Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/2c2cdfe7-b5a8-3ad3-bd3d-74695812b06f.roa
File:                     2c2cdfe7-b5a8-3ad3-bd3d-74695812b06f.roa (raw, json)
Hash identifier:          uyZBfnYK1Ccm3Fs+hlOvC4Oi8Bga8zUhyhalnIc19vc=
Subject key identifier:   0B:5F:C8:D6:77:DB:9F:26:06:DC:2A:2E:14:67:0C:CF:B2:59:F1:00
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F432858449385AF5F122B0829BD6D9A00
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/2c2cdfe7-b5a8-3ad3-bd3d-74695812b06f.roa
Signing time:             Tue 16 Jan 2024 21:12:19 +0000
ROA not before:           Tue 16 Jan 2024 21:12:19 +0000
ROA not after:            Mon 15 Apr 2024 20:12:19 +0000
asID:                     33027
IP address blocks:        64.125.219.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 02 Feb 2024 17:47:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:93:85:af:5f:12:2b:08:29:bd:6d:9a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Jan 16 21:12:19 2024 GMT
            Not After : Apr 15 20:12:19 2024 GMT
        Subject: CN=66a44d80-16d1-40e7-be9e-c8edbdacafbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e0:e1:7d:d6:5d:7f:69:62:8d:0e:20:84:e1:
                    44:6f:1b:b2:3d:bf:4d:11:33:4b:3c:93:a4:be:87:
                    77:00:41:b2:48:15:39:51:1a:6b:03:ac:ea:da:f8:
                    13:6a:6d:a4:9f:fb:c2:9f:5d:37:9b:0c:63:5d:3c:
                    06:e6:24:8d:a8:26:83:b5:5c:3f:d4:89:44:3d:44:
                    d3:15:b2:87:67:2d:29:56:ba:3f:7f:01:ec:86:8b:
                    60:73:c9:fd:e3:88:a3:38:f6:0d:c6:82:df:61:b9:
                    26:af:0a:d8:ed:da:26:d7:4a:be:81:37:bb:ac:81:
                    e0:cc:ed:34:b9:28:66:7f:15:77:c7:a6:c6:26:f4:
                    3b:53:a9:90:5c:50:0f:e4:94:3d:e0:4e:ce:a4:87:
                    18:80:b1:c1:6b:26:1f:86:ef:77:d3:e2:84:b1:77:
                    a5:14:34:13:37:96:54:43:92:b7:7a:ab:d7:88:aa:
                    c4:52:a4:fa:68:fb:c0:41:86:b3:43:41:22:59:50:
                    38:ed:46:1b:0f:20:f6:fb:4a:f4:87:24:47:11:22:
                    a3:3c:92:46:b9:68:2f:f0:e5:8f:fd:37:a0:e8:90:
                    37:bd:45:92:9d:80:e2:bc:7b:73:77:6d:bb:96:92:
                    2a:62:b9:ec:7b:e8:9b:f9:93:75:3c:5a:de:fd:c0:
                    e7:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:5F:C8:D6:77:DB:9F:26:06:DC:2A:2E:14:67:0C:CF:B2:59:F1:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/2c2cdfe7-b5a8-3ad3-bd3d-74695812b06f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.125.219.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:3f:ff:da:95:ea:94:f3:5d:4a:4a:bd:91:3c:c2:4e:58:48:
         b2:05:3b:1b:eb:38:59:1e:6f:6a:f7:65:71:29:7a:2f:c8:d0:
         68:9b:e0:3a:f4:0f:d4:97:f5:ef:6a:97:46:c6:86:a8:d1:8c:
         21:69:26:4b:77:d3:9a:2c:41:41:2e:b9:c8:31:89:88:75:1a:
         c2:bb:fb:d1:36:3c:62:96:55:bd:1b:f1:dc:33:a9:3c:fc:25:
         17:cb:02:b1:21:c4:c7:12:95:c6:02:30:42:3c:d8:c1:56:08:
         5a:c3:0e:11:d2:f1:c2:17:a5:ef:1e:a9:9f:7b:f8:95:9e:45:
         53:67:7f:c7:e5:1c:9c:29:b7:a2:3e:f2:bd:31:c6:d1:4e:df:
         32:f2:5a:a2:ac:d2:05:8b:fc:68:80:4e:5f:78:9f:12:fe:0b:
         52:f5:5b:85:a4:e8:42:ad:85:5e:2e:a0:92:bd:ac:70:48:fc:
         e5:fa:4e:3a:d0:d2:3f:f7:ea:62:2e:d1:2e:d0:13:a3:5d:5c:
         ca:6a:32:4a:da:28:4a:eb:39:dc:18:72:3c:3c:1b:97:40:a9:
         b4:4b:90:48:25:cc:9f:56:88:17:52:3c:41:84:59:26:2b:23:
         55:04:00:f9:cf:3d:07:fe:94:ea:63:85:84:98:cb:cf:f6:ca:
         06:7e:59:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 2 20:35:37 2024 by rpki-client on console-ams.rpki-client.org