Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/afa12b9f-582b-3831-a85f-3647b6b360e7.roa
File:                     afa12b9f-582b-3831-a85f-3647b6b360e7.roa (raw, json)
Hash identifier:          2LaV0jed8E6bCCE1VKh9i+Wit1eSPvHwQMDYOcW2GWc=
Subject key identifier:   B9:18:53:E0:B9:8F:1B:B0:B5:D5:AC:39:61:38:AB:A1:51:0D:13:9A
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328583F3F9E7D74B55849E233921C00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/afa12b9f-582b-3831-a85f-3647b6b360e7.roa
Signing time:             Wed 14 Sep 2022 12:00:00 +0000
ROA not before:           Wed 14 Sep 2022 12:00:00 +0000
ROA not after:            Tue 17 Dec 2024 05:00:00 +0000
asID:                     396982
IP address blocks:        34.24.0.0/16 maxlen: 16

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 00:12:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:3f:9e:7d:74:b5:58:49:e2:33:92:1c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Sep 14 12:00:00 2022 GMT
            Not After : Dec 17 05:00:00 2024 GMT
        Subject: CN=1756f99d-385b-4661-892b-bfb5f07d1929
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:45:30:9e:7a:d7:5c:7b:ef:96:68:7d:27:e9:
                    59:76:39:23:39:7a:80:8e:8c:f4:80:94:f5:02:43:
                    de:76:9f:f6:4c:a9:9c:49:5c:26:27:ca:1a:c2:45:
                    70:36:d1:dd:01:da:40:c8:c2:7b:a6:44:a2:c2:01:
                    da:cf:8d:17:ec:fa:98:1e:c7:d0:73:e3:10:84:9a:
                    89:2b:af:43:4b:9e:73:76:67:95:b0:92:9a:a9:db:
                    ec:c4:e9:9e:cd:45:ef:42:d6:41:75:2c:3a:5a:9f:
                    06:22:22:90:72:d3:9a:e3:19:53:52:68:f4:14:2a:
                    8a:65:18:92:23:c4:d6:b7:74:87:ad:a0:95:17:8c:
                    e8:2e:16:0a:49:ad:d5:95:77:7f:67:4a:12:f4:b8:
                    b0:46:be:b5:11:a3:f5:b4:bb:e5:3e:4f:ed:8e:c8:
                    8a:82:ca:d8:96:e9:06:d8:a4:b3:a5:a6:c7:c5:76:
                    41:0f:75:c2:f2:ff:45:6c:5d:3b:25:c3:29:68:d3:
                    b0:8c:a7:d4:4a:d2:ee:28:ca:03:ee:15:a1:e5:97:
                    59:37:a9:da:57:6c:74:6a:f2:65:72:bd:cd:2d:c8:
                    9e:9d:09:78:d4:52:de:e2:a4:3b:8c:75:60:68:13:
                    f8:f4:48:b1:5f:d7:be:2d:b0:ea:98:f9:a3:1e:28:
                    28:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:18:53:E0:B9:8F:1B:B0:B5:D5:AC:39:61:38:AB:A1:51:0D:13:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/afa12b9f-582b-3831-a85f-3647b6b360e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.24.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:2a:91:43:bd:e9:d2:e1:04:77:a9:eb:d2:37:a6:54:32:1b:
         6d:5d:a0:11:91:75:ed:ac:8b:0a:93:e0:39:e1:1f:39:e1:9e:
         d0:6d:47:52:8b:52:d4:c6:d6:eb:35:14:24:ca:b6:28:28:77:
         00:ab:01:a0:60:2d:f3:32:d8:5d:b5:6e:60:63:5a:0f:bc:52:
         a0:4e:00:31:59:7e:2a:0e:9a:51:d9:d4:a7:2e:c3:52:3f:9f:
         2a:0b:fa:8b:8a:2a:27:b5:7e:70:56:86:99:05:70:cc:d7:ba:
         77:7f:de:f3:c4:6c:67:c0:01:f2:ba:05:38:2a:c0:6c:aa:60:
         cd:dc:32:32:3a:03:13:17:89:64:df:9b:a4:36:cc:fc:b7:27:
         32:9f:73:b8:2b:0c:d0:74:dc:61:55:50:bb:ce:7b:80:5f:d2:
         76:3d:30:4a:12:c4:78:b2:91:a0:c4:fa:26:fb:bf:1b:fc:d5:
         67:5e:4d:48:e2:8c:49:f8:d0:46:ea:aa:e3:7e:26:9e:2d:df:
         f0:1b:19:cd:07:2b:f4:2f:76:d7:8e:55:f5:75:8b:52:aa:fd:
         11:cd:26:73:e5:8f:09:b0:eb:fd:77:a7:a2:a0:d6:3a:c8:23:
         00:12:38:b1:74:b0:3b:f2:a8:8d:b3:fb:6d:49:3e:e1:08:39:
         91:58:d9:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 05:03:56 2024 by rpki-client on console-ams.rpki-client.org