Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/10fba39d-5da1-3848-b142-de20030999ea.roa
File:                     10fba39d-5da1-3848-b142-de20030999ea.roa (raw, json)
Hash identifier:          Frqkjl+vStqgKUuZrA2Htv5QJ1RflKlvWFgcsI09G+o=
Subject key identifier:   04:C5:F5:A2:A9:81:39:30:87:CF:7A:89:3B:F2:81:8A:EE:28:BA:C7
Certificate issuer:       /CN=b51cbf27-0dce-4657-a317-7c7d86245986
Certificate serial:       010D0C9F4328583FBE293A662E3D7002CF1F0A00
Authority key identifier: 69:17:38:5C:FD:79:54:F4:11:5A:3D:2A:53:A8:B4:66:96:A5:34:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/10fba39d-5da1-3848-b142-de20030999ea.roa
Signing time:             Thu 27 Aug 2020 16:14:11 +0000
ROA not before:           Thu 27 Aug 2020 16:14:11 +0000
ROA not after:            Sat 01 Feb 2025 05:00:00 +0000
asID:                     212238
IP address blocks:        199.255.209.0/24 maxlen: 24
                          199.255.211.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 31 Dec 2022 06:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:be:29:3a:66:2e:3d:70:02:cf:1f:0a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b51cbf27-0dce-4657-a317-7c7d86245986
        Validity
            Not Before: Aug 27 16:14:11 2020 GMT
            Not After : Feb  1 05:00:00 2025 GMT
        Subject: CN=0ef5fd1e-650b-4199-ab48-a3cf866a67b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:71:16:69:57:ef:f8:bf:9a:9d:1c:3a:d0:9a:
                    83:46:93:6f:b7:00:5a:fc:d8:1e:1e:2f:00:74:73:
                    09:1d:44:90:b0:8c:b3:c3:d8:e0:c6:db:72:e4:b8:
                    df:48:b4:05:8b:d3:5e:46:58:a0:8b:3a:5c:5c:f1:
                    b5:8d:33:8c:a6:87:a9:a4:db:89:42:18:e8:c4:8e:
                    b0:ee:dd:48:99:11:9a:8f:b2:46:c6:0c:09:b0:4d:
                    51:3f:90:2e:a4:79:bd:cf:25:22:14:5f:7e:94:d9:
                    e8:9c:e4:bb:98:79:90:48:fe:c0:81:dc:ac:85:60:
                    be:94:7e:6d:6b:3f:11:3a:2c:31:08:39:12:a9:f9:
                    45:47:87:cd:8c:62:a7:6f:db:8b:62:7d:2e:8e:fa:
                    59:04:3f:f6:4c:12:92:65:f7:1a:23:50:ff:19:70:
                    82:9a:4f:1e:40:17:05:a5:01:cc:5c:af:16:fe:8d:
                    99:97:1a:e5:12:47:ef:62:ae:7a:5b:c4:03:95:80:
                    57:38:cd:e2:45:4b:e4:8a:dc:16:7b:60:5e:d3:a5:
                    25:0a:1c:77:ff:b0:05:3c:0b:0d:6e:be:16:26:4f:
                    3b:39:61:08:2a:c2:a5:2e:bd:5a:73:5d:cc:2f:10:
                    ad:dc:31:9a:a6:f7:93:c7:17:ae:f0:d7:7f:23:b4:
                    2e:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:C5:F5:A2:A9:81:39:30:87:CF:7A:89:3B:F2:81:8A:EE:28:BA:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/10fba39d-5da1-3848-b142-de20030999ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/b51cbf27-0dce-4657-a317-7c7d86245986.crl

            X509v3 Authority Key Identifier:
                keyid:69:17:38:5C:FD:79:54:F4:11:5A:3D:2A:53:A8:B4:66:96:A5:34:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.255.209.0/24
                  199.255.211.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:b0:d3:5f:d9:34:8b:06:d1:8f:ec:76:24:2d:8c:d7:a4:82:
         1c:e7:02:72:e1:e9:5e:98:31:de:ae:5f:8b:9b:a9:06:ad:5e:
         50:ae:01:fd:ca:ea:67:49:04:bc:6e:3f:d7:40:9e:58:7a:57:
         7c:1c:26:b0:ab:a1:b4:86:ac:57:55:37:d3:0d:4e:18:4d:34:
         18:24:bb:cc:20:84:31:99:0c:7b:cc:6e:a2:9e:6f:9a:0f:95:
         60:2b:5d:3b:2c:0e:79:a5:6d:82:e1:e5:a2:26:9c:65:6c:d7:
         a8:7c:06:35:b0:0c:df:24:40:32:a0:d4:ed:d9:6c:cc:c5:04:
         d5:09:3e:45:96:aa:ac:d4:c9:e9:66:1b:b3:2a:c2:90:2a:fa:
         a7:04:43:1f:ff:f9:bb:f3:da:42:82:e1:28:8c:76:ab:e6:da:
         df:3b:5c:38:5e:f4:6c:dc:08:82:b0:32:a4:8c:b4:61:ec:7e:
         67:c8:e7:95:2b:f4:18:4e:8a:51:15:20:0c:a2:9d:d2:d9:c4:
         99:99:d4:2a:0f:ef:1a:46:ba:78:fe:a6:b1:c2:4e:5f:a2:f7:
         dc:f6:e7:ae:6b:af:e4:95:b4:1b:0e:9a:c7:7e:44:b0:c2:3d:
         33:1d:fa:b8:9c:09:3d:66:44:ad:1f:6b:68:19:65:c4:89:2b:
         02:c0:11:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:10 2024 by rpki-client on console-ams.rpki-client.org