Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/0b5358ff-0f8a-33bc-8f97-102215ca0f93.roa
File:                     0b5358ff-0f8a-33bc-8f97-102215ca0f93.roa (raw, json)
Hash identifier:          6dhHf1any/KTC6DKUhvbft3vwCBlfHvxNKSY/wA3Ih8=
Subject key identifier:   18:80:4A:0A:84:BC:9D:0B:F7:DA:89:40:B2:62:7A:56:29:EC:7F:D3
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F432858430A1896AC35912D6B5ED4D000
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/0b5358ff-0f8a-33bc-8f97-102215ca0f93.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36492
IP address blocks:        64.9.234.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:12:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:18:96:ac:35:91:2d:6b:5e:d4:d0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=0421f80d-e58a-4d4c-91c0-ada2c5d3a154
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:0b:ca:5b:39:c5:3e:57:f2:c2:e4:c0:96:21:
                    67:2d:85:a8:60:b3:6b:30:eb:f8:96:5c:53:d3:c1:
                    75:b9:5d:ec:3b:3c:7d:aa:c2:a1:91:f7:7c:c8:02:
                    6e:9d:d1:25:e7:a0:17:4b:54:80:da:79:04:ec:46:
                    c3:ac:bd:16:86:25:41:6f:34:85:55:6b:26:c1:59:
                    dd:83:07:09:c8:fd:f5:0d:d8:9e:d9:ea:a1:a6:a1:
                    9f:b2:61:c6:80:11:8a:d6:4d:fb:8a:66:03:5e:77:
                    da:4a:7b:63:db:11:30:25:a9:18:a4:d8:d4:8c:37:
                    d3:17:8f:bc:d4:15:39:c9:9d:88:cf:c1:34:e7:c7:
                    49:4f:58:0a:34:23:8a:d6:6f:ec:b0:22:fa:eb:cd:
                    cd:cc:f2:ee:1a:8b:c0:0e:25:5a:b3:b2:f1:1c:20:
                    6f:ca:9a:7c:82:ee:69:6e:1e:f7:48:b2:f5:97:21:
                    07:21:ce:31:5c:8b:ab:b6:7c:00:dc:49:49:25:66:
                    1d:89:de:6f:9d:02:28:03:9e:f1:25:2b:b9:bd:53:
                    29:48:ed:fc:ee:89:6e:f9:60:b0:a5:e6:e2:ca:e1:
                    c0:34:8c:e8:0e:c3:f1:e1:4b:8e:2a:1f:14:a4:f1:
                    08:0b:c8:63:92:16:78:f6:14:02:83:51:98:d5:b9:
                    78:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:80:4A:0A:84:BC:9D:0B:F7:DA:89:40:B2:62:7A:56:29:EC:7F:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/0b5358ff-0f8a-33bc-8f97-102215ca0f93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.9.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:bf:17:c6:a7:13:7c:69:59:98:d4:f1:22:0b:20:b9:ee:4e:
         d9:12:21:23:44:53:c6:1f:ed:0a:b2:76:d0:9f:a2:03:a2:d2:
         ca:a2:4f:31:43:10:a5:8f:47:a5:95:34:33:6e:21:b0:68:07:
         a2:90:b9:de:c9:18:c5:54:ca:7a:bf:15:b3:ee:3f:0d:f6:69:
         ad:29:36:31:db:fc:84:ea:e5:08:51:45:ae:58:13:fd:c8:4f:
         b6:79:ef:47:f9:8f:16:0b:6e:df:c7:e5:97:84:68:0e:b5:7e:
         d3:65:32:8a:45:ee:08:43:16:c6:4f:67:29:6c:cb:5b:2f:07:
         ca:40:14:18:43:ff:fa:28:0c:73:8f:0e:bd:02:b3:f4:6f:eb:
         79:ae:7e:76:04:80:1c:30:ce:32:98:b5:6b:98:c1:78:c7:4a:
         32:09:92:32:ad:db:d2:07:96:98:d6:28:48:09:5a:69:dc:e5:
         97:33:af:1c:b6:b4:e1:b0:ea:c1:e5:9f:ab:ef:7f:83:de:c3:
         93:92:27:e7:be:34:ce:c6:d3:2b:50:65:8d:a9:c0:5a:4c:63:
         58:9d:c3:c6:25:11:a4:17:95:8c:8c:32:2c:6a:d8:c0:b7:3e:
         bf:f1:91:cb:3a:8f:aa:4c:7d:4f:ff:5c:06:93:25:cf:91:9d:
         7c:e3:8c:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 05:20:54 2024 by rpki-client on console-fra.rpki-client.org