Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/feca4afe-c261-3735-aa9b-352ff351c1bd.roa
File:                     feca4afe-c261-3735-aa9b-352ff351c1bd.roa (raw, json)
Hash identifier:          DAZ+v7pz3N2HnVyaCnBoY8p2zFonanUQhYhGdVe8p1A=
Subject key identifier:   3A:4A:B6:06:DF:FE:74:0F:5B:DD:6A:67:40:29:68:3B:FC:29:4D:21
Certificate issuer:       /CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
Certificate serial:       010D0C9F43285844CF60D8212A9F07BABEBDB7C0
Authority key identifier: 80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/feca4afe-c261-3735-aa9b-352ff351c1bd.roa
Signing time:             Wed 07 Feb 2024 07:46:36 +0000
ROA not before:           Wed 07 Feb 2024 07:46:36 +0000
ROA not after:            Tue 07 May 2024 06:46:36 +0000
asID:                     13767
IP address blocks:        103.228.85.0/24 maxlen: 24
                          137.59.63.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 20 Feb 2024 05:50:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:cf:60:d8:21:2a:9f:07:ba:be:bd:b7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
        Validity
            Not Before: Feb  7 07:46:36 2024 GMT
            Not After : May  7 06:46:36 2024 GMT
        Subject: CN=ee55af98-bf19-43fe-8a85-e907a29dc883
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f5:55:d3:51:c9:93:df:4d:e9:76:25:0d:d0:
                    9c:7d:16:2e:26:37:4b:72:b1:08:34:d1:38:84:4c:
                    c1:e0:a9:1f:d9:ad:1a:8b:62:8d:26:71:3b:71:a8:
                    3f:98:a1:42:a0:ff:f8:b4:40:9b:21:b7:ef:8c:30:
                    2e:96:07:97:b0:fa:3f:40:98:32:8b:f6:48:0c:53:
                    d9:b5:f8:bc:00:10:d6:83:60:d0:09:77:2a:18:cb:
                    20:90:29:df:e7:6a:c3:7c:6a:17:48:b2:1f:6f:ec:
                    49:ae:4d:2b:f4:f7:d6:e4:37:42:c5:52:08:e0:c8:
                    f6:7f:25:c3:c2:27:c0:56:ea:6c:ef:d9:e5:bf:f0:
                    2b:ae:0b:2b:08:d2:3c:aa:02:bd:c2:b4:fb:a7:c2:
                    e7:f4:db:09:39:b7:8f:a9:8c:ff:ba:f4:94:33:39:
                    9e:3c:ec:43:f7:87:d5:3e:7f:ea:32:39:72:b3:8e:
                    f9:b4:2a:eb:f5:21:c4:49:2c:7c:84:09:0c:59:f1:
                    85:10:56:68:c6:70:16:00:f5:ad:19:f6:23:8f:ad:
                    12:6d:f3:e1:4e:2b:04:8c:ce:7e:a8:b5:a4:b5:80:
                    a0:de:1b:4a:4d:6e:3e:8f:b2:1e:f2:98:92:b6:7e:
                    96:80:1a:3a:4a:33:28:ed:ab:a8:60:04:78:9c:62:
                    37:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:4A:B6:06:DF:FE:74:0F:5B:DD:6A:67:40:29:68:3B:FC:29:4D:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/feca4afe-c261-3735-aa9b-352ff351c1bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.crl

            X509v3 Authority Key Identifier:
                keyid:80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.228.85.0/24
                  137.59.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:c8:58:61:df:1c:28:c4:2a:c8:00:0e:0c:62:03:01:7b:dd:
         57:1d:22:0e:48:c3:a6:96:b3:ab:5a:62:03:a9:78:6f:7c:d4:
         4b:b2:19:b9:7b:52:20:52:1a:2e:2e:84:6d:e4:ec:46:c0:a2:
         17:13:e0:49:1f:92:ed:11:0d:05:d8:44:5f:cc:93:fc:9d:f5:
         29:de:b1:ed:6b:63:ad:28:78:85:7d:df:1c:25:eb:64:33:70:
         b4:4f:83:a2:92:25:0d:f4:e1:1a:c9:bb:2f:4f:df:7c:7d:14:
         66:8f:d3:0f:83:ae:29:f4:14:23:ba:13:63:e9:ff:31:be:9c:
         91:88:e2:11:78:26:31:60:0e:ac:56:02:73:be:d1:fc:53:04:
         2a:f1:ad:65:d2:05:b2:0b:5e:5a:1f:0d:51:7a:a2:39:53:2a:
         0d:b7:79:95:d7:55:57:32:b6:dd:50:0c:8e:bd:f3:c9:87:ec:
         e9:61:ba:5d:8c:1f:ff:93:8d:b3:13:94:44:14:87:f7:d9:6d:
         01:0e:18:e6:11:e8:6b:36:2e:b3:74:67:70:ac:19:c8:7d:74:
         e8:9c:42:f5:a3:50:b2:b5:41:25:57:ef:8b:68:52:34:e9:a3:
         23:56:23:68:09:f1:8d:16:cf:44:6f:3e:87:22:b0:71:52:b8:
         b2:89:ab:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 20 06:57:33 2024 by rpki-client on console-ams.rpki-client.org