Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/91e454fb-072d-39bc-b3f1-bd8a593b0dcd.roa
File:                     91e454fb-072d-39bc-b3f1-bd8a593b0dcd.roa (raw, json)
Hash identifier:          Pt5T9r8/FwuNVEx0C6o1ND2hi2oShjKJ6RyEL7yO1JU=
Subject key identifier:   93:20:0C:A3:2F:4C:C4:1A:FF:E2:69:89:46:A3:42:D7:9E:D3:84:CE
Certificate issuer:       /CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
Certificate serial:       010D0C9F432858472B008420EDFD4349EE587B80
Authority key identifier: 80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/91e454fb-072d-39bc-b3f1-bd8a593b0dcd.roa
Signing time:             Tue 10 Sep 2024 13:00:40 +0000
ROA not before:           Tue 10 Sep 2024 13:00:40 +0000
ROA not after:            Mon 09 Dec 2024 14:00:40 +0000
asID:                     7029
IP address blocks:        116.206.96.0/24 maxlen: 24
                          116.206.99.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 12 Sep 2024 09:35:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2b:00:84:20:ed:fd:43:49:ee:58:7b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
        Validity
            Not Before: Sep 10 13:00:40 2024 GMT
            Not After : Dec  9 14:00:40 2024 GMT
        Subject: CN=77d60ae6-768b-4b50-8552-09d001d076f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:e0:fd:db:70:f3:47:fd:d0:17:48:42:78:71:
                    47:87:1d:1f:35:5e:9c:eb:15:16:5f:70:00:97:3f:
                    78:7a:27:2e:fd:1b:82:0b:1f:4c:d3:f4:91:6f:01:
                    6d:6f:72:20:f7:74:27:ae:03:c7:e2:5c:f2:6d:cb:
                    ff:91:cb:c0:3f:eb:5c:62:83:99:1c:5f:9a:62:c2:
                    be:5b:8f:82:b7:f6:4d:a5:a9:60:19:68:e7:a2:d8:
                    d9:9e:68:d1:b5:0c:0a:e5:e3:31:b3:62:f0:c3:1b:
                    01:47:a8:5f:c6:76:ca:35:22:6b:4a:96:e5:66:63:
                    8a:29:ad:c0:16:4d:15:3e:96:a4:ef:c3:ee:ec:79:
                    46:55:fa:5e:ad:09:4f:43:9d:67:e3:f9:1e:ba:85:
                    03:1c:da:fd:1a:5b:78:f7:e3:fa:ca:f9:f6:f1:fb:
                    1f:8b:83:04:f9:11:d1:08:2c:2f:36:58:81:a5:01:
                    85:18:91:86:c3:7f:32:50:92:45:b7:33:5b:89:7f:
                    08:c2:fd:e3:d3:ff:a2:c4:ba:2b:6b:3c:89:4d:65:
                    45:2f:41:b6:59:0c:1d:fb:a0:c2:bb:85:48:f1:28:
                    e9:aa:82:ba:83:27:04:3b:fa:b4:6a:c3:1c:70:b6:
                    9c:42:f8:16:1c:3b:76:13:37:8a:cf:24:57:c0:10:
                    39:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:20:0C:A3:2F:4C:C4:1A:FF:E2:69:89:46:A3:42:D7:9E:D3:84:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/91e454fb-072d-39bc-b3f1-bd8a593b0dcd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.crl

            X509v3 Authority Key Identifier:
                keyid:80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.206.96.0/24
                  116.206.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:68:4c:11:13:9a:d4:e9:fa:19:8f:8c:c3:5f:d5:b4:92:3a:
         f1:06:a1:f1:96:aa:2f:0a:d6:f4:97:d8:1b:66:1e:d3:f7:f2:
         ee:01:2b:b3:66:e4:50:7c:f5:3f:bc:a4:d0:31:1e:ae:c6:0b:
         aa:29:07:06:b1:07:62:30:f5:b2:42:11:29:7b:4f:18:f2:37:
         ec:ea:fc:97:1e:63:63:d1:7d:00:e9:33:bc:3f:3f:a3:99:70:
         13:60:c1:bd:64:d6:ad:bc:0f:d3:44:ba:12:c4:3d:06:e8:61:
         31:90:5a:d3:3c:6b:cf:de:0a:ec:70:e0:4b:9e:ed:6e:76:a9:
         e6:8d:19:09:fe:53:c1:36:29:5b:6e:27:60:bb:5f:e8:39:74:
         69:a4:fb:b2:39:da:0b:da:c6:10:4f:5c:79:d4:a9:13:57:29:
         f5:e7:af:5d:9e:b2:92:79:60:f6:db:16:57:6f:90:b2:c9:5d:
         75:bf:27:f3:7d:12:39:0d:df:be:57:26:22:90:86:1d:24:9e:
         d0:22:8e:58:c6:e1:43:36:d9:84:1d:f7:c8:6a:a3:85:93:01:
         d2:9a:0b:d3:c6:4f:16:ad:95:12:51:fb:a4:0a:94:d9:cd:7f:
         05:4e:d9:43:f6:45:46:53:5f:f5:ad:d7:37:1c:e0:46:bb:49:
         9a:ed:33:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 12 10:55:23 2024 by rpki-client on console-fra.rpki-client.org