Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/baf15eac-88d5-372b-8150-7e0a1049e51a.roa
File:                     baf15eac-88d5-372b-8150-7e0a1049e51a.roa (raw, json)
Hash identifier:          0n0QdFXTAnQ4yTeJRKCTBVRXodutAQr8YpeoO0Mjbg4=
Subject key identifier:   63:C4:0E:4A:3F:BB:05:D0:D5:31:98:7E:07:D5:C7:8C:04:D2:58:5A
Certificate issuer:       /CN=269d2481-9b5f-41f2-a09c-92994a3ae335
Certificate serial:       010D0C9F43285847AF9BEC21C5DB4AB2EB9F8240
Authority key identifier: 6F:D8:81:3C:73:19:9C:F6:AD:A5:DB:82:9A:A0:53:16:FF:23:ED:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/baf15eac-88d5-372b-8150-7e0a1049e51a.roa
Signing time:             Mon 28 Oct 2024 01:00:32 +0000
ROA not before:           Mon 28 Oct 2024 01:00:32 +0000
ROA not after:            Sun 26 Jan 2025 02:00:32 +0000
asID:                     1239
IP address blocks:        128.254.145.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 20 Nov 2024 19:44:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:af:9b:ec:21:c5:db:4a:b2:eb:9f:82:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=269d2481-9b5f-41f2-a09c-92994a3ae335
        Validity
            Not Before: Oct 28 01:00:32 2024 GMT
            Not After : Jan 26 02:00:32 2025 GMT
        Subject: CN=91d354fd-933f-4727-87de-90699a3cb7c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:46:63:8d:9e:9e:ba:2b:13:ab:f6:76:3f:19:
                    0b:48:ac:9a:4b:a3:42:ad:54:5a:43:97:d1:a4:0f:
                    19:1f:69:78:cd:16:d3:31:fe:a6:46:df:98:91:2d:
                    9f:b8:ae:d6:83:6d:1c:e3:c9:0a:45:d1:c0:d5:40:
                    c1:67:42:e9:64:58:92:2b:67:d1:9b:a6:1f:7b:b8:
                    c3:31:4d:c6:28:ce:a4:7a:35:48:97:89:95:1f:86:
                    7d:06:80:cb:d9:bf:06:c7:d4:6d:6e:7a:58:60:49:
                    2f:f0:1b:6a:f9:cd:0a:16:5f:2a:0c:86:03:93:2f:
                    e6:5d:44:05:75:b7:f3:21:b1:0b:22:d6:c3:ec:21:
                    1a:a3:51:69:65:9b:84:ee:c9:d2:29:8f:03:eb:47:
                    f4:18:4a:43:27:94:0a:54:a1:2f:61:f2:34:f0:86:
                    f3:72:7e:42:74:32:5d:d0:37:46:43:61:40:0b:fd:
                    68:d6:93:41:4d:25:dd:9b:93:11:bd:cd:62:40:99:
                    78:2b:64:15:07:f9:d1:77:44:f8:fa:3a:53:73:25:
                    d4:7e:80:43:bf:77:14:90:bc:8a:29:a6:67:3e:f0:
                    08:e7:f5:a2:39:ee:69:0f:ab:00:c8:94:db:82:7c:
                    01:cf:bf:ff:31:67:69:15:0d:90:0d:6f:c6:b7:38:
                    3d:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:C4:0E:4A:3F:BB:05:D0:D5:31:98:7E:07:D5:C7:8C:04:D2:58:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/baf15eac-88d5-372b-8150-7e0a1049e51a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/269d2481-9b5f-41f2-a09c-92994a3ae335.crl

            X509v3 Authority Key Identifier:
                keyid:6F:D8:81:3C:73:19:9C:F6:AD:A5:DB:82:9A:A0:53:16:FF:23:ED:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.254.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:dc:fd:ad:a5:e4:2c:89:1d:da:34:a8:06:f0:e8:37:b8:62:
         c6:90:5b:64:52:ac:3b:ac:eb:9f:7e:50:2c:b5:39:3a:8d:17:
         ac:aa:f1:8e:ed:94:6f:d9:15:2d:5d:f0:af:21:82:97:c0:0b:
         09:82:5b:bf:a7:f3:9f:29:48:ce:c2:03:99:23:23:bb:90:a3:
         55:11:aa:78:8c:e0:7f:09:09:24:3b:99:3f:74:6c:92:8b:fa:
         56:85:7a:e5:16:c9:16:40:98:94:b1:f3:13:c4:6c:b2:0a:49:
         0c:05:f0:10:83:e5:53:f7:a3:7a:73:da:d5:fe:75:79:b9:ba:
         45:88:26:c1:ba:7a:a5:a9:a2:72:67:0b:58:b8:28:44:b2:e8:
         52:0c:98:12:de:57:eb:f9:db:6a:9c:a0:10:8e:f2:48:43:1e:
         94:c4:7e:95:36:34:b8:fd:7d:12:d0:37:2c:be:1b:ac:7b:3e:
         2c:1d:0a:65:64:c7:e8:33:6b:a2:5e:33:01:e3:ca:64:69:78:
         65:2f:fd:1b:9c:27:38:a2:8e:f4:4b:fc:75:28:38:a9:2c:8a:
         d6:6b:e9:61:9a:a2:b9:1c:b3:be:e7:a9:78:2e:71:25:46:8f:
         87:11:5e:32:c7:e7:53:98:bc:8b:6b:c3:71:89:38:08:ef:c0:
         9b:75:01:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 22:05:19 2024 by rpki-client on console-fra.rpki-client.org