Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/27736b1d-92f4-380f-8fed-3828700fb7c7.roa
File:                     27736b1d-92f4-380f-8fed-3828700fb7c7.roa (raw, json)
Hash identifier:          FkFg2RI/RZqMhDTWza7qz8eQx0FhC5M9VNAp+5FmH/M=
Subject key identifier:   30:7D:C3:47:C6:34:22:13:3D:2D:F7:F3:E7:40:83:BA:93:3A:86:8F
Certificate issuer:       /CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
Certificate serial:       010D0C9F432858473BC09CC525F46E6B29DA1100
Authority key identifier: 80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/27736b1d-92f4-380f-8fed-3828700fb7c7.roa
Signing time:             Mon 16 Sep 2024 13:00:42 +0000
ROA not before:           Mon 16 Sep 2024 13:00:42 +0000
ROA not after:            Sun 15 Dec 2024 14:00:42 +0000
asID:                     55933
IP address blocks:        139.5.20.0/23 maxlen: 23
                          139.5.20.0/24 maxlen: 24
                          139.5.21.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 24 Sep 2024 11:52:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3b:c0:9c:c5:25:f4:6e:6b:29:da:11:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
        Validity
            Not Before: Sep 16 13:00:42 2024 GMT
            Not After : Dec 15 14:00:42 2024 GMT
        Subject: CN=505ba029-3f75-47bc-98f7-9fe0d893d3ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:8b:63:a7:06:a8:14:ed:71:08:6d:8e:5b:67:
                    fd:66:0d:fb:e6:4a:e9:2a:9f:34:7c:53:be:80:56:
                    99:85:33:80:82:7c:5c:ff:38:f7:48:ba:fd:51:e6:
                    a3:97:f3:58:ef:35:a5:c0:40:4f:21:8d:56:e1:24:
                    fc:33:60:b3:c7:2a:19:a7:ce:9d:1c:ef:a5:4f:18:
                    16:27:a1:60:7a:fa:15:7c:4e:ed:c8:d2:e2:29:d6:
                    7f:91:f7:16:1b:0f:5b:c9:a3:53:8d:fb:9b:91:7f:
                    ba:7c:60:66:9b:18:40:f2:4d:3d:1b:43:17:e2:cb:
                    16:6b:6c:20:b4:e4:a4:6d:2d:f1:9a:20:7d:d5:fa:
                    ef:2f:0c:de:9b:3f:d8:8b:23:46:c6:df:70:1f:ec:
                    83:44:0e:a0:80:33:71:85:88:e1:80:29:04:c1:f2:
                    59:7e:fa:36:02:53:58:6e:b9:20:1a:b6:43:2a:5e:
                    f9:10:b1:13:dc:6a:15:fd:d5:64:b9:b4:a9:d5:46:
                    d1:1e:be:0b:cd:05:26:82:e7:c7:55:6f:ba:c9:bd:
                    e3:87:1f:2c:d5:5e:2a:f0:40:a4:48:a1:53:c8:99:
                    d3:97:a9:cf:84:a2:2e:ac:bb:68:2e:e5:8c:c0:6c:
                    8a:fb:c0:05:84:0c:e2:33:5b:c6:f5:a9:2a:9a:75:
                    91:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:7D:C3:47:C6:34:22:13:3D:2D:F7:F3:E7:40:83:BA:93:3A:86:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/27736b1d-92f4-380f-8fed-3828700fb7c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.crl

            X509v3 Authority Key Identifier:
                keyid:80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.5.20.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:6c:f2:62:e0:5a:7c:a2:ad:1d:2e:8b:c9:68:6d:f8:f0:7c:
         12:b1:9d:69:6f:22:7f:c7:53:3f:ed:ee:54:52:e1:1a:7f:f8:
         ab:a0:93:49:c0:ee:a8:9e:5b:f6:23:e7:a8:a4:a8:80:be:f0:
         1d:87:40:3d:e3:35:d0:1f:32:8d:c4:5b:bf:bd:3f:91:9a:cf:
         cf:8d:48:33:05:2f:48:35:9e:d7:d0:7a:ca:b2:68:08:d6:77:
         51:50:cc:b2:f7:13:f7:c7:fa:61:20:e8:c7:e4:63:9f:8b:4d:
         9f:0d:e1:a1:7d:36:c5:c6:ae:2e:59:a4:39:00:13:03:8a:f5:
         3e:af:66:e0:2e:e6:0d:4b:e8:3f:64:1d:5d:21:2e:7e:52:7b:
         04:ec:d8:f3:8e:95:09:ec:95:b6:5c:17:e1:d1:61:9d:58:62:
         a6:58:ef:f0:9c:05:9a:11:f4:88:e8:78:66:06:1a:f6:5d:65:
         87:51:99:93:63:97:27:62:f3:66:b5:a9:2b:f5:b6:8f:83:77:
         db:1e:6b:97:9d:89:89:38:a5:7f:2c:de:38:b7:ee:1c:da:f9:
         f3:98:81:1f:45:c8:20:e3:8a:66:f5:31:43:28:1f:b8:5a:b8:
         77:3c:fb:b6:21:b7:ee:7d:e2:28:29:64:1b:bf:32:d6:aa:67:
         93:3e:33:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 24 14:45:34 2024 by rpki-client on console-fra.rpki-client.org