Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/1269a2f4-6f97-3085-ae0a-5c3f2a9b5cc5.roa
File:                     1269a2f4-6f97-3085-ae0a-5c3f2a9b5cc5.roa (raw, json)
Hash identifier:          LpoBn2uLhtjv67aaXlxNMPw3mn94lfcTg1vUebdTu/k=
Subject key identifier:   C2:07:43:72:DA:4D:38:B9:B4:C0:5C:A0:E6:B1:FD:EA:4E:9A:7F:9D
Certificate issuer:       /CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
Certificate serial:       010D0C9F43285846B45A5B7DC0E6D330583D3A00
Authority key identifier: 34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/1269a2f4-6f97-3085-ae0a-5c3f2a9b5cc5.roa
Signing time:             Tue 30 Jul 2024 01:00:28 +0000
ROA not before:           Tue 30 Jul 2024 01:00:28 +0000
ROA not after:            Mon 28 Oct 2024 01:00:28 +0000
asID:                     54548
IP address blocks:        74.208.38.0/23 maxlen: 32
                          74.208.188.0/23 maxlen: 32

Validation:               Failed, certificate revoked on Fri 13 Sep 2024 14:22:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:b4:5a:5b:7d:c0:e6:d3:30:58:3d:3a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
        Validity
            Not Before: Jul 30 01:00:28 2024 GMT
            Not After : Oct 28 01:00:28 2024 GMT
        Subject: CN=0b6409e6-59b0-4389-8376-81fd82d8b7d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:95:ef:a3:47:4c:eb:91:86:fa:98:8d:b2:24:
                    08:0e:99:58:26:c6:82:7e:d7:c2:15:e1:14:1b:81:
                    eb:05:0e:fd:9d:31:f6:08:f7:c9:12:60:ee:fe:b4:
                    fc:0c:38:24:a9:ac:b7:df:c9:9c:48:dd:0b:31:74:
                    01:6d:20:a1:75:82:73:c0:58:67:08:2c:a3:79:db:
                    93:55:77:bc:37:40:2f:2e:b7:25:bb:75:de:c6:25:
                    61:be:b3:a6:7b:27:aa:d1:d0:2d:29:3c:b2:6e:dd:
                    25:f8:d8:22:9e:a2:0c:94:12:fa:1e:7c:00:99:79:
                    d6:f8:48:1b:23:7f:f6:2e:82:55:44:6a:ab:02:c3:
                    49:e7:2a:d6:a9:48:c2:7c:58:df:4a:ce:12:bd:ba:
                    53:1d:3f:63:52:81:86:7d:a6:ad:d5:44:7c:52:fe:
                    f7:90:08:a6:6a:ab:51:32:8c:a1:28:4b:7b:af:ac:
                    c3:8e:91:cc:f2:7a:f0:3f:75:35:58:3b:10:08:37:
                    e7:ea:6f:d3:fb:fe:ea:e1:e4:18:e4:03:76:92:c4:
                    13:5c:bb:13:80:83:a4:f4:81:a6:35:3a:06:57:9c:
                    ca:7a:67:96:d3:bd:aa:e9:28:d5:73:e5:3b:ae:09:
                    bb:24:f0:43:35:96:55:04:1a:3c:51:eb:fa:7b:e8:
                    89:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:07:43:72:DA:4D:38:B9:B4:C0:5C:A0:E6:B1:FD:EA:4E:9A:7F:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/1269a2f4-6f97-3085-ae0a-5c3f2a9b5cc5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.crl

            X509v3 Authority Key Identifier:
                keyid:34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.208.38.0/23
