Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/0ad9d03f-08b3-31ee-bed3-0d1ebecd6993.roa
File:                     0ad9d03f-08b3-31ee-bed3-0d1ebecd6993.roa (raw, json)
Hash identifier:          uK5GnFeJd2f+awHfSYEMQp6Gxu0toRQHqftOOiQ3uEc=
Subject key identifier:   18:91:16:B9:08:BF:DA:AC:44:7F:44:09:60:EB:4D:12:6E:E3:AD:66
Certificate issuer:       /CN=269d2481-9b5f-41f2-a09c-92994a3ae335
Certificate serial:       010D0C9F432858452CA2F9230F7263DFCEEA7B40
Authority key identifier: 6F:D8:81:3C:73:19:9C:F6:AD:A5:DB:82:9A:A0:53:16:FF:23:ED:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/0ad9d03f-08b3-31ee-bed3-0d1ebecd6993.roa
Signing time:             Mon 11 Mar 2024 17:30:01 +0000
ROA not before:           Mon 11 Mar 2024 17:30:01 +0000
ROA not after:            Sun 09 Jun 2024 17:30:01 +0000
asID:                     16509
IP address blocks:        173.249.164.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 12 Apr 2024 11:42:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:2c:a2:f9:23:0f:72:63:df:ce:ea:7b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=269d2481-9b5f-41f2-a09c-92994a3ae335
        Validity
            Not Before: Mar 11 17:30:01 2024 GMT
            Not After : Jun  9 17:30:01 2024 GMT
        Subject: CN=36e35a65-9281-4fac-ba33-3568dda9cf3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:b3:3c:38:8d:7f:87:bb:b3:e3:e1:d7:d9:2f:
                    67:6e:13:4d:6c:ae:4d:95:f7:f3:64:e2:de:3a:1a:
                    95:2f:32:9a:be:d4:06:cd:cc:c6:d7:80:5d:52:1a:
                    ed:cb:35:fa:cb:f3:4a:ed:59:fd:da:2d:93:b5:24:
                    d4:bd:b8:5f:c7:7d:30:63:c5:ba:31:2b:8f:8c:15:
                    53:b3:77:96:43:54:95:01:d5:10:51:4f:f2:c3:fb:
                    8a:19:e2:b4:1b:08:53:f7:b7:66:11:c0:ae:78:19:
                    1d:2c:7d:0b:04:aa:8e:71:4e:2d:92:ef:d5:0c:20:
                    49:e5:60:30:28:94:79:37:31:46:72:a9:dd:d3:17:
                    0e:96:7a:96:1b:30:d6:05:6a:e1:9b:76:35:d6:ff:
                    30:b2:05:ff:2b:6a:70:45:71:45:81:9b:c3:00:c2:
                    f0:de:b8:5f:f1:c3:4e:a9:36:7f:bc:bc:11:79:41:
                    be:2f:c3:e2:80:07:a0:18:94:df:50:e1:ea:d8:c0:
                    04:d4:4b:c4:28:36:4f:9b:ff:dc:41:e4:61:4d:cd:
                    d2:d5:63:e6:8f:73:45:c2:b6:21:5b:f7:b9:3d:84:
                    57:d4:bb:c7:eb:1f:da:58:97:da:74:10:14:e9:02:
                    03:b6:79:64:a0:c5:e0:b3:04:ba:7f:96:f9:98:ba:
                    1d:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:91:16:B9:08:BF:DA:AC:44:7F:44:09:60:EB:4D:12:6E:E3:AD:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/0ad9d03f-08b3-31ee-bed3-0d1ebecd6993.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/269d2481-9b5f-41f2-a09c-92994a3ae335.crl

            X509v3 Authority Key Identifier:
                keyid:6F:D8:81:3C:73:19:9C:F6:AD:A5:DB:82:9A:A0:53:16:FF:23:ED:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.249.164.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:4e:34:9c:51:da:95:06:ba:26:be:44:13:53:92:ad:b3:71:
         43:01:1f:28:29:98:99:10:01:01:7b:7d:c5:4b:9c:08:90:9d:
         60:a8:46:f4:5a:c7:fe:ad:6c:a4:74:06:f3:fe:05:35:af:63:
         f9:8a:38:f7:87:eb:de:07:1a:3a:87:cb:12:63:95:b8:7d:f7:
         3e:88:22:ac:ac:ea:cd:51:a9:05:23:84:b7:4e:46:6e:f9:96:
         69:4b:1b:a6:7c:97:9a:97:52:44:2b:d0:91:f5:50:8b:ec:f0:
         51:2b:c9:3c:00:ad:8c:b6:05:fc:73:c5:32:68:cb:44:8e:fe:
         ee:78:10:c8:bf:4a:8f:df:0b:fe:fe:35:de:62:1d:8c:4e:7c:
         45:f7:4f:82:b1:a8:cf:5b:01:b3:f9:c9:e2:c6:57:be:76:a7:
         f9:14:66:38:91:b9:1c:9d:1e:dc:5b:93:92:66:ea:bf:58:01:
         d4:b5:1f:c6:59:57:fd:c0:21:a4:42:77:6e:4d:2f:78:03:7d:
         b5:ba:2b:f7:67:66:e0:d5:86:9a:7b:9d:44:a3:64:b3:53:b0:
         bc:42:78:56:59:8c:b1:9c:4f:74:13:13:da:53:7b:8b:3c:5b:
         cd:17:ab:bf:cd:e5:59:55:fd:cd:69:89:ee:88:55:fc:11:3a:
         07:b0:fa:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:42:14 2024 by rpki-client on console-ams.rpki-client.org