Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/1b946b63-4f1d-395b-97cc-699d926ca2d7.roa
File:                     1b946b63-4f1d-395b-97cc-699d926ca2d7.roa (raw, json)
Hash identifier:          DlGsEHZtQELfUs4wMfxHBnaAMR1rLMP+Kt8anYSq3Oc=
Subject key identifier:   23:24:92:73:05:FB:BC:39:67:81:45:65:E3:73:01:5C:3E:74:A1:33
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F432858478FABBAD4AAF9FC0F9AF23C00
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/1b946b63-4f1d-395b-97cc-699d926ca2d7.roa
Signing time:             Wed 16 Oct 2024 14:26:33 +0000
ROA not before:           Wed 16 Oct 2024 14:26:33 +0000
ROA not after:            Tue 14 Jan 2025 15:26:33 +0000
asID:                     81
IP address blocks:        152.26.195.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 08 Nov 2024 15:04:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8f:ab:ba:d4:aa:f9:fc:0f:9a:f2:3c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Oct 16 14:26:33 2024 GMT
            Not After : Jan 14 15:26:33 2025 GMT
        Subject: CN=d4b6c1a6-308a-4d54-b917-0926b3bd2f28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:29:99:db:15:1f:2b:cf:c0:ce:a1:17:a3:5d:
                    7a:02:21:3d:49:5d:40:d5:ea:81:8e:71:5f:d3:8f:
                    a8:f1:c5:28:37:b3:0a:1a:9f:dd:52:d4:5e:ac:83:
                    82:f5:d4:61:79:c3:55:4f:f2:17:2f:0c:5f:01:18:
                    fe:f9:33:09:ce:16:78:b4:6b:86:cd:0f:8e:7e:a8:
                    a3:19:78:a1:f6:51:29:4d:df:6b:1b:26:32:e8:4e:
                    c0:61:97:15:e8:99:3d:4b:18:e4:75:bd:6f:ea:63:
                    b9:1c:9d:40:1c:02:d7:28:3b:da:d3:c0:83:b5:5c:
                    d5:0a:82:45:69:5e:8b:4d:3e:38:94:ca:07:07:0a:
                    dc:3c:f2:d6:3a:b6:eb:ba:65:99:7b:ce:40:7e:5b:
                    b9:ae:94:24:83:d6:34:4e:95:51:d5:71:ae:b7:e5:
                    e1:28:96:85:96:14:ec:d4:86:8a:43:0a:45:3d:80:
                    65:d6:50:6f:a0:08:d6:8b:18:99:21:09:9b:50:42:
                    f4:77:4d:dd:b6:db:9a:66:eb:b2:04:a4:f8:cd:59:
                    c1:03:1f:ed:21:cb:9f:8e:62:ff:e0:67:91:15:03:
                    5e:f1:23:e4:ed:57:74:cd:69:9c:d5:e4:d2:68:83:
                    cb:08:0a:de:1a:60:b5:45:40:65:d1:d9:0c:66:6f:
                    be:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:24:92:73:05:FB:BC:39:67:81:45:65:E3:73:01:5C:3E:74:A1:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/1b946b63-4f1d-395b-97cc-699d926ca2d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.26.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:29:b0:eb:cd:d8:e0:69:6c:21:f7:a0:a0:86:a4:a1:9b:02:
         e4:1b:d0:f5:a5:e6:2f:ee:05:57:aa:72:a1:1a:a7:9c:65:b5:
         e7:c8:4e:1e:6e:02:66:5e:2f:69:9a:db:bc:90:2b:2b:55:b9:
         40:c5:df:93:99:2c:82:36:c4:11:ad:f3:cd:f7:95:25:a3:4b:
         73:90:a4:2a:a6:07:cf:0a:2a:e0:d8:96:57:52:ae:57:c7:75:
         61:d4:ad:aa:8e:cf:aa:2d:db:02:e2:72:0f:5e:12:77:92:4e:
         88:91:38:21:77:3e:43:6f:86:b1:01:1d:0f:66:24:a0:e8:7a:
         14:48:b6:0d:46:28:b9:9f:7e:93:72:9c:59:40:e8:5e:78:2e:
         2a:98:18:e2:ea:f3:28:ad:04:09:93:29:8f:05:98:c3:d2:0d:
         24:fe:79:66:b8:d6:ee:73:91:7d:4b:b0:65:d4:fc:ce:7d:35:
         da:a9:2c:5b:68:d9:d3:d3:13:0c:46:32:3b:87:ba:4d:23:50:
         02:7f:c3:67:ff:c5:0d:7b:1c:1b:5e:f4:4a:1a:6a:f2:b0:f5:
         b9:0d:15:53:69:79:24:c0:4d:9f:81:34:de:2a:d4:6d:20:dd:
         b1:6b:23:a7:c4:8e:14:b1:2a:74:1d:03:a1:9a:a5:7a:db:78:
         82:63:27:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 8 19:11:57 2024 by rpki-client on console-ams.rpki-client.org