Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0b30d66e-d61f-38ce-a436-a0c087173548.roa
File:                     0b30d66e-d61f-38ce-a436-a0c087173548.roa (raw, json)
Hash identifier:          I0NR/nIx2jaSBpPWpd1g3lWZLK2B/vhkvFL6YCUFQnU=
Subject key identifier:   53:F2:07:13:A7:8D:F7:46:7C:78:ED:74:47:F5:74:74:67:EA:85:35
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285843EB352A1E077987C4588BEE00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0b30d66e-d61f-38ce-a436-a0c087173548.roa
Signing time:             Fri 17 Nov 2023 14:14:17 +0000
ROA not before:           Fri 17 Nov 2023 14:14:17 +0000
ROA not after:            Thu 15 Feb 2024 14:14:17 +0000
asID:                     397630
IP address blocks:        192.177.139.0/24 maxlen: 24
                          192.177.140.0/24 maxlen: 24
                          192.177.142.0/24 maxlen: 24
                          192.177.158.0/24 maxlen: 24
                          192.177.166.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 05 Feb 2024 15:35:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:eb:35:2a:1e:07:79:87:c4:58:8b:ee:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Nov 17 14:14:17 2023 GMT
            Not After : Feb 15 14:14:17 2024 GMT
        Subject: CN=3f6702f7-e455-4ad5-a885-5666cfb93f58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:84:6d:d7:65:75:59:a5:7e:76:df:8d:f8:ea:
                    84:f0:6d:2b:73:85:e6:00:00:f5:8d:9c:12:37:8d:
                    69:e3:f8:b5:ad:1e:2b:bb:29:33:43:92:ad:7e:6f:
                    0e:c7:19:56:f9:e4:be:39:3b:50:80:fd:5e:b7:33:
                    ad:0e:e3:7f:eb:65:62:6e:25:76:f2:cd:d4:8d:ec:
                    ac:0c:f3:62:9c:2e:b7:90:a9:df:48:f2:8a:ee:39:
                    1d:29:d9:a5:e9:cc:a7:a8:7d:94:11:2c:7d:2f:0a:
                    a2:64:d9:3c:3b:c7:85:46:2b:ab:9c:b7:87:ae:e3:
                    ad:c0:a8:bf:2f:cf:97:94:0a:b5:0d:6c:d5:d3:24:
                    f1:b2:03:9e:0c:b7:af:bd:8f:5d:84:55:1b:c4:f7:
                    af:8c:f2:d7:b0:c0:56:05:99:33:a3:8e:2e:a2:0c:
                    91:8c:70:36:05:fd:b6:98:84:bb:09:e0:c4:91:5f:
                    db:99:38:58:f1:41:c6:50:e2:b0:ad:dd:15:66:08:
                    f1:65:76:9f:83:93:80:4b:c8:d5:ab:e7:2b:ea:1d:
                    b5:bc:97:d2:78:24:31:b6:d5:3e:e3:42:a9:17:53:
                    32:b3:36:05:7e:1f:59:39:ce:25:6d:14:e3:75:45:
                    c0:9e:84:9d:a3:3b:32:0d:2a:98:0c:4a:5e:56:23:
                    0a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:F2:07:13:A7:8D:F7:46:7C:78:ED:74:47:F5:74:74:67:EA:85:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/0b30d66e-d61f-38ce-a436-a0c087173548.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.177.139.0-192.177.140.255
                  192.177.142.0/24
                  192.177.158.0/24
                  192.177.166.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:b0:b6:eb:c0:d8:e2:21:d0:d6:ca:04:3d:e1:21:05:e9:bd:
         4f:4c:fa:18:b4:88:77:02:d3:41:b3:2f:3f:ae:8f:ea:e5:6c:
         0a:a4:f0:6d:a3:fd:d0:b0:eb:83:4c:33:f3:5f:7c:fc:27:55:
         32:56:ea:60:ed:62:ce:ff:8d:78:5c:d2:44:2d:d5:4d:a1:87:
         a9:d7:df:60:a9:99:49:51:4c:5d:aa:33:55:5a:80:5c:13:61:
         61:ec:bb:7f:71:ed:c1:1b:9b:37:c4:79:e1:24:e1:a6:ec:af:
         81:09:e0:20:7e:76:74:f3:21:40:04:98:ed:b0:53:74:35:9c:
         1c:ab:af:f0:75:1f:4a:cc:99:fa:ca:7f:c7:f0:a2:9d:e3:76:
         3d:88:95:95:08:48:f0:b1:e0:0d:1f:6a:70:9f:6d:bb:11:43:
         11:3c:53:78:c7:7a:4b:63:0b:3a:ee:46:3d:08:fc:e2:45:64:
         87:82:72:71:7b:6a:21:47:e9:00:27:7a:6c:c5:2e:49:06:cf:
         95:58:3b:b9:d8:50:51:aa:d0:f7:80:1c:b1:d5:41:c4:af:59:
         9f:cc:8f:78:4c:17:34:76:c8:db:ab:0e:34:b5:af:4d:79:77:
         00:13:ac:12:59:e9:8b:a6:89:7e:01:da:a4:f3:8b:2f:1e:71:
         e5:4e:52:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 5 20:13:09 2024 by rpki-client on console-ams.rpki-client.org