Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/16bcc023-71c3-34de-82ac-715e6c83faff.roa
File:                     16bcc023-71c3-34de-82ac-715e6c83faff.roa (raw, json)
Hash identifier:          zbYgDokKQ/iTbfD97bHPKOB0KxLhhy0VxJfLr2bcdQA=
Subject key identifier:   E3:55:18:80:81:F9:4D:B6:4B:C1:D3:26:CD:48:E8:09:34:AC:48:87
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285847FF4A662A09D71202B2059DD0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/16bcc023-71c3-34de-82ac-715e6c83faff.roa
Signing time:             Mon 25 Nov 2024 14:00:39 +0000
ROA not before:           Mon 25 Nov 2024 14:00:39 +0000
ROA not after:            Sun 23 Feb 2025 14:00:39 +0000
asID:                     396982
IP address blocks:        34.99.32.0/19 maxlen: 19
Validation:               Failed, certificate revoked on Tue 21 Jan 2025 02:37:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ff:4a:66:2a:09:d7:12:02:b2:05:9d:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Nov 25 14:00:39 2024 GMT
            Not After : Feb 23 14:00:39 2025 GMT
        Subject: CN=6ec4da0a-2c27-4c0f-a6b0-32f9e4bc09de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:39:18:6e:58:f1:26:72:60:58:b9:0b:af:09:
                    06:58:25:e4:cc:06:d8:67:7d:2f:4b:84:e8:36:c6:
                    35:79:fd:70:49:ef:ff:bb:75:41:4b:14:fd:f4:5c:
                    d1:3e:92:72:1b:f9:85:cd:13:a6:a6:c5:94:cc:a8:
                    1a:11:68:cb:49:be:4e:4e:89:4f:9f:c0:da:26:71:
                    93:41:0b:67:c3:a3:a9:76:3e:c5:8d:77:a2:b8:72:
                    ca:c3:b2:d9:8c:99:3d:e9:68:ac:f6:ea:a9:57:93:
                    14:05:b4:b4:7f:f9:d6:36:c7:a3:8d:95:2d:82:fb:
                    60:0e:77:49:26:de:95:ef:44:d7:0c:65:e8:0e:e9:
                    19:62:dc:88:d1:f6:ca:cf:36:39:32:2b:34:75:37:
                    8c:81:ba:0e:c1:7c:ae:05:3a:8d:52:d5:32:22:39:
                    ae:54:d6:24:ab:7c:b6:8d:0c:53:4f:b0:09:8c:d7:
                    e1:1c:cd:48:ce:04:e7:be:ba:52:af:97:d8:3c:38:
                    2e:a1:81:35:91:1f:43:f0:3e:db:8e:75:d4:08:67:
                    44:ae:ac:27:c2:ef:ef:59:06:59:55:c9:e8:5a:59:
                    51:6e:7c:fb:94:f2:19:99:5b:b5:b2:49:f1:f6:20:
                    50:81:0d:ea:c7:4e:33:5f:33:65:53:ad:64:d4:07:
                    fc:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:55:18:80:81:F9:4D:B6:4B:C1:D3:26:CD:48:E8:09:34:AC:48:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/16bcc023-71c3-34de-82ac-715e6c83faff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.99.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:06:0e:30:16:80:60:c6:b7:e6:40:23:9b:2d:b2:1c:37:b8:
         c9:69:b3:86:0a:82:b4:56:e4:cd:d5:4b:d0:6b:78:01:09:bc:
         1c:95:7b:05:fa:55:2f:35:3f:18:6a:86:39:9e:c2:87:95:e2:
         c5:fe:2f:ca:fb:92:b1:e7:f5:bb:cb:04:ad:25:ea:30:51:a1:
         82:65:7c:d5:83:60:28:f2:51:6b:8e:78:32:1c:a5:d2:39:51:
         4c:67:91:e7:c1:72:20:8b:85:27:bc:5e:5b:9a:31:2f:65:41:
         9e:87:90:c2:72:6b:02:59:c8:c1:b1:58:dc:66:9a:ba:1c:b3:
         9a:84:ea:0c:dc:55:36:4c:be:7a:00:a8:ad:af:e3:4c:df:3a:
         46:09:a5:2d:cf:61:c1:05:db:2e:c9:77:f5:14:75:88:ad:ae:
         f6:30:39:45:f1:53:7f:b6:bd:c7:80:80:f3:7d:27:dc:a8:c7:
         6c:28:39:53:f0:da:da:ac:90:47:58:dc:68:ad:d5:bb:52:0e:
         e3:66:74:56:5d:40:08:b9:93:d4:28:69:e3:a0:14:ed:dd:ae:
         cb:fb:fe:80:05:b6:5e:c0:90:bc:19:42:95:59:68:b9:0c:bc:
         6c:99:66:80:02:33:e9:9e:31:4f:a1:77:9e:36:c5:d7:3b:54:
         c9:c3:13:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:27:59 2025 by rpki-client