Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2977dd84-2e60-4aa2-8c59-ffc1b7659b9e/3bfab33e-8e0c-3834-928a-36647f762218.roa
File:                     3bfab33e-8e0c-3834-928a-36647f762218.roa (raw, json)
Hash identifier:          HJF109ScWJ/QXejvVCzaPmOcuVCbjZrYy4bbDS0tA+c=
Subject key identifier:   AD:C8:AD:DE:AA:6C:AF:6B:9D:12:08:34:93:2F:59:F0:19:24:E2:45
Certificate issuer:       /CN=2977dd84-2e60-4aa2-8c59-ffc1b7659b9e
Certificate serial:       010D0C9F4328584664A4A23017FB54CD23B66F80
Authority key identifier: B9:C8:33:74:1F:B6:EE:54:E5:CF:25:08:38:2F:48:86:0A:4A:99:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2977dd84-2e60-4aa2-8c59-ffc1b7659b9e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2977dd84-2e60-4aa2-8c59-ffc1b7659b9e/3bfab33e-8e0c-3834-928a-36647f762218.roa
Signing time:             Mon 01 Jul 2024 11:45:34 +0000
ROA not before:           Mon 01 Jul 2024 11:45:34 +0000
ROA not after:            Sun 29 Sep 2024 11:45:34 +0000
asID:                     14618
IP address blocks:        198.204.192.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Fri 16 Aug 2024 12:24:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:64:a4:a2:30:17:fb:54:cd:23:b6:6f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2977dd84-2e60-4aa2-8c59-ffc1b7659b9e
        Validity
            Not Before: Jul  1 11:45:34 2024 GMT
            Not After : Sep 29 11:45:34 2024 GMT
        Subject: CN=d83169d6-296f-439c-9c4c-d2fb762084ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:73:6e:d2:99:5d:69:20:a8:96:4f:b2:36:76:
                    03:ab:da:d9:de:87:d6:b3:9b:7f:33:80:fb:d8:fa:
                    1c:25:6d:d2:01:3c:76:0e:ba:4a:6a:f4:96:65:c3:
                    0a:60:09:fc:32:a8:98:8d:02:56:4b:8c:ee:ea:8a:
                    c8:d7:fa:b7:7e:bd:2b:5b:89:6d:8d:ae:ce:55:ca:
                    b7:ba:7e:76:ae:9d:da:30:62:1b:0f:f5:46:17:b3:
                    c0:73:bf:4d:c0:f7:38:7b:ef:da:73:e6:b3:72:f6:
                    65:76:28:b5:39:d3:18:25:0b:62:41:54:08:74:e6:
                    87:15:d2:a2:35:f6:84:3d:01:a5:14:32:bd:d2:eb:
                    79:5e:5f:9e:6a:7b:dd:7b:ec:53:da:4c:00:ce:75:
                    8e:73:80:0e:d3:8d:0c:3c:03:02:12:41:b7:4a:e0:
                    32:bf:ea:93:1a:5d:e2:51:65:ba:0c:6e:f4:39:1c:
                    fd:fc:24:c6:f8:9f:3f:d8:e0:33:64:52:db:eb:d8:
                    65:e0:c3:af:17:ef:9c:db:30:8b:24:f7:3f:d9:54:
                    b8:1c:cf:57:a8:3a:5c:e2:25:04:54:a8:22:95:13:
                    8c:a9:26:09:fc:d7:59:bf:15:23:93:77:5b:78:10:
                    89:8c:85:36:cd:58:12:09:03:ae:81:8a:d6:d3:b7:
                    80:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:C8:AD:DE:AA:6C:AF:6B:9D:12:08:34:93:2F:59:F0:19:24:E2:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2977dd84-2e60-4aa2-8c59-ffc1b7659b9e/3bfab33e-8e0c-3834-928a-36647f762218.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2977dd84-2e60-4aa2-8c59-ffc1b7659b9e/2977dd84-2e60-4aa2-8c59-ffc1b7659b9e.crl

            X509v3 Authority Key Identifier:
                keyid:B9:C8:33:74:1F:B6:EE:54:E5:CF:25:08:38:2F:48:86:0A:4A:99:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2977dd84-2e60-4aa2-8c59-ffc1b7659b9e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.204.192.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:ee:a8:ad:29:08:6a:68:38:cb:60:89:e8:80:fb:16:4b:60:
         32:3f:05:d0:6e:d2:9d:df:b9:79:81:62:66:3e:6a:1c:4d:64:
         e0:c5:24:d2:0f:47:16:ec:bd:29:5b:00:f6:65:e3:fd:46:66:
         3c:4a:f5:b3:16:05:24:ca:7b:71:f3:62:4d:bf:61:4b:a2:e7:
         0c:da:3a:d9:7d:7c:96:d3:2b:99:0b:91:1d:27:cf:5d:8c:f0:
         d3:31:34:23:c0:dd:71:6d:fb:1e:c6:b3:ee:99:93:fd:36:49:
         b3:b6:af:73:3b:7a:d0:15:3e:06:65:94:df:c5:88:d8:30:36:
         38:d0:f6:cb:a2:36:2a:a6:e7:3f:0d:d9:ad:0b:f5:c2:ce:76:
         4a:45:54:09:d7:6f:9d:7d:d6:51:c6:71:06:24:75:2a:5f:c6:
         11:f7:d6:50:a6:fd:91:0b:de:85:63:c1:3e:0c:bb:5a:6e:b9:
         d7:d4:02:69:a6:c2:7c:dd:f3:61:5e:f3:f2:ae:ba:83:61:f8:
         12:be:df:36:b9:14:7f:c6:2c:d1:5b:01:88:23:79:36:75:4c:
         34:bd:62:a7:7b:06:39:06:4d:20:9c:16:9b:93:e9:d9:39:a0:
         8e:10:e1:ff:63:28:c7:6e:85:b5:8c:ea:52:d3:1e:3d:c2:7f:
         c7:6b:2a:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 16 15:18:27 2024 by rpki-client on console-fra.rpki-client.org