Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/37d6a0ba-c124-4540-b5ef-6ab20943af24/1ba9c6ff-0ef7-397d-8383-5217a01f93b2.roa
File:                     1ba9c6ff-0ef7-397d-8383-5217a01f93b2.roa (raw, json)
Hash identifier:          uKUf8efPQJvb2DJ/jX16wa17rNWBOkDQoX2Bd7Zzhhc=
Subject key identifier:   8B:61:6C:E3:4C:F5:5F:85:6C:F0:2E:AF:51:51:1A:1D:41:19:4C:8E
Certificate issuer:       /CN=37d6a0ba-c124-4540-b5ef-6ab20943af24
Certificate serial:       010D0C9F43285846821A0240B5071227D964A100
Authority key identifier: 3F:C6:68:B4:FB:02:1A:DC:55:78:B5:D4:5F:11:F2:04:AC:FD:D4:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/37d6a0ba-c124-4540-b5ef-6ab20943af24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/37d6a0ba-c124-4540-b5ef-6ab20943af24/1ba9c6ff-0ef7-397d-8383-5217a01f93b2.roa
Signing time:             Fri 12 Jul 2024 01:00:24 +0000
ROA not before:           Fri 12 Jul 2024 01:00:24 +0000
ROA not after:            Thu 10 Oct 2024 01:00:24 +0000
asID:                     16509
IP address blocks:        162.212.41.0/24 maxlen: 24
                          162.212.42.0/24 maxlen: 24
                          162.212.44.0/22 maxlen: 22
                          199.96.160.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Fri 19 Jul 2024 22:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:82:1a:02:40:b5:07:12:27:d9:64:a1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37d6a0ba-c124-4540-b5ef-6ab20943af24
        Validity
            Not Before: Jul 12 01:00:24 2024 GMT
            Not After : Oct 10 01:00:24 2024 GMT
        Subject: CN=d4eb1875-05ac-44af-8f59-a349415c09ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:2e:de:8c:06:76:7a:9b:89:15:78:35:8a:5a:
                    51:8b:d5:d3:5e:28:c0:dc:29:64:0d:e8:67:2d:b3:
                    14:a7:33:d6:a5:5c:64:80:8e:84:6a:9e:fe:12:cd:
                    11:bc:18:e0:78:b8:5f:cd:b7:b1:ec:f9:d8:46:5b:
                    ea:29:ae:17:83:ae:c3:78:50:2d:ff:57:bc:af:a7:
                    9d:43:b6:4c:9c:45:44:b0:09:29:57:9b:16:b0:e8:
                    35:72:56:4d:d9:2e:67:cb:fb:b7:95:ab:48:48:c7:
                    16:bb:ba:21:c9:9c:ac:0e:df:6a:a1:f3:c8:95:45:
                    0e:37:db:0e:da:63:a2:76:7f:dc:49:aa:15:51:01:
                    c4:d9:cd:3e:b5:37:76:ce:85:86:bc:42:99:fa:e7:
                    fc:2c:73:2f:19:1b:ca:48:ad:be:d7:64:19:b6:0f:
                    1c:ab:fe:01:8c:2a:33:7a:23:8a:1a:9f:7c:63:cb:
                    dc:d0:6b:40:6d:8d:e8:ab:ea:3c:a9:5f:c9:a3:64:
                    b2:52:a0:60:59:ff:98:b9:82:60:5b:4a:b7:fa:ef:
                    fc:aa:83:28:2e:83:22:85:bc:3f:d6:9f:90:b7:ef:
                    6d:9a:1e:b6:7c:54:4a:3c:b4:44:55:62:4c:04:b5:
                    ad:48:3a:66:41:f5:c0:47:8b:59:d5:bf:1b:3a:78:
                    26:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:61:6C:E3:4C:F5:5F:85:6C:F0:2E:AF:51:51:1A:1D:41:19:4C:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/37d6a0ba-c124-4540-b5ef-6ab20943af24/1ba9c6ff-0ef7-397d-8383-5217a01f93b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/37d6a0ba-c124-4540-b5ef-6ab20943af24/37d6a0ba-c124-4540-b5ef-6ab20943af24.crl

            X509v3 Authority Key Identifier:
                keyid:3F:C6:68:B4:FB:02:1A:DC:55:78:B5:D4:5F:11:F2:04:AC:FD:D4:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/37d6a0ba-c124-4540-b5ef-6ab20943af24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.212.41.0-162.212.42.255
                  162.212.44.0/22
                  199.96.160.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:a1:fe:4c:52:9f:f3:78:f6:38:fc:8c:fc:68:a8:6b:69:e6:
         2b:1b:0d:81:85:7a:a6:5f:f0:b7:59:a9:e0:5d:78:ae:3a:73:
         f3:e2:5a:1d:d9:3d:30:da:dc:33:ae:f0:de:e6:cf:cc:b5:b8:
         9b:87:6a:80:71:3a:d3:19:23:e5:91:29:64:73:84:ed:18:de:
         23:10:fb:21:20:56:f2:15:cf:02:e4:dd:79:b4:9f:1b:e6:52:
         17:0d:75:c5:bd:0b:55:32:c7:06:10:e4:3d:95:42:70:88:4c:
         d2:3e:fd:ee:25:61:ad:44:2e:99:5f:10:9f:b5:68:1d:53:a2:
         30:58:23:ce:eb:ee:16:9b:13:1c:84:0f:9a:b4:95:91:13:87:
         23:4d:56:40:e2:45:94:a4:cf:16:6e:12:a7:37:6b:0c:9c:e6:
         e9:97:fe:2e:76:79:bc:06:46:b2:36:3e:29:dd:40:a0:04:35:
         7f:6c:2c:f4:31:08:8c:3e:f9:1b:0c:77:db:08:e1:07:7d:4f:
         1f:8b:9a:31:e9:f8:17:80:d1:16:21:37:2e:b2:a5:dc:4a:69:
         16:a6:88:cb:ae:75:fb:d8:e4:ac:2d:18:7d:c5:17:5d:fb:25:
         0c:3b:60:f4:cf:20:87:fd:ce:b3:40:c7:6b:bc:6b:b0:f0:54:
         29:17:65:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 20 00:02:56 2024 by rpki-client on console-ams.rpki-client.org