Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/75c2d703-b68a-47d9-8657-d65247155419/f18bdd83-1487-3436-a592-73c92fa2ab14.roa
File:                     f18bdd83-1487-3436-a592-73c92fa2ab14.roa (raw, json)
Hash identifier:          MtDK2wKI0M+WQRxHKWP39CjlyvE+Fhk3o0L9IwGXGt0=
Subject key identifier:   29:9B:BD:45:6F:B0:C5:0F:9D:B4:C0:72:AE:B9:5F:81:D6:10:12:01
Certificate issuer:       /CN=75c2d703-b68a-47d9-8657-d65247155419
Certificate serial:       010D0C9F43285846DB1A26ADB680F0BD901EAE40
Authority key identifier: 06:9E:87:51:40:72:70:04:B4:5A:EC:27:55:92:3D:CF:16:A2:28:0A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/75c2d703-b68a-47d9-8657-d65247155419.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/75c2d703-b68a-47d9-8657-d65247155419/f18bdd83-1487-3436-a592-73c92fa2ab14.roa
Signing time:             Mon 12 Aug 2024 22:07:44 +0000
ROA not before:           Mon 12 Aug 2024 22:07:44 +0000
ROA not after:            Sun 10 Nov 2024 23:07:44 +0000
asID:                     16611
IP address blocks:        23.175.40.0/24 maxlen: 24
                          149.112.109.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 12 Sep 2024 15:16:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:db:1a:26:ad:b6:80:f0:bd:90:1e:ae:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75c2d703-b68a-47d9-8657-d65247155419
        Validity
            Not Before: Aug 12 22:07:44 2024 GMT
            Not After : Nov 10 23:07:44 2024 GMT
        Subject: CN=f151b329-bdc5-4d12-b811-30f1b40d044a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d7:e0:01:c0:f6:8b:2c:43:b6:ae:14:4b:1f:
                    bf:57:73:d1:3e:0d:78:22:fb:df:8b:94:9f:95:7a:
                    ac:fd:0e:ae:22:2b:f3:52:d9:3f:af:de:c1:e9:51:
                    53:53:28:c4:52:19:3f:80:18:44:db:81:6e:ec:98:
                    11:ed:68:a3:a8:fe:6e:0f:82:a7:ce:6a:5b:60:cb:
                    a8:cd:45:1d:85:d9:fb:fc:9a:a9:bf:e3:5c:c9:9b:
                    72:5d:ce:7f:c3:da:95:c5:8f:95:1e:18:5c:92:05:
                    13:6d:6c:ab:72:ea:73:9d:4f:ac:b6:ba:c8:6d:1a:
                    24:63:d7:42:88:9c:3c:fc:fd:bb:2e:e6:9c:8f:a2:
                    50:7a:1d:ff:2c:99:e7:90:08:34:a1:f7:f2:b1:d9:
                    13:90:fa:f6:80:85:b1:7a:e6:a0:75:58:61:12:82:
                    a1:75:26:31:9e:5d:ea:4a:1a:69:41:25:06:4a:b9:
                    b1:0a:fc:35:5d:5c:82:97:3f:c5:f3:92:e0:17:47:
                    59:d5:4c:9d:0d:24:9a:8e:3a:92:41:b1:f9:39:49:
                    22:32:02:12:88:d9:cd:02:98:3d:03:7d:84:06:4c:
                    6c:7d:92:7f:fa:c3:33:dd:8f:8d:6b:07:1b:5b:4f:
                    56:34:94:6d:fa:d4:db:9b:be:9d:b2:ad:2c:7a:db:
                    a5:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:9B:BD:45:6F:B0:C5:0F:9D:B4:C0:72:AE:B9:5F:81:D6:10:12:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/75c2d703-b68a-47d9-8657-d65247155419/f18bdd83-1487-3436-a592-73c92fa2ab14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/75c2d703-b68a-47d9-8657-d65247155419/75c2d703-b68a-47d9-8657-d65247155419.crl

            X509v3 Authority Key Identifier:
                keyid:06:9E:87:51:40:72:70:04:B4:5A:EC:27:55:92:3D:CF:16:A2:28:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/75c2d703-b68a-47d9-8657-d65247155419.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.175.40.0/24
                  149.112.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:89:dd:9f:bb:70:a9:a7:9b:3f:7e:fb:81:5b:b7:11:c4:15:
         24:1d:e6:ce:50:52:82:08:c6:4a:4d:b2:f8:53:f9:14:7f:7d:
         63:d7:b9:42:23:81:a9:31:c6:af:e1:63:e9:48:51:6c:f1:45:
         51:93:92:e9:5e:0e:d3:2a:66:af:86:21:65:a7:3b:79:76:b4:
         50:17:0e:26:8b:e1:a5:d8:bb:43:9f:9d:97:cf:07:fc:b1:03:
         9a:e4:15:28:09:11:fe:e5:fc:05:37:0e:8b:57:72:bb:10:a0:
         77:af:2a:55:bf:cf:6f:56:87:62:83:87:80:ac:f6:db:5e:97:
         5c:32:70:42:b6:79:ca:68:b0:8c:e6:5d:0e:72:c1:2b:99:de:
         d8:79:03:58:5e:1b:3a:e1:0f:a3:6d:d9:19:8b:76:67:d5:4a:
         62:4f:b9:df:3c:48:07:e9:6f:95:84:6a:c2:b8:47:96:d9:f8:
         06:73:de:32:aa:5e:96:ef:36:a7:f3:1d:d5:eb:b8:e9:b5:3f:
         29:f5:1a:91:f4:34:4a:ae:0b:55:0b:f4:f7:0d:40:ef:6b:da:
         4b:c0:bb:d0:04:db:9f:95:ff:f4:cd:f3:a1:68:0a:14:fb:fc:
         67:a7:c1:ec:47:04:f3:2b:01:66:0a:52:0e:de:6d:60:84:00:
         52:e1:50:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 12 18:44:56 2024 by rpki-client on console-ams.rpki-client.org