Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/c4dcff37-3523-3b94-a85c-8a321eb6822d.roa
File:                     c4dcff37-3523-3b94-a85c-8a321eb6822d.roa (raw, json)
Hash identifier:          b1nOMM0BAC/gYLfMF7WzrG+4+lLXGrCY+4V0oZn+tk8=
Subject key identifier:   C7:C8:F5:9E:6D:58:C6:FC:51:36:3C:8E:FF:90:27:61:94:B2:35:AB
Certificate issuer:       /CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
Certificate serial:       010D0C9F43285844720B4E8303ACDD0C6AD61540
Authority key identifier: 53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/c4dcff37-3523-3b94-a85c-8a321eb6822d.roa
Signing time:             Wed 03 Jan 2024 12:00:00 +0000
ROA not before:           Wed 03 Jan 2024 12:00:00 +0000
ROA not after:            Wed 29 Jan 2025 05:00:00 +0000
asID:                     36040
IP address blocks:        207.126.150.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Fri 29 Mar 2024 20:25:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:72:0b:4e:83:03:ac:dd:0c:6a:d6:15:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be27c4c0-529e-4c9d-bb69-dedb07bbff61
        Validity
            Not Before: Jan  3 12:00:00 2024 GMT
            Not After : Jan 29 05:00:00 2025 GMT
        Subject: CN=45dbb67c-d195-497f-874f-211f62c4176b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:12:5b:83:31:cc:12:17:24:b1:12:e4:0c:12:
                    d4:14:a4:c0:12:98:8a:2e:c5:8f:14:db:8b:4c:ca:
                    50:9e:ae:27:ff:56:6b:b8:fc:e7:ff:a2:cb:bc:4b:
                    08:1f:e5:dc:3c:72:f9:48:a1:5e:90:57:12:4e:cf:
                    45:57:01:6b:cb:51:45:42:c0:7a:19:bb:3c:89:89:
                    9b:73:8c:cc:d3:bb:58:66:a5:07:1b:ca:c9:f8:cb:
                    c9:b4:a3:64:8b:44:76:e2:ba:9e:74:9a:ff:4b:54:
                    18:be:d0:4e:f9:4b:ad:5b:0a:8c:5a:51:fb:a2:a8:
                    62:e4:7e:37:bc:1b:4c:c5:bd:6e:be:3b:d6:3b:ea:
                    2f:bb:1f:3a:90:14:b6:9b:d5:f5:7c:08:55:15:75:
                    65:e6:d2:29:1b:37:de:bc:93:b4:1a:d0:70:6c:3d:
                    d4:d4:78:f8:6f:0a:23:98:0b:ab:ab:10:73:45:16:
                    c3:7c:7f:c9:63:df:21:63:c2:1e:81:d9:e6:18:57:
                    ca:36:1b:dd:c9:8f:39:2a:77:21:da:0a:27:57:01:
                    b0:48:88:cb:59:fc:d8:70:15:72:4b:00:11:50:bc:
                    ee:28:b0:88:03:5c:fe:3c:05:d6:5d:f0:1c:39:33:
                    a7:02:71:50:8b:f1:db:99:13:03:91:24:47:a6:e5:
                    e2:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:C8:F5:9E:6D:58:C6:FC:51:36:3C:8E:FF:90:27:61:94:B2:35:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/c4dcff37-3523-3b94-a85c-8a321eb6822d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61/be27c4c0-529e-4c9d-bb69-dedb07bbff61.crl

            X509v3 Authority Key Identifier:
                keyid:53:92:9B:64:C8:23:31:65:3F:A0:1B:B5:E6:32:7B:D8:88:56:C2:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be27c4c0-529e-4c9d-bb69-dedb07bbff61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.126.150.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:f2:af:89:e0:60:01:df:f4:49:c1:2b:15:61:7b:fa:b9:3e:
         83:f1:bd:9c:a4:1c:44:8d:bf:d6:3b:0d:bb:6e:78:a2:30:09:
         db:0a:79:4e:79:08:6e:56:d8:d3:b7:de:37:28:87:a5:f2:ed:
         94:0a:40:2e:c4:6c:8b:6e:59:ce:50:65:3d:66:5f:f4:38:b3:
         b7:0d:cb:f4:2e:ac:f3:c0:9f:61:6b:11:be:73:d2:a4:4c:e9:
         47:03:57:d9:97:a1:49:9b:17:36:f9:75:9a:aa:ec:77:1f:d6:
         40:1a:10:f8:88:4e:dc:57:83:f4:cf:ef:1d:2b:42:4f:4f:eb:
         85:29:83:ad:09:c9:83:3d:03:1d:56:ff:fd:45:2d:bd:c4:54:
         b4:95:c2:fe:3e:59:f3:6c:a5:62:27:ed:b7:d9:aa:52:ba:79:
         b5:2f:2e:0e:71:ad:b3:15:ce:f9:35:9b:29:52:ae:80:93:a6:
         23:f4:3a:94:23:fa:77:73:c4:b7:81:c4:98:45:0d:d3:b0:99:
         2e:13:ab:62:ac:84:71:04:3c:08:9a:5c:59:25:e1:06:ec:8d:
         54:0d:66:a6:37:37:4c:2d:40:c3:be:a0:d4:41:4c:a1:58:fb:
         b3:71:9b:3d:85:78:7b:99:5d:10:56:c7:2b:d3:29:54:30:9a:
         f9:20:e6:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 21:30:23 2024 by rpki-client on console-fra.rpki-client.org