Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/4185bd6d-9665-3699-b914-39b98cced1ec.roa
File:                     4185bd6d-9665-3699-b914-39b98cced1ec.roa (raw, json)
Hash identifier:          657+oNbBi+DtSMLLGzCm+ASCb+8Q2U0qRIagdYrSVto=
Subject key identifier:   D7:99:26:2F:90:44:19:F2:3A:D3:84:E0:97:BE:2C:64:2D:8B:5B:F1
Certificate issuer:       /CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
Certificate serial:       010D0C9F432858470550322ACA9DB41E53B81A80
Authority key identifier: 34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/4185bd6d-9665-3699-b914-39b98cced1ec.roa
Signing time:             Wed 28 Aug 2024 01:00:31 +0000
ROA not before:           Wed 28 Aug 2024 01:00:31 +0000
ROA not after:            Tue 26 Nov 2024 02:00:31 +0000
asID:                     54548
IP address blocks:        74.208.60.0/22 maxlen: 32
                          198.71.57.0/24 maxlen: 32
                          198.71.59.0/24 maxlen: 32
                          198.251.67.0/24 maxlen: 32
                          198.251.76.0/24 maxlen: 32

Validation:               Failed, certificate revoked on Fri 13 Sep 2024 14:23:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:05:50:32:2a:ca:9d:b4:1e:53:b8:1a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
        Validity
            Not Before: Aug 28 01:00:31 2024 GMT
            Not After : Nov 26 02:00:31 2024 GMT
        Subject: CN=5328809b-b5c5-4b20-9a40-51de0f8f0b9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:fe:94:b0:7c:27:b6:68:49:c7:22:05:4f:da:
                    82:5f:3d:70:e8:53:0b:57:b1:48:fe:c6:a3:13:47:
                    98:21:8e:f7:f7:2f:ae:c2:d8:bf:73:2e:f9:7a:73:
                    3e:92:03:b3:76:6d:af:e8:1c:56:36:37:bb:f7:d5:
                    01:e0:65:cf:2d:e1:21:77:c4:2b:93:14:fc:11:fc:
                    24:cf:90:5d:3f:74:05:2b:87:81:0e:e6:da:02:28:
                    9f:ff:24:41:2e:37:42:c9:41:b5:b2:d7:f4:32:29:
                    c6:04:ed:36:8d:cc:82:ca:da:2c:20:c1:5c:32:f3:
                    b5:1a:f4:fc:5e:95:4b:80:08:69:5e:1d:97:d4:6c:
                    4e:39:33:61:64:1a:4f:7c:80:f7:8b:c6:ca:7d:a3:
                    65:e3:65:3e:3c:82:6e:2f:7e:b9:23:c3:8d:ac:3d:
                    62:2d:f6:b1:39:c5:3b:fc:49:21:7f:89:d9:6f:c6:
                    37:dd:09:18:3a:45:bb:7a:a8:fd:28:4d:49:70:5f:
                    85:ec:ce:54:bf:d5:d6:b7:08:87:1c:06:00:11:a3:
                    e0:cf:e1:00:5d:5f:60:60:cc:3c:17:cf:a3:f3:11:
                    e5:7b:60:d3:46:75:ed:f7:f1:8b:b7:68:80:13:8a:
                    90:33:41:f7:68:24:4f:9f:38:5c:4b:a5:f1:2f:24:
                    7d:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:99:26:2F:90:44:19:F2:3A:D3:84:E0:97:BE:2C:64:2D:8B:5B:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/4185bd6d-9665-3699-b914-39b98cced1ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.crl

            X509v3 Authority Key Identifier:
                keyid:34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.208.60.0/22
                  198.71.57.0/24
                  198.71.59.0/24
                  198.251.67.0/24
                  198.251.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d9:2c:70:3b:15:c6:a3:8e:7e:05:b1:2b:63:18:0f:e2:8b:8d:
         85:16:9c:36:f9:20:6c:01:a8:2f:d3:8f:62:84:e2:35:28:40:
         e3:25:7e:02:50:48:34:bf:ce:b4:57:a6:6b:1b:f8:e9:4d:25:
         e9:f8:43:eb:45:5a:e0:d6:02:a9:56:eb:86:4d:b3:d3:f1:67:
         35:62:56:8a:00:b9:14:fa:d5:14:0c:c8:23:32:6d:82:bf:d7:
         46:2f:f4:8a:7f:bd:0d:dd:69:fe:e1:ed:69:42:8c:44:93:be:
         8b:e9:a5:b4:c5:40:c2:06:0a:4b:54:c9:cf:01:8c:a2:4d:83:
         d3:63:74:14:a8:9c:ba:3c:50:f0:5c:41:d9:11:fd:a8:0d:f9:
         15:19:10:ef:54:cd:91:1e:b5:e7:ef:ad:b9:49:23:d1:44:52:
         15:06:53:79:ac:71:be:24:c1:f9:47:5d:54:8c:ce:5d:1e:06:
         00:2c:42:e1:d2:e8:bb:11:01:ac:35:5e:ce:70:b6:c6:b5:bd:
         0e:e5:8d:4c:5a:54:6d:68:d5:a9:71:c9:21:1e:af:5f:2f:fd:
         03:5b:00:ec:13:80:65:09:39:9a:2e:1d:08:56:18:f4:33:98:
         c4:42:68:00:7d:10:e6:b5:19:2f:d5:f3:31:f3:15:f2:72:86:
         6e:86:f5:98
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Sep 13 16:54:30 2024 by rpki-client on console-ams.rpki-client.org