Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/af96ddb3-b4c3-38b5-a489-1e324785cc81.roa
File:                     af96ddb3-b4c3-38b5-a489-1e324785cc81.roa (raw, json)
Hash identifier:          FHzedrkRSQ4ueKB1/wXEdqcekSSD1+uonsRHoMWUYxs=
Subject key identifier:   69:24:72:3B:8A:9F:A0:8E:54:76:0B:F6:E5:F3:6D:0F:17:B2:EE:AA
Certificate issuer:       /CN=51407cd8-c830-49e6-9db4-7ddac75eb03f
Certificate serial:       010D0C9F432858468EAA216B95AAEE0FC12FD280
Authority key identifier: CB:B5:D5:82:48:AA:4D:D8:D6:8A:85:42:03:C4:A9:BB:89:C6:56:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/af96ddb3-b4c3-38b5-a489-1e324785cc81.roa
Signing time:             Tue 16 Jul 2024 13:00:32 +0000
ROA not before:           Tue 16 Jul 2024 13:00:32 +0000
ROA not after:            Mon 14 Oct 2024 13:00:32 +0000
asID:                     13213
IP address blocks:        50.115.120.0/21 maxlen: 24

Validation:               Failed, certificate revoked on Wed 17 Jul 2024 15:32:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:8e:aa:21:6b:95:aa:ee:0f:c1:2f:d2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51407cd8-c830-49e6-9db4-7ddac75eb03f
        Validity
            Not Before: Jul 16 13:00:32 2024 GMT
            Not After : Oct 14 13:00:32 2024 GMT
        Subject: CN=12bee539-b174-4239-b497-7be4ce7d32f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c5:97:67:10:d1:18:47:c1:4a:74:4d:b7:db:
                    d0:0e:d8:8a:04:f5:fe:00:9a:5c:48:69:b1:8f:d8:
                    75:3d:71:b8:33:4c:89:5a:79:bd:a1:a5:fe:cf:30:
                    36:f4:9f:b3:65:5e:4e:f8:15:76:51:a7:ad:d6:19:
                    2e:e9:70:25:c3:d3:e3:17:7c:a0:a9:e3:a8:37:00:
                    5f:62:69:3d:fd:ed:d4:74:90:9e:86:d3:37:9f:7e:
                    02:c0:07:85:a9:7b:43:55:c9:12:12:2b:5a:9b:27:
                    50:34:27:fc:5d:38:28:58:d8:bd:59:7a:ff:42:14:
                    32:78:4e:db:06:c2:a3:6a:13:bd:68:d1:c8:23:c9:
                    7b:a1:d8:53:6f:b9:47:85:d5:82:02:bb:78:34:9e:
                    8a:0f:bc:33:7c:c0:b7:41:5f:e9:c7:2f:9c:b2:4b:
                    b6:7d:93:9d:59:b3:fc:46:07:37:db:80:38:3c:7e:
                    42:6a:c7:ad:b5:83:da:96:f4:55:16:ae:5e:ce:f1:
                    79:fe:df:bc:25:93:a6:2e:e0:f5:4d:23:7f:55:de:
                    94:2f:ea:27:cb:80:4f:c6:4d:d9:3b:2d:5e:de:b3:
                    d1:c5:ae:cc:83:1b:df:72:07:25:de:80:ce:49:98:
                    a4:c8:47:0d:61:1f:08:56:f5:90:e9:e1:8d:28:a7:
                    e4:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:24:72:3B:8A:9F:A0:8E:54:76:0B:F6:E5:F3:6D:0F:17:B2:EE:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/af96ddb3-b4c3-38b5-a489-1e324785cc81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.crl

            X509v3 Authority Key Identifier:
                keyid:CB:B5:D5:82:48:AA:4D:D8:D6:8A:85:42:03:C4:A9:BB:89:C6:56:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.115.120.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:a0:f2:0d:f1:d5:2f:37:76:be:a9:83:c7:df:a0:41:6f:d0:
         4b:5a:ee:d6:bc:33:ea:f1:1c:5f:16:a2:3f:b2:6b:21:a1:bf:
         6f:18:70:e9:dd:54:7e:af:5b:74:9f:f6:f8:d0:52:79:e3:48:
         87:2e:24:ab:93:39:f2:28:b9:54:21:7c:d1:fa:48:08:e2:34:
         84:17:df:d3:59:62:53:44:72:22:a8:d3:d6:08:9d:66:8c:f4:
         11:c4:3b:24:b0:0d:f6:f7:78:4d:5a:e8:f4:b9:db:2a:b2:ea:
         41:77:60:87:0c:56:61:df:18:cd:74:54:9f:e1:5a:1b:11:f5:
         f8:54:0c:88:77:36:b9:8f:e7:bb:1e:ee:b0:cd:1b:16:0a:74:
         5d:40:b4:f5:6d:18:59:a7:4d:e0:1f:7b:25:1a:f0:b0:14:98:
         45:83:c3:2a:86:a1:3b:81:24:ca:66:29:37:32:5b:83:c6:35:
         63:9a:07:d1:84:61:76:18:09:ef:d0:ba:a1:d9:be:c2:15:86:
         3a:f3:82:45:7a:76:a1:78:6c:45:00:80:93:75:50:88:00:89:
         ae:39:71:8c:6b:06:24:ff:07:aa:e0:00:48:fa:9b:c9:79:e7:
         37:ce:90:e1:74:a8:81:a6:38:bd:e3:ab:54:0a:c1:58:29:8a:
         b7:7d:b6:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 17 19:33:28 2024 by rpki-client on console-fra.rpki-client.org