Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff/3465a6e4-39c2-321c-84d3-406ee0718b2a.roa
File:                     3465a6e4-39c2-321c-84d3-406ee0718b2a.roa (raw, json)
Hash identifier:          lMJUsk1nl8ENj9dwHSe5D7aRFUm7sVxZdlPJQYejr00=
Subject key identifier:   C3:A6:09:A0:7E:4A:3F:16:A8:8B:F5:56:16:50:11:E3:4C:D3:F0:F5
Certificate issuer:       /CN=19039935-462a-4b14-8e96-78798283eeff
Certificate serial:       010D0C9F43285846AEC502F9B38D569F4AF0E000
Authority key identifier: 30:22:9F:74:A3:6B:C2:DA:A9:66:40:08:D1:CC:3C:53:90:DF:DE:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff/3465a6e4-39c2-321c-84d3-406ee0718b2a.roa
Signing time:             Sun 28 Jul 2024 01:00:28 +0000
ROA not before:           Sun 28 Jul 2024 01:00:28 +0000
ROA not after:            Sat 26 Oct 2024 01:00:28 +0000
asID:                     53356
IP address blocks:        167.253.36.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Wed 21 Aug 2024 11:54:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:ae:c5:02:f9:b3:8d:56:9f:4a:f0:e0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19039935-462a-4b14-8e96-78798283eeff
        Validity
            Not Before: Jul 28 01:00:28 2024 GMT
            Not After : Oct 26 01:00:28 2024 GMT
        Subject: CN=1ef7847e-3ed0-4c7b-93e6-1b3af7cf9b44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a0:19:a5:72:d4:65:2f:06:2a:2c:76:91:c5:
                    15:70:9f:fb:04:6e:c5:4f:69:b6:54:6b:67:41:90:
                    d0:e5:ed:dd:d3:e5:06:19:56:bb:0c:c3:c7:00:3b:
                    07:8d:05:5b:33:95:11:3c:ac:43:0e:41:25:56:e8:
                    86:eb:af:bb:d8:62:ef:35:fd:1c:12:88:f6:29:b4:
                    4a:56:97:74:5c:7b:99:c8:40:d5:79:f9:1f:18:10:
                    aa:b9:ef:c6:3e:b7:1d:15:1f:88:d3:72:f1:9b:55:
                    f2:35:9b:1f:07:ee:17:60:95:88:78:57:7a:30:9c:
                    40:ec:6e:70:52:7e:dd:dd:e5:e2:cd:5d:ad:a5:d6:
                    44:42:41:6c:31:e8:6f:6d:73:08:70:74:a2:ef:50:
                    8f:d5:57:de:cb:1e:27:9e:6e:8b:5f:82:13:59:1a:
                    8e:4c:be:41:35:da:71:af:72:fd:8b:78:ec:57:44:
                    5b:40:73:9d:89:46:db:88:fc:e4:14:ec:26:df:dc:
                    38:6e:ab:6b:20:cb:d7:61:39:54:9c:c1:0e:79:6b:
                    d8:e4:7b:56:8f:ee:2f:f5:21:cb:46:19:74:90:e6:
                    44:24:31:cd:f8:f5:b1:01:6c:59:ec:89:62:b8:83:
                    f0:3c:07:65:82:f6:cf:f8:e8:29:ce:a9:b6:ed:07:
                    5a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:A6:09:A0:7E:4A:3F:16:A8:8B:F5:56:16:50:11:E3:4C:D3:F0:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff/3465a6e4-39c2-321c-84d3-406ee0718b2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff/19039935-462a-4b14-8e96-78798283eeff.crl

            X509v3 Authority Key Identifier:
                keyid:30:22:9F:74:A3:6B:C2:DA:A9:66:40:08:D1:CC:3C:53:90:DF:DE:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/19039935-462a-4b14-8e96-78798283eeff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.253.36.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:8b:a7:a1:e0:68:74:27:b7:31:d7:20:1f:40:ce:2f:c9:06:
         79:dd:88:38:c3:29:bd:85:4f:7f:0b:b7:5d:cc:2c:39:fb:3d:
         9a:c4:04:7b:df:b3:ff:87:f8:23:bb:c4:48:c6:2f:84:38:79:
         ec:e5:98:3e:ed:f3:fc:89:04:cc:ce:9b:73:65:9a:2f:61:20:
         b7:e8:0e:57:e7:f8:a6:c6:95:3f:87:26:fa:3e:95:0c:c3:77:
         82:b5:96:f9:e0:36:31:d6:9b:c1:54:30:29:ff:51:6a:c0:a5:
         8d:e4:f7:03:0b:c9:71:81:59:fe:c4:f4:df:bc:e4:27:c9:58:
         d3:c1:59:36:4a:9d:77:71:25:c5:1c:f9:65:1a:f6:a5:fc:4a:
         57:a9:2c:1a:95:b4:17:14:31:bf:49:d8:b2:2d:6e:53:eb:0a:
         98:cf:02:c4:1b:b6:df:7c:ca:c4:6d:c8:72:6e:44:0c:70:6b:
         c1:ba:9c:90:e2:f1:9c:42:0c:00:0a:94:5f:50:00:cb:0a:df:
         fa:ca:be:53:0d:6a:50:b5:d7:05:69:49:3b:8e:e5:c9:53:88:
         f3:20:fc:ca:8f:e1:68:71:cc:30:7b:74:25:ae:ea:2b:32:fc:
         10:42:73:af:07:80:a7:fe:7d:16:32:ec:84:89:06:49:90:4a:
         d6:f8:b6:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 21 16:34:19 2024 by rpki-client on console-fra.rpki-client.org