Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b4b63a03-6fed-4e8c-898c-a5155d0a90ea/b9cda74a-a71d-37c0-b577-50bdaef8ecaf.roa
File:                     b9cda74a-a71d-37c0-b577-50bdaef8ecaf.roa (raw, json)
Hash identifier:          spuL99VtDjKIw2c58uYyUNjYLsaWh+ZEq+25hdcwMFY=
Subject key identifier:   F1:C2:1B:12:AB:B5:48:BD:48:28:AF:5D:85:38:92:1A:00:CC:D5:D0
Certificate issuer:       /CN=b4b63a03-6fed-4e8c-898c-a5155d0a90ea
Certificate serial:       010D0C9F43285846C76310CBBEFF4DEDC15DB680
Authority key identifier: 66:DD:B8:F3:43:CD:51:B7:14:93:08:A1:88:86:0F:38:A7:49:24:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b4b63a03-6fed-4e8c-898c-a5155d0a90ea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b4b63a03-6fed-4e8c-898c-a5155d0a90ea/b9cda74a-a71d-37c0-b577-50bdaef8ecaf.roa
Signing time:             Mon 05 Aug 2024 20:38:29 +0000
ROA not before:           Mon 05 Aug 2024 20:38:29 +0000
ROA not after:            Sun 03 Nov 2024 21:38:29 +0000
asID:                     22439
IP address blocks:        64.56.64.0/20 maxlen: 20
                          70.36.96.0/19 maxlen: 19
                          74.81.32.0/19 maxlen: 19
                          74.222.0.0/19 maxlen: 19
                          2607:fa98::/32 maxlen: 32

Validation:               Failed, certificate revoked on Mon 05 Aug 2024 20:53:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:c7:63:10:cb:be:ff:4d:ed:c1:5d:b6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4b63a03-6fed-4e8c-898c-a5155d0a90ea
        Validity
            Not Before: Aug  5 20:38:29 2024 GMT
            Not After : Nov  3 21:38:29 2024 GMT
        Subject: CN=c3fd68a7-b7b5-4eca-a79a-99ad0475100c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f8:33:33:69:e0:31:ec:07:7a:72:89:d7:e4:
                    f7:ac:5d:b3:17:34:8c:ce:fc:82:95:5c:01:d1:3a:
                    7a:fc:40:13:75:0c:4b:4f:b6:43:e4:d3:37:27:03:
                    4c:54:c1:e0:68:65:4f:22:4e:7e:2c:10:37:4d:44:
                    5b:5c:d5:43:fd:31:89:d7:e7:51:52:26:25:e9:44:
                    fa:8a:54:48:17:02:c8:66:1b:c4:eb:68:3d:06:34:
                    09:7d:98:61:8f:b2:48:93:67:64:0e:52:12:27:29:
                    88:b7:42:4c:3f:74:0d:cd:af:04:59:19:bb:aa:8d:
                    ba:c6:8c:3a:f8:29:fc:ea:2a:47:0f:ba:42:91:19:
                    10:2c:03:c3:ae:ab:32:df:a3:bb:a1:e1:31:20:43:
                    28:06:da:a6:e7:8b:9c:6b:07:8c:65:df:a1:76:cd:
                    49:16:e0:19:17:a7:fe:26:15:22:ef:75:1e:ca:0a:
                    b6:4c:89:d1:dc:17:f7:8e:fc:ae:8e:f5:65:95:75:
                    68:07:eb:b8:82:96:47:7d:ec:98:ff:78:9b:7e:8b:
                    ca:e6:c2:8f:13:7b:23:64:be:4d:78:d0:c9:4b:dc:
                    f0:f5:58:db:64:52:04:8c:02:8e:fd:42:02:7f:37:
                    4a:8b:27:b1:01:ef:44:c1:7f:81:f8:b5:cc:1d:01:
                    2a:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:C2:1B:12:AB:B5:48:BD:48:28:AF:5D:85:38:92:1A:00:CC:D5:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b4b63a03-6fed-4e8c-898c-a5155d0a90ea/b9cda74a-a71d-37c0-b577-50bdaef8ecaf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b4b63a03-6fed-4e8c-898c-a5155d0a90ea/b4b63a03-6fed-4e8c-898c-a5155d0a90ea.crl

            X509v3 Authority Key Identifier:
                keyid:66:DD:B8:F3:43:CD:51:B7:14:93:08:A1:88:86:0F:38:A7:49:24:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b4b63a03-6fed-4e8c-898c-a5155d0a90ea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.56.64.0/20
                  70.36.96.0/19
                  74.81.32.0/19
                  74.222.0.0/19
                IPv6:
                  2607:fa98::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:81:b2:0c:34:8d:9d:5c:90:5b:f4:61:9a:ee:ff:d5:65:35:
         9c:6f:58:32:b8:61:cc:62:49:dd:e9:d4:57:21:c6:d9:e7:04:
         6f:53:3c:1d:74:e0:49:86:12:26:3a:08:83:91:a7:37:88:90:
         a0:b5:5d:51:46:69:91:d1:41:5c:03:8a:18:ea:2e:3f:54:b9:
         df:99:49:80:7d:5b:25:d5:01:5b:88:9a:92:1a:e7:ac:b0:37:
         58:73:94:0f:34:0f:cf:52:c9:93:d4:c4:b6:04:d4:c6:9a:9a:
         8e:28:a4:ea:d3:16:25:7f:31:a9:52:c7:ff:0d:b6:ba:a9:a9:
         50:10:03:bf:18:83:5b:cf:c5:f5:09:db:1b:4c:e7:2e:85:0d:
         79:5f:ee:e8:44:89:31:14:45:61:9c:ef:86:07:01:a0:5b:9e:
         4c:3d:79:56:4f:db:e7:6a:23:0c:c9:0e:12:a0:8f:55:0d:5a:
         6c:80:46:b4:1b:93:cb:dc:c5:d5:b9:41:b6:2e:3a:c7:e3:99:
         9d:dc:b5:13:29:70:db:90:fd:4c:5e:de:2e:ef:70:c7:a2:ef:
         ef:4d:53:32:fe:20:d2:d1:5b:28:e1:a4:5e:e4:1b:b4:8b:e1:
         35:c3:da:37:e5:66:92:07:7c:8e:00:75:19:6f:b8:1f:29:fc:
         5d:35:d6:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 5 23:27:27 2024 by rpki-client on console-ams.rpki-client.org