Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/590afd5d-5927-3946-9c52-417c02218dbe.roa
File:                     590afd5d-5927-3946-9c52-417c02218dbe.roa (raw, json)
Hash identifier:          7DXc20ORdHWTV1k5G/x6NtE2HuDIeh+JQ9OkcOROqpk=
Subject key identifier:   BD:81:4E:23:5D:5D:72:BA:62:3B:F9:41:85:80:BA:3E:83:B2:19:46
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285847FF4A741AB3780352C6609880
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/590afd5d-5927-3946-9c52-417c02218dbe.roa
Signing time:             Mon 25 Nov 2024 14:00:39 +0000
ROA not before:           Mon 25 Nov 2024 14:00:39 +0000
ROA not after:            Sun 23 Feb 2025 14:00:39 +0000
asID:                     396982
IP address blocks:        34.154.208.0/20 maxlen: 20
Validation:               Failed, certificate revoked on Tue 21 Jan 2025 02:40:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ff:4a:74:1a:b3:78:03:52:c6:60:98:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Nov 25 14:00:39 2024 GMT
            Not After : Feb 23 14:00:39 2025 GMT
        Subject: CN=f14ad540-c98d-4267-bdec-a5ac7635fb2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ba:89:21:81:71:75:77:52:eb:d2:c6:05:84:
                    7c:59:0d:c0:5d:33:d2:b4:70:5f:45:8e:b7:a4:a0:
                    0c:c2:7b:2d:ea:5e:f4:3d:32:9e:67:5a:cb:f1:93:
                    12:10:b2:21:1a:2d:eb:5e:23:17:6c:33:87:30:1b:
                    26:2f:87:c7:a7:e3:27:3d:fa:14:22:bd:e2:63:76:
                    1c:41:d8:c9:9c:d0:a5:83:d3:e5:bc:a4:9f:42:f0:
                    6a:fc:10:38:e9:e8:33:0c:ef:cb:23:e9:c1:30:a7:
                    6d:86:3f:9d:d5:7b:66:b3:57:0f:a9:15:2a:9c:f1:
                    76:b8:32:7b:f5:af:d9:7f:0e:84:f7:6b:db:72:aa:
                    2d:d4:40:3a:b0:80:bc:cc:19:56:e9:51:db:2e:15:
                    1d:97:83:a2:9c:bf:38:52:fb:c3:45:3e:5c:1c:ed:
                    70:88:9f:61:43:bd:9a:39:49:b0:26:1e:fa:db:d9:
                    ee:71:35:90:7e:a2:a6:a7:85:64:53:41:59:be:9f:
                    b0:d9:92:9b:31:6d:c7:d1:86:1d:5c:d8:9c:8d:ad:
                    3c:d2:37:d5:33:ae:6a:ec:4a:52:b5:d0:e5:9e:65:
                    27:1c:28:e4:b0:37:99:e9:ca:b3:f3:49:f6:18:cd:
                    c9:f4:31:68:b3:bd:9e:c5:49:3c:e2:f7:7d:59:52:
                    43:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:81:4E:23:5D:5D:72:BA:62:3B:F9:41:85:80:BA:3E:83:B2:19:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/590afd5d-5927-3946-9c52-417c02218dbe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.154.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:0d:ab:9d:63:92:d2:90:47:da:e0:76:e4:ae:b2:2a:ce:a6:
         13:a3:e1:af:c8:e6:d1:75:05:80:3c:54:56:da:14:2b:db:18:
         62:f9:ee:07:dd:5e:53:87:bc:82:27:3b:03:08:85:11:a9:ff:
         54:e3:19:f8:12:d4:33:f6:a0:79:b3:8b:eb:5c:2d:ee:43:a0:
         53:1c:72:94:73:f7:cf:e1:cd:c3:07:d0:fa:b1:15:f0:53:ec:
         99:6a:e7:c7:a5:6b:ff:19:0d:68:bf:f2:a0:19:6e:24:ca:f6:
         e8:ac:26:ec:d8:c3:f4:fa:17:4c:7e:2f:be:3b:7e:0b:98:0b:
         4b:96:6f:81:66:1b:c1:4c:c0:2e:88:5f:c0:e4:3e:0a:32:11:
         c5:41:80:74:29:2b:35:ce:97:93:46:ab:85:dd:44:4f:9d:18:
         cc:8b:39:78:67:ed:c9:c9:d1:dc:dd:f7:59:33:7e:97:8a:44:
         d4:17:fc:0d:d3:b8:15:25:39:14:07:71:5f:c2:27:50:36:f5:
         dd:66:51:8d:5d:e0:66:be:cf:30:50:48:c9:40:8e:1d:c3:7a:
         57:5d:0f:9f:bc:0c:4a:6a:c4:64:08:a0:71:97:37:38:b1:22:
         8d:81:8e:4a:4c:ea:40:09:7c:c8:70:2f:d0:bb:ca:53:20:b5:
         03:4a:61:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:50:09 2025 by rpki-client