Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835/397ccd5f-5e06-34a0-b994-48804de95116.roa
File:                     397ccd5f-5e06-34a0-b994-48804de95116.roa (raw, json)
Hash identifier:          9g+FXTQTJHvO1FmDFInE9SrfZhSP/1uenDXJ/8EEJQE=
Subject key identifier:   74:12:4B:1E:AE:D7:0E:22:55:BC:D2:A5:9F:E8:D5:05:2A:02:42:D8
Certificate issuer:       /CN=cc9bfce1-5e74-4c92-954d-8728969d8835
Certificate serial:       010D0C9F432858469C9FAFC25150035160CD8C74
Authority key identifier: 59:23:95:63:7F:0E:0D:1A:9C:A8:9C:18:80:E1:38:3B:CA:AD:73:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835/397ccd5f-5e06-34a0-b994-48804de95116.roa
Signing time:             Sun 21 Jul 2024 13:00:36 +0000
ROA not before:           Sun 21 Jul 2024 13:00:36 +0000
ROA not after:            Sat 19 Oct 2024 13:00:36 +0000
asID:                     9009
IP address blocks:        165.140.11.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 23 Jul 2024 00:17:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:9c:9f:af:c2:51:50:03:51:60:cd:8c:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9bfce1-5e74-4c92-954d-8728969d8835
        Validity
            Not Before: Jul 21 13:00:36 2024 GMT
            Not After : Oct 19 13:00:36 2024 GMT
        Subject: CN=a4a983e2-0bc0-4e06-b93c-2dc5b1e1caa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:d2:fa:59:53:5a:75:6c:da:9f:7f:92:98:95:
                    73:cf:a3:65:52:2a:11:7b:eb:d2:e4:6d:e6:ca:fe:
                    f4:c5:b2:26:39:9b:75:56:41:aa:49:cf:39:8a:c2:
                    30:a9:06:66:e9:16:a9:2e:d8:e3:81:14:d2:61:f2:
                    70:4c:b4:e2:b4:9b:74:4b:3b:a6:00:06:07:40:ca:
                    0b:24:a9:dc:dd:05:41:63:42:46:d5:7d:cb:a5:fa:
                    c6:d3:e3:10:d7:47:88:2d:ab:2a:a1:90:e3:4a:ee:
                    46:ea:7d:ca:d4:db:79:e1:23:f7:da:94:df:55:f3:
                    85:47:45:b3:25:a2:69:89:38:1f:4c:89:c5:e7:61:
                    a5:c5:1d:97:fb:e6:e7:18:cc:a9:b7:df:90:d8:8e:
                    04:52:6e:a9:1a:86:0c:96:16:6f:de:e5:ec:34:c7:
                    86:67:a6:5e:76:b8:eb:a7:43:e2:50:b8:34:93:13:
                    ee:b0:15:d0:e1:13:fe:df:56:4f:5d:66:40:29:92:
                    32:37:a8:25:8c:f1:ca:34:ee:4b:02:81:1e:0e:42:
                    37:8b:7b:b5:97:92:be:73:a7:1f:d2:6b:05:14:0f:
                    1d:7d:4d:72:b7:43:37:6a:04:9a:f8:d6:08:e3:fe:
                    65:0f:9f:1f:39:4e:6f:22:6d:be:fe:24:e4:fd:e8:
                    3e:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:12:4B:1E:AE:D7:0E:22:55:BC:D2:A5:9F:E8:D5:05:2A:02:42:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835/397ccd5f-5e06-34a0-b994-48804de95116.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835/cc9bfce1-5e74-4c92-954d-8728969d8835.crl

            X509v3 Authority Key Identifier:
                keyid:59:23:95:63:7F:0E:0D:1A:9C:A8:9C:18:80:E1:38:3B:CA:AD:73:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.140.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:9c:64:0b:58:2c:11:63:eb:de:5a:8d:9c:0e:bb:85:1d:84:
         3c:1a:59:49:1d:b2:12:da:af:cb:bb:ba:00:da:db:a1:a2:f0:
         89:70:70:cb:91:5f:cc:8e:42:ff:aa:ed:23:08:13:3e:81:f3:
         9f:18:af:1a:90:cb:03:c6:a7:18:95:ce:ad:53:66:ab:c8:a6:
         55:86:bc:58:78:41:69:6f:db:a6:af:cc:b8:11:dc:e0:3a:e9:
         68:6a:ef:24:62:db:b3:a7:27:98:e9:37:9c:f3:28:c3:56:0b:
         c7:74:48:04:39:d7:7e:6e:2c:af:89:b7:67:2a:97:56:e7:86:
         1c:e4:32:aa:a6:ed:6b:f2:10:98:a2:5f:52:3c:b1:ad:61:a6:
         67:50:9b:11:49:dc:23:ad:b1:d3:12:14:86:e0:87:3b:5b:15:
         3c:c8:25:2f:b7:62:5f:bb:bc:d7:22:a7:f0:3c:1d:52:5f:52:
         6e:99:a8:50:6e:06:42:cf:99:1e:a7:49:d0:fc:da:f5:fb:a7:
         cb:67:ee:e8:d9:50:a4:c8:c3:69:19:d1:2b:9b:71:51:b0:d9:
         83:05:ee:09:8a:3b:f5:32:48:7d:76:84:3c:0e:54:a9:1a:8f:
         86:84:13:53:45:06:b2:8f:9c:d0:8a:3f:6a:81:cf:54:6d:4a:
         ca:dd:60:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 23 04:52:30 2024 by rpki-client on console-ams.rpki-client.org