Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/93183cff-39f0-3d18-8bcc-ec525dfdf74d.roa
File:                     93183cff-39f0-3d18-8bcc-ec525dfdf74d.roa (raw, json)
Hash identifier:          ay6E1c5KYcbFtg8VN9nBLOoRSJkm0USmPBI0WPOZRFo=
Subject key identifier:   FC:25:95:F8:1D:66:9E:07:DE:46:C5:88:8D:34:08:A4:72:26:6C:E3
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F432858430A27C12F062D99EE8EE92BC0
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/93183cff-39f0-3d18-8bcc-ec525dfdf74d.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36492
IP address blocks:        64.9.246.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:13:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0a:27:c1:2f:06:2d:99:ee:8e:e9:2b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=a61d3266-b8d7-4809-af60-3d688cd6808c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7c:34:f1:6a:23:c0:b4:52:2c:78:97:bc:a6:
                    fe:61:96:62:f8:13:f2:b2:9e:69:ad:c9:2b:4e:bd:
                    40:6b:d6:bd:4c:91:eb:0c:d0:89:3c:40:89:e8:29:
                    7c:11:fe:67:90:9a:32:9f:1e:a5:47:b0:53:5b:13:
                    c0:cc:f4:55:10:67:2f:db:6f:1b:f9:2c:d7:52:54:
                    d4:ab:eb:72:18:6e:e5:39:80:f9:b5:e2:47:df:e6:
                    df:6c:61:58:07:8a:44:38:f6:cb:56:24:ca:e5:69:
                    f1:69:1e:5e:6a:2a:61:06:1c:ab:dd:ac:a9:9a:65:
                    8b:91:0f:16:e1:05:ac:21:37:58:99:5d:b8:2b:5c:
                    10:34:52:1c:19:f8:80:9a:a5:39:b3:c2:8d:e9:d4:
                    13:1b:0f:87:6b:99:ac:87:c7:7b:0f:e3:73:a2:1a:
                    4c:e8:56:5d:6a:f2:eb:b7:fc:1a:9f:00:f1:d2:03:
                    19:94:3c:e5:77:20:83:76:f3:99:79:79:2d:65:4f:
                    44:72:00:36:2e:23:16:e8:a0:e7:d8:ef:18:23:b0:
                    f4:aa:7b:f2:49:53:e6:df:2d:ce:06:4a:c4:f5:4b:
                    34:08:87:e4:7d:d1:3a:19:68:a3:c5:bd:48:45:57:
                    05:fe:25:f2:d5:d4:9a:48:bf:6b:ff:f1:80:54:d1:
                    b4:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:25:95:F8:1D:66:9E:07:DE:46:C5:88:8D:34:08:A4:72:26:6C:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/93183cff-39f0-3d18-8bcc-ec525dfdf74d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.9.246.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:dc:9f:79:22:ef:3b:91:5a:de:4d:5e:27:41:59:db:74:37:
         2f:8a:a8:e6:97:00:5e:3f:5f:3b:5e:19:ee:18:d3:39:2d:cf:
         13:a2:02:6a:cd:51:f1:43:e0:33:8e:25:c6:5d:a8:dd:a8:98:
         74:12:ca:87:3b:f9:f2:ba:a4:0b:4e:96:c4:ff:76:1a:2b:92:
         10:e0:df:1e:96:c9:77:38:9c:98:09:e8:fb:51:8a:a1:d1:5b:
         6d:a9:b8:64:43:f4:67:d1:41:09:ca:c4:97:17:4f:5b:a5:a8:
         ac:ff:f0:10:93:f2:9d:e3:16:04:0a:43:ec:9c:11:86:20:da:
         78:0d:89:cf:7e:15:f3:47:2d:2e:e7:d4:fd:90:c6:f0:48:63:
         d8:ef:6b:a1:e6:49:37:f1:5b:ee:35:53:cb:d9:54:a2:83:59:
         da:aa:ce:a3:f1:22:62:67:0b:78:31:44:2d:d9:34:5b:dc:12:
         5d:c1:2a:a6:2e:7b:87:7c:f0:38:04:e1:b4:4f:12:b5:19:41:
         78:de:ec:b8:b1:ab:36:0a:46:40:ed:eb:d0:a7:4c:6a:c0:e8:
         1a:51:1f:9e:24:f4:c3:5c:21:1a:1e:aa:d1:e2:65:dd:ee:3c:
         3f:38:cb:ec:53:79:c3:b3:be:8b:8d:bc:bf:8c:08:b6:1f:0a:
         ea:b0:17:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 05:20:55 2024 by rpki-client on console-fra.rpki-client.org