Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538/6aeb33d1-5446-305a-9d2e-88ac0da1e05c.roa
File:                     6aeb33d1-5446-305a-9d2e-88ac0da1e05c.roa (raw, json)
Hash identifier:          Wzl2Vp2oM3l5ixlYgaF29hWYQYVWVUSnSz7x8Vx5xwA=
Subject key identifier:   84:AE:D6:3B:9F:ED:F0:90:A3:45:2C:70:CF:F8:83:25:91:7C:72:6A
Certificate issuer:       /CN=9f07c9e2-648c-4ca2-8784-02ac3c144538
Certificate serial:       010D0C9F43285840E316F8B46854BA41FD1EB980
Authority key identifier: 64:75:EB:7C:25:7B:70:FF:79:31:BF:57:7E:7C:BA:C6:74:D1:CE:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538/6aeb33d1-5446-305a-9d2e-88ac0da1e05c.roa
Signing time:             Mon 19 Dec 2022 19:18:09 +0000
ROA not before:           Mon 19 Dec 2022 19:18:09 +0000
ROA not after:            Sat 17 May 2025 04:00:00 +0000
asID:                     22462
IP address blocks:        199.255.76.0/22 maxlen: 22
                          23.134.192.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Sun 30 Apr 2023 16:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:e3:16:f8:b4:68:54:ba:41:fd:1e:b9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f07c9e2-648c-4ca2-8784-02ac3c144538
        Validity
            Not Before: Dec 19 19:18:09 2022 GMT
            Not After : May 17 04:00:00 2025 GMT
        Subject: CN=e84662da-86e0-4f2b-9cfd-f6a5736b3980
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:8d:cb:8e:53:90:a3:3e:38:64:10:ae:32:92:
                    bb:0f:ba:32:4a:cd:70:e0:56:66:ef:8e:4b:84:bc:
                    2e:2c:83:25:9a:48:51:85:7c:a6:86:71:17:67:14:
                    85:a3:ed:e0:0e:3d:29:30:76:19:0d:98:6f:9b:28:
                    21:e5:db:9b:ec:08:2f:d3:af:4c:96:f0:2c:4d:f7:
                    d7:97:d8:c4:3a:b2:e3:d7:67:2c:a9:1b:f8:f4:1f:
                    5d:f1:1a:29:aa:04:70:6e:d8:10:bf:01:23:44:03:
                    e3:f9:1f:12:d1:2c:0f:cf:9c:0c:6c:cb:4b:f0:a7:
                    dd:4a:ac:84:bc:95:8f:83:eb:1b:f4:cd:be:77:5d:
                    cb:b0:f4:d8:fa:b2:e1:35:96:f7:32:3e:bf:bf:17:
                    33:8e:b7:90:b6:23:b8:dd:34:30:59:d8:2b:6e:52:
                    e4:48:6a:7e:42:7f:59:56:32:09:0d:75:46:bb:6d:
                    73:aa:82:49:b8:0b:5b:70:51:c4:8a:f9:cf:b1:ec:
                    62:c8:07:ce:66:1c:9a:ef:20:40:ac:fa:a8:ee:49:
                    ec:c0:13:14:43:a9:43:a9:b9:97:fb:01:ee:81:dd:
                    95:04:21:62:49:8e:ba:42:f8:09:29:31:6d:66:1c:
                    db:b4:83:d2:77:64:02:db:7f:3a:59:8f:2c:f6:27:
                    09:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:AE:D6:3B:9F:ED:F0:90:A3:45:2C:70:CF:F8:83:25:91:7C:72:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538/6aeb33d1-5446-305a-9d2e-88ac0da1e05c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538/9f07c9e2-648c-4ca2-8784-02ac3c144538.crl

            X509v3 Authority Key Identifier:
                keyid:64:75:EB:7C:25:7B:70:FF:79:31:BF:57:7E:7C:BA:C6:74:D1:CE:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f07c9e2-648c-4ca2-8784-02ac3c144538.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.134.192.0/22
                  199.255.76.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:d9:ae:ac:5e:3a:11:15:90:8b:67:66:71:9f:c8:71:e8:71:
         08:2f:bc:7f:4e:05:ba:33:9a:61:86:66:19:5f:5b:79:27:02:
         bc:0d:5e:27:45:c4:c4:bb:f2:39:8c:9c:19:a1:5d:92:31:e5:
         94:af:40:5b:81:21:9a:c6:fd:3b:a2:69:4b:be:7b:b2:fd:27:
         a6:56:40:e4:8d:a1:ba:c2:4d:08:c0:aa:58:35:46:06:90:bb:
         8c:3a:55:20:8a:fe:a2:8b:99:53:63:ad:b1:03:57:7d:95:c5:
         84:a3:23:2e:f2:55:90:6f:1f:0e:df:46:91:74:7b:01:d8:0f:
         70:d7:b9:3b:b1:63:8f:c0:dc:d2:b1:aa:e9:8e:49:a1:85:70:
         5c:02:d6:7a:7c:73:7d:d2:1a:c0:f8:1a:8c:7a:a8:f9:a5:af:
         a6:3c:35:ff:5c:11:5e:64:95:1b:6b:e8:45:b5:4c:d6:2b:88:
         94:f6:e1:10:68:69:74:5c:ec:2e:8c:a0:ea:01:ab:d7:99:d5:
         24:09:fa:31:0b:c3:3f:c9:be:8c:e3:23:bd:de:43:ae:fd:71:
         0e:e8:09:bf:e9:6d:32:0f:b2:d4:2a:78:ed:88:4b:03:d0:23:
         ac:f5:52:cd:af:74:71:75:6f:3f:e7:69:a3:1f:5f:29:f3:a6:
         88:1f:6b:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:09 2024 by rpki-client on console-ams.rpki-client.org