Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/cc495dd5-77ea-3096-8ff8-cfe62c88a6c0.roa
File:                     cc495dd5-77ea-3096-8ff8-cfe62c88a6c0.roa (raw, json)
Hash identifier:          5jJRQ20kFK0uymDWZsZbEdwLWcN4lhn11OD2MrGpYrQ=
Subject key identifier:   6C:26:2E:B0:B0:BD:E6:C2:49:9A:3F:D6:BB:17:12:61:F7:6E:7F:E7
Certificate issuer:       /CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
Certificate serial:       010D0C9F432858466F5D3F9AD2109F1AF20E4440
Authority key identifier: EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/cc495dd5-77ea-3096-8ff8-cfe62c88a6c0.roa
Signing time:             Fri 05 Jul 2024 07:55:37 +0000
ROA not before:           Fri 05 Jul 2024 07:55:37 +0000
ROA not after:            Thu 03 Oct 2024 07:55:37 +0000
asID:                     21859
IP address blocks:        64.40.153.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 04 Sep 2024 02:10:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:6f:5d:3f:9a:d2:10:9f:1a:f2:0e:44:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
        Validity
            Not Before: Jul  5 07:55:37 2024 GMT
            Not After : Oct  3 07:55:37 2024 GMT
        Subject: CN=0cc2a721-343e-4b2e-9469-c5a3ee70429d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:77:ae:28:65:de:0c:89:0e:e3:61:99:76:b9:
                    fa:44:0a:e6:90:52:4a:8c:1a:ee:62:a6:ff:63:83:
                    50:5d:79:97:1b:59:df:b7:07:2a:d9:55:4e:5e:c8:
                    3d:6a:10:ee:37:17:bb:a8:f9:de:6e:96:e8:1b:d8:
                    ab:ef:8e:63:1a:ec:42:2e:5d:a2:f6:49:22:11:2c:
                    ac:9c:63:58:56:ba:34:58:c4:b1:71:e7:63:a4:a9:
                    fa:ad:12:46:8b:8a:60:c9:f2:b7:e4:3e:02:21:50:
                    86:34:b9:af:1b:50:fe:e9:c3:f0:6e:c8:28:ec:83:
                    14:1b:5c:0b:7c:e7:4f:2e:d7:e0:c0:73:88:7f:96:
                    5d:07:86:61:4a:7d:73:fd:c2:18:8b:b2:62:4e:6b:
                    76:64:d2:62:4a:38:e5:77:ea:f0:b8:6b:80:ae:77:
                    ee:ec:44:ed:64:3b:a6:60:43:ed:97:bb:83:98:2d:
                    ee:b6:0e:48:60:9a:f9:3f:b4:71:66:2f:96:fa:bd:
                    ac:35:7f:af:20:5c:3f:75:94:75:54:b1:9b:c0:ab:
                    a6:3d:bf:56:fc:09:8e:f8:89:35:07:f0:1c:d1:e0:
                    4d:b9:82:89:32:a0:22:97:bb:c9:e2:e2:ea:cd:65:
                    ca:d9:cc:11:4b:6a:65:04:1d:0b:cc:46:05:9b:94:
                    24:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:26:2E:B0:B0:BD:E6:C2:49:9A:3F:D6:BB:17:12:61:F7:6E:7F:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/cc495dd5-77ea-3096-8ff8-cfe62c88a6c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl

            X509v3 Authority Key Identifier:
                keyid:EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.40.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:3d:44:68:bf:0a:dc:ff:c5:d0:9e:c0:f3:99:5c:90:df:f5:
         f9:5d:f6:d9:41:9e:11:c4:be:4d:38:09:09:68:6b:fc:aa:db:
         ce:5d:56:dd:f8:da:71:20:6c:e4:e1:35:46:06:3b:23:a7:3c:
         74:6e:ee:e2:8e:7f:cc:44:c1:b0:86:fa:f0:75:bf:95:d6:50:
         39:45:61:f7:ff:53:b0:b9:79:f7:69:3c:77:ab:69:e2:a5:88:
         bc:42:95:f9:d0:03:7d:21:8a:e5:6e:ea:1b:04:0d:67:3c:ca:
         9e:78:3e:43:75:f5:dc:9a:c6:0e:f4:a1:6f:3c:5e:4d:15:d0:
         bf:f4:33:c0:9f:45:c3:5a:60:88:bd:4b:c6:1a:f0:88:5b:7a:
         3d:8d:1b:31:bd:81:c2:8a:8e:5b:04:a3:c5:d8:47:cc:0b:40:
         d2:d3:bf:0c:61:91:62:cf:d5:d6:c8:08:e6:0c:f0:32:32:cf:
         33:53:49:a4:59:4c:8e:e5:45:f7:de:75:69:82:6a:f3:27:27:
         af:66:ff:d3:61:b6:cc:08:f8:c9:e1:2c:3e:23:6a:0b:34:77:
         67:89:5c:d7:10:99:d6:15:69:ae:02:8d:87:97:c5:ea:2a:56:
         28:5a:22:e5:c8:1f:9b:4c:d3:9c:fc:a5:a3:a0:64:4d:5f:bc:
         85:b7:0e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 4 03:24:24 2024 by rpki-client on console-fra.rpki-client.org