Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cdbe7466-6b8b-3da9-852e-a6e58a403b88.roa
File:                     cdbe7466-6b8b-3da9-852e-a6e58a403b88.roa (raw, json)
Hash identifier:          ZlESSioJQ7fpky/cr2IVmJugJM3/Zhg7euQlelDSS2E=
Subject key identifier:   17:A0:0D:44:51:C5:2D:4A:7C:BB:F5:2D:CB:7A:72:F2:CF:55:59:FF
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328583D5BF31EB449B7FD5F88142A60
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cdbe7466-6b8b-3da9-852e-a6e58a403b88.roa
Signing time:             Fri 25 Mar 2022 04:00:00 +0000
ROA not before:           Fri 25 Mar 2022 04:00:00 +0000
ROA not after:            Wed 26 Jun 2024 04:00:00 +0000
asID:                     396982
IP address blocks:        35.189.96.0/19 maxlen: 19

Validation:               Failed, certificate revoked on Fri 29 Mar 2024 20:31:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:5b:f3:1e:b4:49:b7:fd:5f:88:14:2a:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 25 04:00:00 2022 GMT
            Not After : Jun 26 04:00:00 2024 GMT
        Subject: CN=2a980149-5716-4564-9446-73d9a46a96ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:85:06:58:4f:62:77:43:ec:82:55:f9:3b:b0:
                    aa:02:ed:45:7f:e6:e8:ec:b4:16:f7:00:1a:b0:83:
                    78:fc:19:73:77:26:50:38:c0:45:38:d2:3c:88:66:
                    54:3a:eb:25:ce:45:f4:eb:61:7f:12:61:13:cf:1f:
                    9e:48:88:13:50:0e:43:87:7c:47:d1:b1:27:45:fa:
                    0a:c9:e8:4a:08:8d:7e:0d:27:82:24:97:10:2b:9e:
                    71:f0:31:08:23:28:f8:bd:9a:57:9c:cb:4a:de:ad:
                    1d:b9:49:98:3c:2d:82:80:90:9c:0f:5f:34:c5:5c:
                    fe:a5:15:d2:fe:24:9e:9a:fd:2a:00:ae:1b:17:69:
                    3e:11:aa:41:e3:2b:e2:75:c7:c1:0b:38:d4:d3:e1:
                    9e:a3:be:86:2d:b4:b9:ac:4f:22:f5:ce:ae:b7:1c:
                    79:b5:62:e6:75:3e:6c:b5:37:19:58:a4:5e:b9:96:
                    24:24:9e:0a:d3:e0:85:01:b3:b0:75:5b:74:1e:cd:
                    6b:9c:b2:44:5c:68:76:8b:bc:5c:46:cc:ed:c9:41:
                    35:8c:59:d3:11:32:df:ae:15:ab:d7:4b:8b:b9:44:
                    04:97:06:75:a4:f5:a6:f9:b7:be:b5:19:b6:f0:13:
                    84:f9:03:d0:64:34:70:95:de:84:07:c0:bd:ff:39:
                    e6:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:A0:0D:44:51:C5:2D:4A:7C:BB:F5:2D:CB:7A:72:F2:CF:55:59:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cdbe7466-6b8b-3da9-852e-a6e58a403b88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.189.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:fd:42:37:06:47:40:25:c3:c2:1f:b0:aa:cd:b4:d3:27:65:
         a6:30:aa:57:1a:49:2a:bf:9a:8a:72:66:21:94:62:58:6d:4a:
         41:d9:2e:80:19:52:71:9a:36:3d:c2:14:28:41:9a:2f:26:7a:
         22:82:e3:56:15:97:00:a5:28:7e:97:aa:5f:bf:82:c0:d7:b5:
         4a:55:c9:88:f1:a0:9d:f2:db:03:6c:bf:96:2e:8a:d0:f4:80:
         34:50:21:0a:1c:80:b3:43:7d:23:98:87:a6:bb:80:4d:17:8b:
         cb:18:67:5d:ed:f3:9a:6b:8e:63:cb:ae:3d:6d:62:d5:68:73:
         89:40:38:a3:33:1d:83:3c:fd:85:a0:81:b4:48:12:83:e2:d5:
         3f:ef:1b:e3:13:b5:b4:d5:c2:5d:4a:e9:65:5e:2e:b8:5f:8c:
         a0:a2:2a:57:93:2b:36:ba:90:ae:ff:1c:eb:cc:d3:72:80:80:
         05:6a:2c:3d:d0:35:3b:d6:36:1d:9a:b2:ab:22:60:5d:b8:5c:
         66:90:52:08:6d:fe:17:88:e6:64:51:3a:15:de:c9:1b:8e:01:
         8e:e9:6e:5a:48:b0:f6:60:a2:f3:a1:69:ff:9e:ee:d4:09:56:
         07:4f:1e:d1:67:48:ea:e4:27:71:d7:3f:30:72:d7:8a:09:3b:
         d8:87:1c:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 21:30:20 2024 by rpki-client on console-fra.rpki-client.org