00:38 2024 GMT
        Subject: CN=f6a1b4b8-3446-44c0-bb64-de1306dcad2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:72:b7:5c:25:e7:09:07:5c:2d:31:2a:85:cc:
                    52:a3:1f:f4:b4:e9:df:7a:87:7d:c0:f6:89:1b:da:
                    01:32:e1:4d:49:5b:c9:51:72:5e:d8:4e:d5:a3:fb:
                    66:98:0c:17:da:28:60:1d:71:23:98:7b:88:c7:4d:
                    39:46:54:4a:8e:53:03:dd:a0:0c:f0:1f:32:5b:b5:
                    5c:a7:cb:ba:4e:a8:a1:9f:82:6f:17:a7:33:12:17:
                    ae:36:33:3d:9c:02:97:6d:90:0b:30:81:52:2d:c8:
                    d6:a1:df:6b:0f:ed:d7:77:15:8a:48:b0:45:5d:df:
                    2b:54:de:81:8e:cc:72:bb:a6:6b:b4:3e:fe:a8:8d:
                    32:a9:9c:59:11:73:3f:e8:68:0e:60:36:90:ec:d3:
                    87:6d:ce:b6:73:05:cd:2e:f5:7d:ec:e5:f9:54:5c:
                    13:e5:50:4a:2b:b3:2e:5e:1b:cc:73:9b:3b:c6:cb:
                    e3:7f:5f:db:51:6a:fa:4a:eb:f1:e5:3e:da:ec:17:
                    18:c2:32:21:cd:e4:91:e1:01:23:b8:1f:32:d6:84:
                    19:6b:d0:06:ee:3c:10:6b:b6:06:f1:0a:8b:06:57:
                    fd:35:3e:f6:1d:23:cc:ac:19:a9:40:a2:7a:79:54:
                    1e:22:8a:07:79:c6:8f:e8:c1:e1:55:c4:f3:87:e4:
                    73:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:3A:C2:3E:07:1F:8F:6A:97:78:50:FB:B0:61:BC:5C:39:C9:08:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4/35ee0a1d-da18-34d1-838f-c5798da92eff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4.crl

            X509v3 Authority Key Identifier:
                keyid:19:0C:93:71:9D:2F:15:4D:BE:12:71:AC:B5:BC:75:C8:03:28:0E:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.65.198.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:18:e8:f0:c2:2f:a3:79:3c:ae:e9:8f:21:70:e2:c5:f3:95:
         7c:43:cf:b0:be:c1:42:4b:8e:be:0d:dd:0a:6b:23:78:ad:53:
         05:f5:ce:fa:a8:f3:64:18:c7:8b:bc:e8:13:29:c6:2b:25:44:
         b5:1e:2f:68:43:72:4f:26:ff:b1:92:22:e8:83:e9:7c:bc:35:
         d3:a4:bf:6d:a0:91:86:1e:6f:d0:8f:69:49:f2:1e:bf:ad:50:
         a3:5f:00:c4:d4:e8:2c:04:9f:2a:13:22:50:79:db:a1:7e:c9:
         99:2c:c4:51:69:a8:67:e7:f9:0f:51:c3:92:9d:1e:da:10:67:
         75:7d:b2:f6:91:cb:fa:76:d4:1d:0e:cc:15:f2:90:a2:fc:e4:
         9d:49:34:6e:76:19:e2:86:ad:da:08:2c:5d:e3:d0:ca:7f:2c:
         cc:1d:af:84:d3:10:bc:1e:b2:68:c9:45:15:de:5f:94:76:3e:
         aa:4e:cc:fc:9a:18:e9:51:6d:f7:2c:6a:22:1f:12:fb:a4:41:
         62:48:61:a6:eb:98:b4:e6:b4:15:39:b6:86:47:e6:1d:ae:8c:
         56:cb:9b:6d:18:c6:da:44:8a:bb:b8:f7:04:f4:93:60:8a:36:
         75:d9:f5:d7:e2:d0:26:f5:a0:fc:37:cf:e2:bc:67:ec:7b:47:
         34:0f:85:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 6 18:41:18 2024 by rpki-client on console-fra.rpki-client.org