Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b32df622-e1a5-4db3-ad43-9b54a4586e4f/7d246a6f-2216-326b-ab5e-37fac9947682.roa
File:                     7d246a6f-2216-326b-ab5e-37fac9947682.roa (raw, json)
Hash identifier:          P0jz8jAqcHmTlyWTuyW0gf09pgvsK6mIre6xgNS7RNw=
Subject key identifier:   8E:18:9E:60:FB:26:F3:D9:73:71:3F:B3:01:E1:4A:B7:9C:AA:64:0A
Certificate issuer:       /CN=b32df622-e1a5-4db3-ad43-9b54a4586e4f
Certificate serial:       010D0C9F432858479170651132D282019A221D40
Authority key identifier: B1:65:BC:25:E9:9C:02:29:A8:E2:EF:A3:D5:A7:1F:26:B8:E8:3D:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b32df622-e1a5-4db3-ad43-9b54a4586e4f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b32df622-e1a5-4db3-ad43-9b54a4586e4f/7d246a6f-2216-326b-ab5e-37fac9947682.roa
Signing time:             Thu 17 Oct 2024 05:38:37 +0000
ROA not before:           Thu 17 Oct 2024 05:38:37 +0000
ROA not after:            Wed 15 Jan 2025 06:38:37 +0000
asID:                     7046
IP address blocks:        162.27.158.0/24 maxlen: 24
                          162.27.165.0/24 maxlen: 24
                          162.27.166.0/24 maxlen: 24
                          162.27.169.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 25 Oct 2024 03:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:91:70:65:11:32:d2:82:01:9a:22:1d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b32df622-e1a5-4db3-ad43-9b54a4586e4f
        Validity
            Not Before: Oct 17 05:38:37 2024 GMT
            Not After : Jan 15 06:38:37 2025 GMT
        Subject: CN=9b47e362-ad1f-4969-aff3-5c8112ac5de2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:11:da:ef:2b:5e:ee:f4:8c:35:cd:cf:f1:7d:
                    46:b8:b2:6d:19:00:d5:17:4c:04:3c:8f:87:b1:92:
                    b9:74:bd:d3:0a:a0:b4:85:09:8c:a9:5f:70:1f:e3:
                    5b:68:64:9a:ef:65:04:47:cb:b4:24:8b:f8:be:1c:
                    28:44:11:f2:18:ed:98:b8:90:4b:fb:79:7e:5e:3a:
                    f2:83:ab:66:71:95:88:e1:2f:9f:df:21:c3:6e:ff:
                    72:f3:c1:a3:78:c5:22:74:11:0a:fb:ce:8a:ca:9a:
                    e4:e2:29:3b:85:b9:35:90:c3:c4:0a:d6:4e:d0:59:
                    14:87:37:c1:27:88:34:28:9c:b2:a7:43:fa:17:3f:
                    2b:d4:55:f0:e3:4d:92:a7:40:4b:32:e3:81:4a:1b:
                    3a:73:d4:4e:95:3e:5b:a7:9d:06:4a:1b:04:1e:b5:
                    ea:28:df:27:15:a6:c7:02:de:d9:a8:d0:78:32:1a:
                    83:3e:99:50:c6:8f:39:13:b0:9e:72:d3:4e:19:5d:
                    17:15:00:a6:e9:08:8b:11:ee:f2:5a:23:a0:c2:d5:
                    fe:1c:a0:e4:44:f3:f3:6a:1a:de:4a:04:42:d6:cc:
                    5e:9b:99:58:ba:33:6e:d1:c0:41:ec:37:c5:eb:a6:
                    9f:f7:eb:18:36:73:0c:2b:86:f8:6c:4d:97:e1:13:
                    9b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:18:9E:60:FB:26:F3:D9:73:71:3F:B3:01:E1:4A:B7:9C:AA:64:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b32df622-e1a5-4db3-ad43-9b54a4586e4f/7d246a6f-2216-326b-ab5e-37fac9947682.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b32df622-e1a5-4db3-ad43-9b54a4586e4f/b32df622-e1a5-4db3-ad43-9b54a4586e4f.crl

            X509v3 Authority Key Identifier:
                keyid:B1:65:BC:25:E9:9C:02:29:A8:E2:EF:A3:D5:A7:1F:26:B8:E8:3D:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b32df622-e1a5-4db3-ad43-9b54a4586e4f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.27.158.0/24
                  162.27.165.0-162.27.166.255
                  162.27.169.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:e2:63:47:dd:0a:71:76:0e:c3:e9:a3:bb:91:01:cd:15:c4:
         46:34:89:a9:9e:f3:9d:db:41:d6:06:da:f5:eb:49:5b:29:b4:
         62:75:96:fa:d1:45:a0:0d:8f:0f:68:4e:91:2a:ba:df:bd:60:
         53:53:fb:41:a1:1a:64:17:dd:aa:63:c4:31:49:37:ed:4a:d5:
         18:26:df:65:b2:c5:02:60:c7:86:46:9f:49:2a:2e:d9:5d:9c:
         64:04:b7:62:ea:59:fc:5d:22:9d:70:71:60:b3:ed:c1:bd:bd:
         fd:e0:e6:cf:92:8f:d2:9c:a9:bf:64:cd:a4:0d:ce:3e:72:54:
         42:dc:56:72:70:db:c9:c8:a3:a3:cf:23:5c:e4:11:2d:f5:bf:
         d7:c4:f9:4b:5b:e6:f0:f1:1c:6d:21:b0:f7:6b:cf:cd:da:02:
         46:b4:c8:51:7e:a8:cb:41:48:19:1c:e8:5d:3b:b3:e8:78:bb:
         17:97:a7:4a:41:7c:07:c1:7e:37:8f:8a:c4:1b:0e:87:e9:8b:
         70:5c:60:b4:6d:8d:db:9a:a1:6e:04:8d:ae:b8:3b:17:d1:71:
         d4:00:87:d3:06:db:ad:24:35:6d:45:e4:d8:e5:0e:cf:2f:93:
         77:1f:bc:6c:e6:51:fe:aa:72:2c:9f:2d:f7:d6:b7:24:47:fa:
         84:57:1e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 25 04:48:03 2024 by rpki-client on console-fra.rpki-client.org