Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/8c69dbe7-7e69-34aa-bb14-de894bac6f09.roa
File:                     8c69dbe7-7e69-34aa-bb14-de894bac6f09.roa (raw, json)
Hash identifier:          2KlKNyO4+DKYKG1ue+XDGd5+qQCgYOrJixX5fd1FxCI=
Subject key identifier:   83:28:ED:76:86:DA:C1:95:41:A7:7B:23:45:73:51:F2:06:BF:14:F7
Certificate issuer:       /CN=da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4
Certificate serial:       010D0C9F432858479362D436090E03A6C7808780
Authority key identifier: B1:AB:4F:F6:34:69:7B:5B:ED:E2:5D:45:30:00:14:37:65:25:14:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/8c69dbe7-7e69-34aa-bb14-de894bac6f09.roa
Signing time:             Thu 17 Oct 2024 22:22:54 +0000
ROA not before:           Thu 17 Oct 2024 22:22:54 +0000
ROA not after:            Wed 15 Jan 2025 23:22:54 +0000
asID:                     16509
IP address blocks:        192.157.36.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Thu 24 Oct 2024 21:56:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:93:62:d4:36:09:0e:03:a6:c7:80:87:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4
        Validity
            Not Before: Oct 17 22:22:54 2024 GMT
            Not After : Jan 15 23:22:54 2025 GMT
        Subject: CN=c628ea86-662e-46a4-a5f6-d5df1d83ef68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f6:b2:fa:08:32:5b:71:78:1c:f9:7f:06:f2:
                    a4:82:f4:a6:9d:de:af:26:d2:a8:36:b0:c1:f9:c7:
                    54:dc:d7:38:8b:af:64:ab:09:2e:59:04:71:b7:b3:
                    eb:0e:c9:c5:e5:8b:ea:ab:01:80:4f:24:40:5a:32:
                    9b:a6:0b:26:e9:dd:6c:a0:34:97:22:24:f2:c3:2a:
                    a6:d7:3b:3f:c4:44:61:c5:c1:45:f2:c4:e8:59:67:
                    f6:2d:eb:f3:b3:3b:6f:42:65:89:64:a8:3d:34:06:
                    d3:bf:ab:ef:5b:8d:ae:e7:5f:18:a7:32:7b:1b:25:
                    77:1a:3d:6c:34:f3:33:1e:ad:1b:51:d0:d8:27:24:
                    8f:a2:b2:97:86:c2:03:2e:14:27:0c:2c:85:58:8d:
                    6a:79:9b:17:d1:97:91:29:77:35:15:26:5b:d9:92:
                    fd:29:7d:fb:d5:e4:80:21:91:48:74:1f:87:06:0f:
                    56:a3:d6:81:8a:96:e5:55:9d:e5:25:68:26:c6:b8:
                    1a:71:79:c8:20:dd:09:ff:5b:f5:70:f4:5d:05:f9:
                    b0:ad:e1:d6:81:12:93:25:5e:48:3e:1f:cf:b1:02:
                    c1:c6:33:be:ee:b9:60:17:89:cb:c9:e3:30:2a:d4:
                    11:4b:62:c0:fe:0e:9e:ff:dc:57:9c:c4:33:48:62:
                    19:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:28:ED:76:86:DA:C1:95:41:A7:7B:23:45:73:51:F2:06:BF:14:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/8c69dbe7-7e69-34aa-bb14-de894bac6f09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.crl

            X509v3 Authority Key Identifier:
                keyid:B1:AB:4F:F6:34:69:7B:5B:ED:E2:5D:45:30:00:14:37:65:25:14:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da1d15fe-94e9-4aeb-93c7-d481b3c2f1a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.157.36.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:d0:8d:8a:01:57:1a:00:ec:d1:c2:90:06:bf:95:ec:1c:7f:
         07:37:09:ff:61:42:fb:a2:11:30:65:4c:54:5f:9d:9a:51:9a:
         fc:ad:82:34:ba:6a:c6:3e:13:33:10:61:c9:ab:e9:7e:84:78:
         c7:5f:99:d4:86:21:74:21:57:36:2f:ea:b5:56:ac:b4:09:ea:
         74:f0:c1:25:1b:ae:60:84:7a:78:f4:b7:90:16:97:33:bd:d3:
         22:19:8c:37:1d:b4:29:88:3e:4c:4e:d1:52:ec:9d:9c:4e:c5:
         b0:a3:eb:e1:55:02:c4:15:e6:da:d6:75:7e:91:18:e2:9d:10:
         6c:7e:e1:07:7a:24:bb:89:b7:2c:9b:f2:57:f5:1f:00:6d:6b:
         80:94:4f:5c:76:d7:17:77:b8:a3:23:66:65:5a:e4:7f:b6:52:
         fa:0e:2a:b5:97:3f:92:c8:64:46:39:c9:94:cf:d1:05:13:2a:
         cc:75:20:1b:53:ee:98:73:85:22:e2:df:07:eb:13:aa:03:e0:
         a9:79:b9:de:de:e6:f3:62:25:b7:76:fa:47:05:65:0c:96:66:
         17:65:f1:1f:14:b5:89:e7:ec:81:de:4a:27:60:34:f7:06:99:
         f2:37:5b:79:f4:dc:97:7f:2b:a5:46:30:b0:bb:ed:28:f6:5d:
         7f:ff:93:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 24 23:46:41 2024 by rpki-client on console-fra.rpki-client.org