                  74.208.188.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:e4:5d:cd:26:4b:fc:af:bd:43:bb:ab:bd:bf:84:3e:ee:46:
         57:00:fb:a6:1b:53:4c:dc:fc:e9:4c:f3:43:0d:b5:d5:e1:ec:
         db:aa:31:44:73:32:7a:29:f8:48:48:f6:e4:9b:62:40:e5:5b:
         38:95:8c:0c:aa:89:88:83:d3:14:4b:4b:22:b6:3e:35:fe:c4:
         1c:df:8e:d3:17:ae:a1:7c:3e:5c:ee:db:a8:37:0d:c8:48:66:
         9a:58:1d:d0:fd:c0:79:69:87:d0:85:8c:d2:d5:6a:f0:03:1e:
         e8:a8:41:31:8b:61:07:c5:a2:f6:ec:08:40:c7:05:86:47:8d:
         f0:64:1d:92:55:ad:59:6a:5e:13:9e:01:31:8d:e1:30:86:54:
         5c:40:db:c8:b0:a3:cd:24:fb:0e:00:39:a3:8c:8f:f5:0c:41:
         cb:c4:74:ec:f7:60:c4:1a:a0:0d:06:43:ec:59:cc:c8:31:68:
         45:61:57:d2:5c:9f:81:ec:4d:15:94:11:25:bf:af:4c:89:05:
         86:ed:1b:65:83:bf:00:4e:78:39:fa:dc:89:7b:9d:79:43:4f:
         71:9e:90:29:93:e0:41:4b:c7:b4:00:6f:88:60:a1:a1:65:6d:
         1b:41:50:05:31:d3:8f:0e:0c:62:97:42:53:42:bf:58:ea:3d:
         27:08:17:5c
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEa0Wlt9wObTMFg9OgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2JhNzk5ODgtODBiYy00ZmNiLThmYWYtNjI0NDAwZDVm
MWNlMB4XDTI0MDczMDAxMDAyOFoXDTI0MTAyODAxMDAyOFowLzEtMCsGA1UEAxMk
MGI2NDA5ZTYtNTliMC00Mzg5LTgzNzYtODFmZDgyZDhiN2QwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpXvo0dM65GG+piNsiQIDplYJsaCftfCFeEU
G4HrBQ79nTH2CPfJEmDu/rT8DDgkqay338mcSN0LMXQBbSChdYJzwFhnCCyjeduT
VXe8N0AvLrclu3XexiVhvrOmeyeq0dAtKTyybt0l+NginqIMlBL6HnwAmXnW+Egb
I3/2LoJVRGqrAsNJ5yrWqUjCfFjfSs4SvbpTHT9jUoGGfaat1UR8Uv73kAimaqtR
MoyhKEt7r6zDjpHM8nrwP3U1WDsQCDfn6m/T+/7q4eQY5AN2ksQTXLsTgIOk9IGm
NToGV5zKemeW072q6SjVc+U7rgm7JPBDNZZVBBo8Uev6e+iJcQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFMIHQ3LaTTi5tMBcoOax/epOmn+dMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83YmE3
OTk4OC04MGJjLTRmY2ItOGZhZi02MjQ0MDBkNWYxY2UvMTI2OWEyZjQtNmY5Ny0z
MDg1LWFlMGEtNWMzZjJhOWI1Y2M1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvN2JhNzk5ODgtODBiYy00ZmNiLThm
YWYtNjI0NDAwZDVmMWNlLzdiYTc5OTg4LTgwYmMtNGZjYi04ZmFmLTYyNDQwMGQ1
ZjFjZS5jcmwwHwYDVR0jBBgwFoAUNBe8v2tKYwrKo8WIvEUP5ZR5xFowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC83YmE3OTk4OC04MGJjLTRmY2ItOGZhZi02MjQ0
MDBkNWYxY2UuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBStAmAwQB
StC8MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBACDkXc0mS/yvvUO7q72/hD7uRlcA+6YbU0zc/OlM80MNtdXh
7NuqMURzMnop+EhI9uSbYkDlWziVjAyqiYiD0xRLSyK2PjX+xBzfjtMXrqF8Plzu
26g3DchIZppYHdD9wHlph9CFjNLVavADHuioQTGLYQfFovbsCEDHBYZHjfBkHZJV
rVlqXhOeATGN4TCGVFxA28iwo80k+w4AOaOMj/UMQcvEdOz3YMQaoA0GQ+xZzMgx
aEVhV9Jcn4HsTRWUESW/r0yJBYbtG2WDvwBOeDn63Il7nXlDT3GekCmT4EFLx7QA
b4hgoaFlbRtBUAUx048ODGKXQlNCv1jqPScIF1w=
-----END CERTIFICATE-----
Generated at Fri Sep 13 16:54:30 2024 by rpki-client on console-ams.rpki-client.org