Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/b9dc53ef-2616-3513-9b1b-8faf5110bba3.roa
File:                     b9dc53ef-2616-3513-9b1b-8faf5110bba3.roa (raw, json)
Hash identifier:          B8Kotp7xGFIz2EcRMdEHabpXKDc6rMKzul9MJHI+ALs=
Subject key identifier:   A7:2F:93:3C:9A:D3:C2:97:15:CA:7D:95:DA:4D:2D:D6:8C:C0:BF:B9
Certificate issuer:       /CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
Certificate serial:       010D0C9F4328584746777081F69D6CFF0F10F680
Authority key identifier: 80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/b9dc53ef-2616-3513-9b1b-8faf5110bba3.roa
Signing time:             Fri 20 Sep 2024 09:07:11 +0000
ROA not before:           Fri 20 Sep 2024 09:07:11 +0000
ROA not after:            Thu 19 Dec 2024 10:07:11 +0000
asID:                     7018
IP address blocks:        103.216.0.0/24 maxlen: 24
                          103.216.2.0/24 maxlen: 24
                          199.249.223.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 25 Oct 2024 07:44:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:46:77:70:81:f6:9d:6c:ff:0f:10:f6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
        Validity
            Not Before: Sep 20 09:07:11 2024 GMT
            Not After : Dec 19 10:07:11 2024 GMT
        Subject: CN=fc9414dc-d026-4954-a4b3-d842694db853
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:07:29:9e:47:eb:71:46:e5:b5:42:2e:d8:e4:
                    7a:b0:12:fb:0b:64:0b:ca:00:87:39:bf:14:43:71:
                    99:20:f8:28:91:73:63:92:6f:2b:88:db:e4:d9:20:
                    e0:25:be:b0:71:0a:16:62:3c:63:c2:55:ce:fd:69:
                    87:f2:ad:e3:20:67:17:78:e5:16:1d:62:29:5d:fc:
                    53:d0:49:6c:66:62:01:b4:6d:37:c9:77:fc:ba:e7:
                    68:9f:8e:bd:a8:bd:b6:c3:a8:8f:ac:24:15:82:e5:
                    5f:2b:5a:75:a8:e2:cf:50:16:2b:7e:2f:f2:8b:72:
                    7c:70:2c:6a:b3:20:45:51:e2:f4:19:e2:ff:c0:9a:
                    7e:6e:31:7e:fa:a5:ec:55:0b:c1:67:01:36:60:d2:
                    c3:f9:3d:e3:15:0e:a2:16:35:fb:57:fd:94:f3:b8:
                    c0:62:31:95:3b:52:2a:a4:1b:ed:1b:f9:a8:e6:2f:
                    08:4c:ba:3e:07:f9:2e:0f:c4:b9:ea:a1:60:42:a7:
                    13:54:b9:79:2b:9a:aa:5c:2a:39:11:9e:3c:59:18:
                    ef:18:50:17:a2:f1:ca:9c:bf:ae:14:b9:51:23:21:
                    de:e7:dd:9a:aa:70:69:b5:01:06:55:1f:4e:33:eb:
                    d9:51:c9:b4:08:01:fb:fc:48:f4:01:a4:86:00:8c:
                    1a:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:2F:93:3C:9A:D3:C2:97:15:CA:7D:95:DA:4D:2D:D6:8C:C0:BF:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/b9dc53ef-2616-3513-9b1b-8faf5110bba3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.crl

            X509v3 Authority Key Identifier:
                keyid:80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.216.0.0/24
                  103.216.2.0/24
                  199.249.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:5b:98:c2:2c:2d:f7:64:8f:e4:11:6c:48:a8:96:97:40:7e:
         f8:35:0d:b8:e3:50:1f:ac:46:66:1d:af:d6:ab:6f:0f:2e:4b:
         f9:f8:fe:f7:a1:d9:c0:68:3d:77:55:7c:ba:2c:de:fa:82:ba:
         6a:3e:22:0d:d4:59:54:ac:38:74:4e:e5:e8:4d:ac:11:c6:8f:
         79:26:30:6a:90:78:59:6b:c6:f4:1b:1a:51:85:37:24:ca:00:
         65:bc:9b:5d:63:4e:ef:a8:95:22:56:68:46:08:a2:4e:0f:73:
         2c:e8:4e:12:1e:b7:bb:a6:af:34:13:25:1a:14:df:c1:01:6c:
         d0:ea:12:60:89:6b:e8:70:e1:01:44:1a:03:dd:47:93:e2:d5:
         fb:9d:7f:8e:05:58:93:8f:70:6d:9c:2e:47:4d:c1:ce:d7:35:
         4e:2e:b2:d6:82:22:49:bc:66:f6:ff:94:3c:e4:ec:b2:94:64:
         51:3c:f5:5f:21:d1:08:34:a2:7b:f0:be:74:11:ad:fb:3b:80:
         eb:de:c7:8a:c7:25:5b:40:ed:e1:d0:a9:aa:31:81:55:49:6c:
         38:91:e4:6a:ba:9f:61:90:7a:4c:ba:e8:9f:d2:49:49:38:70:
         dd:a8:5b:e1:67:96:91:f6:01:af:4f:a4:93:ed:4e:68:e9:51:
         69:4c:cc:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 25 10:02:37 2024 by rpki-client on console-ams.rpki-client.org