Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/af2283a4-5582-3dee-9ae5-628bce15ed8f.roa
File:                     af2283a4-5582-3dee-9ae5-628bce15ed8f.roa (raw, json)
Hash identifier:          tFQI+kr2ndaDL4/bKUzaabZqZ3MXJSlXUZe7Dfk03Ek=
Subject key identifier:   DB:83:44:24:0D:A2:FC:CA:B5:85:92:0F:7E:1D:B6:22:E7:05:0C:C8
Certificate issuer:       /CN=f63fbc75-bfbc-423c-991c-efb130c5d3df
Certificate serial:       010D0C9F4328583D636C8CC234201ABC6D7BADD0
Authority key identifier: 1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/af2283a4-5582-3dee-9ae5-628bce15ed8f.roa
Signing time:             Wed 23 Mar 2022 04:00:00 +0000
ROA not before:           Wed 23 Mar 2022 04:00:00 +0000
ROA not after:            Tue 23 Mar 2032 04:00:00 +0000
asID:                     36352
IP address blocks:        104.247.120.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 07 Oct 2022 17:20:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:63:6c:8c:c2:34:20:1a:bc:6d:7b:ad:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f63fbc75-bfbc-423c-991c-efb130c5d3df
        Validity
            Not Before: Mar 23 04:00:00 2022 GMT
            Not After : Mar 23 04:00:00 2032 GMT
        Subject: CN=aa0e68bb-3e3b-4fd9-a459-51013b8e1a7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:5d:42:13:83:cd:af:63:d1:77:64:64:98:71:
                    87:e1:ab:fa:24:b2:60:1d:0e:c3:2b:2a:a1:1f:b2:
                    ae:38:80:72:df:1f:7f:70:46:98:59:a2:30:58:ab:
                    a9:5d:ac:10:2e:d1:36:90:7c:94:e2:51:2b:e4:a7:
                    77:0f:a9:c0:e9:05:1a:3b:91:38:9d:4d:c4:5f:08:
                    f2:65:95:38:d2:d7:c4:e0:f2:c3:b6:3b:5d:1e:95:
                    ad:4e:53:69:c4:f6:83:2e:d4:05:a7:7a:67:b3:17:
                    04:1b:24:bb:e2:7d:ee:ee:79:ab:55:2e:61:87:9d:
                    6c:a1:95:e3:50:4c:56:a7:3c:1f:2b:71:d2:bc:22:
                    43:ae:2a:7e:65:45:ec:26:aa:28:8b:f2:19:80:c7:
                    ae:60:cb:99:cc:07:b7:78:8e:3b:63:50:21:06:f6:
                    1c:e2:59:1c:5d:f4:5f:23:39:86:71:98:52:04:16:
                    3e:b9:e5:60:fb:d5:43:9f:c4:14:09:71:16:8b:27:
                    2f:31:ba:ff:17:40:6b:6c:c4:c0:68:63:fe:75:dc:
                    ff:2b:fa:99:16:17:8b:8f:15:b1:77:70:c6:91:a9:
                    fe:d1:aa:f4:bf:6b:a9:95:29:ac:fc:4d:b0:2d:eb:
                    5b:08:85:bd:cb:f8:72:d3:17:39:30:75:30:c2:6b:
                    e8:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:83:44:24:0D:A2:FC:CA:B5:85:92:0F:7E:1D:B6:22:E7:05:0C:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/af2283a4-5582-3dee-9ae5-628bce15ed8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl

            X509v3 Authority Key Identifier:
                keyid:1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.247.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:66:c1:d9:50:c9:b6:b1:a1:dd:c9:b4:ed:cf:12:35:73:e2:
         e6:b5:1f:d8:82:77:1d:32:7f:86:b3:2e:f1:ac:c1:31:51:c4:
         60:ed:cd:88:ec:df:1d:22:1e:34:17:25:02:b8:f0:d4:8e:34:
         8d:64:3b:4e:60:15:8d:e3:d4:81:74:50:73:e5:17:f5:46:cd:
         40:15:b5:61:7f:77:e2:27:7b:e2:10:ec:21:fc:e5:ef:a7:ca:
         93:0f:b0:39:50:84:69:83:65:e0:48:af:8b:de:6c:4e:59:e1:
         b2:75:f3:04:83:f0:0e:c8:46:38:d2:c5:1b:21:df:51:cb:71:
         b5:aa:4c:97:de:66:03:3d:d5:24:a3:7f:a0:9c:ff:9e:d5:1f:
         e3:ed:e9:1a:7b:1d:9a:93:5e:62:21:a2:33:2d:3b:a4:bf:e5:
         84:53:20:e7:e2:36:7c:84:98:ee:3c:74:55:e9:11:95:37:4d:
         cd:2d:ba:91:4c:f7:9c:5b:2f:59:41:c2:0f:1e:3e:e3:b9:c0:
         55:68:d7:6c:af:b5:d9:8a:66:3a:2c:cf:36:15:3a:e0:08:20:
         d3:50:07:6e:8c:d7:ea:fb:c9:bc:5c:bb:c3:4d:73:54:62:7e:
         e1:d9:53:7a:2e:9a:76:44:8d:6d:48:9e:a2:7f:3a:b2:25:54:
         94:21:7b:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:53 2024 by rpki-client on console-ams.rpki-client.org