Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/daba1ed2-52b1-35c3-8e66-0592d4824996.roa
File:                     daba1ed2-52b1-35c3-8e66-0592d4824996.roa (raw, json)
Hash identifier:          +OMj9VMav+FjZ69TKEILmKcHNk8tQgSFHnSn+bou9DI=
Subject key identifier:   5B:F3:D3:EA:9A:73:68:08:D9:52:14:BF:73:96:44:4B:C8:CE:AA:96
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F43285845734DA31594332188EE9CE980
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/daba1ed2-52b1-35c3-8e66-0592d4824996.roa
Signing time:             Sat 06 Apr 2024 01:00:26 +0000
ROA not before:           Sat 06 Apr 2024 01:00:26 +0000
ROA not after:            Fri 05 Jul 2024 01:00:26 +0000
asID:                     23342
IP address blocks:        64.124.218.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Thu 23 May 2024 22:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:73:4d:a3:15:94:33:21:88:ee:9c:e9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Apr  6 01:00:26 2024 GMT
            Not After : Jul  5 01:00:26 2024 GMT
        Subject: CN=b11343aa-71b3-4b1b-90f4-7b7d92ff3c3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:fd:2c:19:28:b4:b6:37:fb:ca:5b:cb:2e:93:
                    f9:dd:99:86:40:7b:59:6f:10:7b:cd:97:09:58:19:
                    26:5d:e9:5a:1f:4f:2b:c3:62:69:41:1e:19:d7:0d:
                    88:c9:cd:ae:92:11:db:75:07:f5:0d:53:62:38:24:
                    7b:d3:76:5f:36:69:90:b4:12:9e:81:cb:86:90:33:
                    cf:34:1b:9c:43:74:83:05:39:9c:07:6f:28:04:cc:
                    63:01:c9:c3:0e:c4:60:c8:9a:16:ed:cb:8d:8f:a1:
                    15:56:2d:0d:b8:8b:a8:f8:d3:de:b0:53:d7:cb:d1:
                    f6:67:e7:0b:3b:c9:29:3b:5b:b1:1c:23:5f:7a:64:
                    3c:b4:b5:e5:a0:eb:cd:c1:6a:a4:f6:13:54:35:8a:
                    38:43:1a:bd:99:87:aa:dd:2e:72:ed:18:07:70:4d:
                    d0:b0:25:34:1a:fa:75:40:18:37:ea:f3:1c:32:b5:
                    06:7d:72:2d:20:20:40:02:b2:72:2f:06:a4:97:f1:
                    e4:47:f4:9c:75:ca:76:23:da:29:46:a1:a8:a0:c0:
                    72:6c:b7:ad:48:2e:78:a9:2a:18:bf:67:1d:20:7f:
                    d7:ab:d5:73:85:8f:7c:bf:da:99:36:f0:40:29:08:
                    28:a3:ee:48:5c:78:9f:e4:94:0c:11:48:98:51:6b:
                    a9:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:F3:D3:EA:9A:73:68:08:D9:52:14:BF:73:96:44:4B:C8:CE:AA:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/daba1ed2-52b1-35c3-8e66-0592d4824996.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.124.218.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:f2:74:70:c4:56:18:12:7a:ea:a3:73:fe:ba:a9:70:28:4e:
         ce:0c:1e:27:03:9a:4c:64:40:f6:e5:e4:08:d7:b4:9a:78:c0:
         81:76:65:fc:79:a1:80:4a:8c:ce:b8:52:49:ab:5e:90:fb:a5:
         7c:82:55:bf:4c:98:3c:75:f4:30:30:02:ab:79:da:51:d3:d1:
         69:31:dd:d9:2c:14:81:28:ce:77:dc:e9:8e:83:50:65:f2:ae:
         49:cd:4f:ba:8b:8b:80:d1:90:8f:60:67:3d:e1:34:7a:04:b7:
         66:88:8b:50:e0:97:eb:71:9f:48:89:10:4d:26:f8:90:9c:5a:
         2f:40:6d:65:f5:7a:e5:63:43:8c:f1:b1:7b:4a:86:4c:fb:a0:
         0f:fe:31:b3:67:41:ec:5c:c0:96:f5:07:ca:21:73:45:48:3b:
         40:c7:e8:0b:44:41:11:dd:e4:5f:99:31:67:94:23:78:1e:d4:
         bc:b8:aa:d7:41:cd:47:f5:c7:bb:ea:4c:c6:41:65:43:db:52:
         dd:a4:21:0c:f2:e9:a3:8f:d8:36:53:32:22:46:2c:a0:b2:05:
         06:93:16:a5:2a:48:9e:16:98:83:c2:99:6c:9a:ee:84:d8:22:
         bf:36:7a:7f:5b:08:04:f0:3d:f0:6a:e2:e5:48:46:ad:85:d9:
         c2:9c:bb:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 23:46:36 2024 by rpki-client on console-fra.rpki-client.org