Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/398d3a82-e88a-37af-b15c-f082578ea894.roa
File:                     398d3a82-e88a-37af-b15c-f082578ea894.roa (raw, json)
Hash identifier:          ZF6WUeK6bepC1upu7a1j4//nS4GUc9+usjoNs8cCh48=
Subject key identifier:   91:46:07:2D:D8:97:A0:F5:0C:CC:00:BF:C2:AC:58:E9:F1:50:0C:32
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285847C8529C1CCFA6261EDD4A8F80
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/398d3a82-e88a-37af-b15c-f082578ea894.roa
Signing time:             Tue 05 Nov 2024 21:28:04 +0000
ROA not before:           Tue 05 Nov 2024 21:28:04 +0000
ROA not after:            Mon 03 Feb 2025 21:28:04 +0000
asID:                     7029
IP address blocks:        199.182.168.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 20 Nov 2024 01:33:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c8:52:9c:1c:cf:a6:26:1e:dd:4a:8f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Nov  5 21:28:04 2024 GMT
            Not After : Feb  3 21:28:04 2025 GMT
        Subject: CN=62e34d05-6f96-491c-83b6-bbae55f9e255
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:3c:b6:42:19:31:d7:0e:03:82:26:94:af:70:
                    52:a3:ba:11:f6:a0:9c:3a:33:87:3d:1e:52:28:6c:
                    6b:f2:20:71:1d:8e:af:66:c9:91:cf:ad:17:c9:fa:
                    43:88:5f:e0:17:04:d3:ff:0a:f0:b1:c7:04:17:a0:
                    e1:ca:9e:89:99:e0:12:71:b8:55:cb:5a:96:72:26:
                    dd:dc:4d:c9:c3:36:73:72:a4:a7:a4:50:11:6e:df:
                    ca:2e:eb:d5:35:ff:f9:a1:80:9e:b6:fb:ef:9e:20:
                    1d:e2:43:94:92:00:74:97:24:22:12:c5:b0:da:a4:
                    b0:44:84:e0:86:be:66:a7:eb:f1:c5:bc:9e:cb:24:
                    f7:bb:40:cc:d0:57:cb:c3:3a:87:6e:84:58:24:92:
                    9e:5f:77:39:6f:f4:2b:a6:fd:7d:4e:79:0e:5b:17:
                    5d:bf:8c:10:f0:bb:de:58:a9:b0:37:a5:7b:d6:3d:
                    c4:9e:8b:eb:2d:a2:7b:7e:ca:70:ad:6d:8c:e8:02:
                    5c:59:ea:cb:2c:0c:a6:f5:3d:19:01:9e:31:e8:49:
                    6b:db:1f:2c:ce:ec:65:29:e6:81:c4:f6:26:19:48:
                    92:de:83:85:c3:f1:5c:38:d7:2f:ba:f7:08:95:30:
                    12:f7:b3:31:c5:62:81:82:82:c3:aa:a3:70:0f:3f:
                    07:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:46:07:2D:D8:97:A0:F5:0C:CC:00:BF:C2:AC:58:E9:F1:50:0C:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/398d3a82-e88a-37af-b15c-f082578ea894.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.182.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:36:90:19:fc:6f:d0:17:97:41:e2:ba:17:3f:58:5f:b9:83:
         64:33:50:53:cc:65:5a:35:8a:2d:80:7a:51:00:fe:39:07:41:
         4e:ab:d0:d8:b5:85:98:dd:5e:85:e6:45:f8:0b:0f:a5:c9:47:
         71:fb:49:3f:c5:af:65:ee:04:1a:fb:0c:b1:03:28:e2:3b:01:
         8b:6c:0b:92:c0:f7:f7:b0:83:66:58:b5:a2:db:3e:ae:9d:14:
         ad:06:bb:64:f4:18:cc:78:e0:af:22:59:d6:1c:58:40:83:e1:
         95:73:ae:c6:32:e7:5f:ba:d2:c7:bb:74:b0:07:5c:2f:60:36:
         87:ec:3b:0f:5a:6f:ed:b2:08:30:ca:04:d2:87:e0:48:36:36:
         8c:93:1c:c0:e0:79:86:0b:8c:4a:28:66:56:37:04:ac:1e:8a:
         dd:53:50:d8:98:99:85:2f:d3:0c:11:5a:03:07:9c:ab:4e:5a:
         07:ae:1d:c8:8a:71:2a:62:39:87:2d:9c:84:24:59:ee:c7:86:
         97:ff:9a:7e:e9:29:7b:0f:33:79:e4:5f:3d:9c:41:0f:3b:63:
         3e:18:21:db:35:d6:8e:d1:b8:88:38:b4:36:72:24:bc:4a:b6:
         0b:e6:e5:6a:cd:bb:49:10:a2:62:67:75:32:97:d8:41:0f:b2:
         3f:77:45:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 04:42:25 2024 by rpki-client on console-ams.rpki-client.org