Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d60903a0-a127-4c7f-a403-6a3d8817015e/8ab4e8a5-cc30-3d5c-8fd4-c9b009f45daf.roa
File:                     8ab4e8a5-cc30-3d5c-8fd4-c9b009f45daf.roa (raw, json)
Hash identifier:          XWjE+ZuVe7S0d9/jnjhQE6tRFIiXSvGxjVGu2sqU7j4=
Subject key identifier:   2F:72:3E:34:40:41:97:19:ED:58:F6:7D:41:63:02:73:F5:31:46:04
Certificate issuer:       /CN=d60903a0-a127-4c7f-a403-6a3d8817015e
Certificate serial:       010D0C9F4328583D1D7BEA726E1F839470FD3F80
Authority key identifier: 77:C6:31:25:81:55:C6:3D:F0:8D:84:3E:C9:90:3D:76:D6:CB:B7:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d60903a0-a127-4c7f-a403-6a3d8817015e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d60903a0-a127-4c7f-a403-6a3d8817015e/8ab4e8a5-cc30-3d5c-8fd4-c9b009f45daf.roa
Signing time:             Thu 03 Mar 2022 05:00:00 +0000
ROA not before:           Thu 03 Mar 2022 05:00:00 +0000
ROA not after:            Sun 30 Jun 2024 04:00:00 +0000
asID:                     6128
IP address blocks:        192.148.104.0/24 maxlen: 24
                          2620:121:6000::/44 maxlen: 44

Validation:               Failed, certificate revoked on Thu 03 Mar 2022 18:52:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:1d:7b:ea:72:6e:1f:83:94:70:fd:3f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d60903a0-a127-4c7f-a403-6a3d8817015e
        Validity
            Not Before: Mar  3 05:00:00 2022 GMT
            Not After : Jun 30 04:00:00 2024 GMT
        Subject: CN=2544d21c-d403-492e-8e87-d1c25ba90168
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:e4:86:da:71:99:3b:35:de:e4:c8:61:b4:5e:
                    d9:f4:fe:cc:f2:2b:d7:04:7a:f5:7f:27:e3:dd:5f:
                    1b:ac:6f:6c:69:e7:b4:50:a0:dc:de:de:4c:87:0e:
                    e5:1b:af:69:ba:63:8c:95:f9:07:a6:c2:91:e9:db:
                    e4:82:56:c5:74:40:01:f0:a9:e1:db:39:57:ab:de:
                    f8:47:c7:35:d9:ce:3d:6e:b2:ae:1a:04:9a:12:d9:
                    24:6d:db:3c:b6:ac:f0:8e:90:16:f1:48:b1:4f:0b:
                    a9:0b:a4:00:db:d8:c7:92:85:5d:e3:f7:91:98:d2:
                    b6:88:32:4c:c1:f7:08:43:76:14:da:9c:25:d2:df:
                    f1:04:b4:49:df:ed:f0:fa:5c:d7:89:1c:38:41:cb:
                    d9:78:98:67:e3:f8:4b:cc:bb:1e:2f:65:f0:00:b7:
                    8b:bc:d5:94:f9:90:e9:45:10:2f:db:f5:a6:c5:4c:
                    f7:c8:59:e4:8e:56:1f:a7:66:e2:3e:f7:34:7d:96:
                    6e:f2:d7:28:50:cf:50:c9:91:fa:35:f3:e5:9f:a1:
                    35:f0:e8:84:38:ad:c5:6f:63:95:9a:4d:da:04:2b:
                    83:dc:a5:9f:4d:ba:18:10:2c:d7:b7:9c:93:7b:bd:
                    28:1e:23:b5:95:74:f0:a4:be:2d:bf:ad:5e:fe:c1:
                    04:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:72:3E:34:40:41:97:19:ED:58:F6:7D:41:63:02:73:F5:31:46:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d60903a0-a127-4c7f-a403-6a3d8817015e/8ab4e8a5-cc30-3d5c-8fd4-c9b009f45daf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d60903a0-a127-4c7f-a403-6a3d8817015e/d60903a0-a127-4c7f-a403-6a3d8817015e.crl

            X509v3 Authority Key Identifier:
                keyid:77:C6:31:25:81:55:C6:3D:F0:8D:84:3E:C9:90:3D:76:D6:CB:B7:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d60903a0-a127-4c7f-a403-6a3d8817015e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.148.104.0/24
                IPv6:
                  2620:121:6000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:5b:68:1e:bf:a5:da:fb:ee:68:95:12:bc:f4:f6:b6:1a:7e:
         f3:09:7f:a7:cd:d2:b8:45:6e:b7:e5:37:ad:1a:c9:f6:1c:5f:
         17:7e:a4:97:75:cd:4b:7f:27:a0:4e:10:22:db:e1:dc:83:91:
         08:1f:6c:f6:cf:f9:7c:e0:8e:de:4e:b0:21:ca:47:99:58:c8:
         81:67:66:3d:d6:4f:05:93:32:99:e6:08:1c:0c:81:8f:64:8a:
         87:e5:fe:c0:b1:97:eb:b9:95:00:03:77:c4:35:52:56:cc:d0:
         3c:36:22:8e:ac:f0:ec:4a:60:14:69:28:ab:af:5a:11:46:98:
         ec:b6:0d:91:43:ec:2d:66:48:d6:21:55:8e:19:93:4a:64:f2:
         a1:94:0a:93:d4:32:2c:9c:b0:70:ad:14:55:a7:7b:fc:f7:32:
         b9:a5:29:ac:7a:a5:df:4c:38:bb:43:d8:50:0a:7f:b1:5a:e5:
         11:f3:23:2b:97:4a:fb:ee:89:96:bc:91:24:8b:ca:f3:d2:71:
         7d:03:d8:75:f7:ba:aa:eb:8f:bc:b1:89:eb:b9:9a:b2:bd:d0:
         b2:31:ed:66:97:da:7c:0d:53:7d:ee:79:12:71:ce:cf:36:34:
         3b:3d:39:36:cd:2b:6f:61:4a:03:e3:62:c1:e7:a1:51:21:3e:
         9c:db:d3:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:51 2024 by rpki-client on console-ams.rpki-client.org