Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/8e5f2008-3583-3be0-92f8-c707c094cfc4.roa
File:                     8e5f2008-3583-3be0-92f8-c707c094cfc4.roa (raw, json)
Hash identifier:          7Y3aAm34toGzvQjb2ni4M8ieVY5Rj5X6/6v4wz89n+U=
Subject key identifier:   92:B5:C3:A1:AF:02:18:5E:89:F5:5C:7F:3A:2A:12:C9:50:72:9A:30
Certificate issuer:       /CN=7daa4589-66d8-4675-8538-e075ba80ecd3
Certificate serial:       010D0C9F432858470C4B0F17FB51BE3B22A50D00
Authority key identifier: BF:D4:FE:F7:0A:A9:40:EC:B8:54:09:F4:36:9B:34:3F:86:5A:0A:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/8e5f2008-3583-3be0-92f8-c707c094cfc4.roa
Signing time:             Fri 30 Aug 2024 13:00:41 +0000
ROA not before:           Fri 30 Aug 2024 13:00:41 +0000
ROA not after:            Thu 28 Nov 2024 14:00:41 +0000
asID:                     7018
IP address blocks:        170.39.164.0/24 maxlen: 24
                          170.39.166.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 08 Nov 2024 00:16:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:0c:4b:0f:17:fb:51:be:3b:22:a5:0d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7daa4589-66d8-4675-8538-e075ba80ecd3
        Validity
            Not Before: Aug 30 13:00:41 2024 GMT
            Not After : Nov 28 14:00:41 2024 GMT
        Subject: CN=4a92b626-97f6-472c-b960-fc2062fdf675
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:3b:0a:d3:20:7f:9d:c8:88:a3:87:d2:6d:81:
                    89:47:a7:75:3d:8e:6e:47:2f:35:34:c3:57:8a:11:
                    da:0e:34:bd:c2:82:f0:08:df:8e:d7:67:11:4a:80:
                    b9:a7:d1:cb:00:12:59:49:41:2d:26:08:42:2e:d6:
                    a1:63:2a:b0:44:d5:72:38:86:f0:b5:97:1d:a3:a4:
                    68:fb:ce:da:7a:10:aa:c3:19:d7:ac:e0:b2:3d:87:
                    41:7b:bb:bc:94:e7:84:c0:18:49:36:16:16:b5:23:
                    0b:14:de:d5:5e:47:a8:a5:de:81:db:b9:2e:78:5c:
                    ba:b8:0b:9b:62:dc:62:df:1b:30:73:7c:11:95:30:
                    33:bc:55:35:55:6a:f5:bc:ed:0c:69:71:5f:ba:4f:
                    3c:4a:c4:d5:83:91:30:3d:7e:15:d2:5f:21:43:3e:
                    9a:25:02:00:95:38:a7:1e:33:d3:4e:b5:28:e0:b8:
                    34:e6:33:ee:07:01:e2:ca:26:17:9c:70:10:5f:84:
                    ac:9d:72:f3:91:d5:41:e0:1e:2c:50:28:1d:ea:ff:
                    5c:ff:0a:10:6a:65:75:cd:b8:32:a5:de:c7:3a:e9:
                    c0:57:58:b9:22:ee:e2:d6:f6:10:30:7d:96:41:5e:
                    8c:0f:c3:98:23:b7:d1:99:a3:c2:62:dc:85:94:75:
                    0b:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:B5:C3:A1:AF:02:18:5E:89:F5:5C:7F:3A:2A:12:C9:50:72:9A:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/8e5f2008-3583-3be0-92f8-c707c094cfc4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3/7daa4589-66d8-4675-8538-e075ba80ecd3.crl

            X509v3 Authority Key Identifier:
                keyid:BF:D4:FE:F7:0A:A9:40:EC:B8:54:09:F4:36:9B:34:3F:86:5A:0A:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7daa4589-66d8-4675-8538-e075ba80ecd3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.39.164.0/24
                  170.39.166.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:5f:5c:c7:cd:d5:f1:c9:47:06:a1:d9:cf:89:76:19:04:30:
         e6:6f:5b:27:32:f7:f6:dd:2c:a2:ee:9c:42:9d:60:72:7c:d9:
         ca:a6:b2:77:52:d9:3d:ac:3d:54:67:56:d7:31:cf:10:1e:b4:
         1b:76:87:5e:9a:32:c0:c5:c3:52:dc:3b:6b:4d:d0:9d:c6:64:
         d0:75:32:48:07:0a:3a:79:39:69:ac:8f:37:d2:60:7c:0e:f7:
         85:47:60:d3:f7:17:d2:5c:ae:ae:70:e3:fd:60:58:4e:68:3f:
         57:f0:55:6b:59:c7:11:37:b4:31:04:bb:73:38:fd:84:5f:a6:
         45:16:8a:2d:e7:b9:b4:82:f6:1c:51:75:d3:db:dd:15:34:6b:
         cc:13:3a:25:39:fb:05:1c:fd:cd:fa:4a:d1:e2:22:ae:06:e8:
         26:49:0c:9b:62:ea:b2:7e:a3:ff:d4:ce:b1:b4:3d:55:b1:83:
         3f:f5:ad:de:78:f8:ac:34:4d:93:ad:42:9b:d2:88:7b:69:a9:
         c7:8f:fe:f3:76:d6:55:0c:3a:f1:4b:cd:59:d4:d4:24:d2:ef:
         47:fe:48:37:23:1d:20:ef:05:36:f3:6d:65:c5:78:27:3d:65:
         6c:e4:d5:3b:59:48:eb:97:63:65:61:4a:63:b8:03:73:5c:bb:
         10:64:49:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 8 03:37:48 2024 by rpki-client on console-ams.rpki-client.org