Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/8ff57519-5762-32fa-9d7b-407711ba005e.roa
File:                     8ff57519-5762-32fa-9d7b-407711ba005e.roa (raw, json)
Hash identifier:          ioBzRLVp/eMp8UChZyCz1PAIpQE8gyEMuUyE0XjEIaE=
Subject key identifier:   E8:2E:1B:5F:93:79:F2:9F:6D:12:A6:81:52:1E:A3:12:0C:B1:64:8A
Certificate issuer:       /CN=48f8534f-57cd-45ba-bfa4-ce60842463a4
Certificate serial:       010D0C9F43285846C99AC17CA8284B61BAE3A1C0
Authority key identifier: E8:53:DD:09:72:55:3A:20:6A:9B:7D:EE:50:46:52:6A:5F:62:66:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/8ff57519-5762-32fa-9d7b-407711ba005e.roa
Signing time:             Tue 06 Aug 2024 15:42:18 +0000
ROA not before:           Tue 06 Aug 2024 15:42:18 +0000
ROA not after:            Mon 04 Nov 2024 16:42:18 +0000
asID:                     7018
IP address blocks:        174.136.201.0/24 maxlen: 24
                          199.119.137.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 08 Oct 2024 19:14:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:c9:9a:c1:7c:a8:28:4b:61:ba:e3:a1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48f8534f-57cd-45ba-bfa4-ce60842463a4
        Validity
            Not Before: Aug  6 15:42:18 2024 GMT
            Not After : Nov  4 16:42:18 2024 GMT
        Subject: CN=300e81fc-03c8-442b-bb01-5f83d5963ce1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:9a:df:0f:c1:f3:43:cf:98:85:1c:31:24:ad:
                    2a:cc:f3:93:7f:e2:30:94:b7:b5:cc:29:f6:73:94:
                    44:6a:70:05:c4:9f:70:91:68:83:d0:7c:28:5f:59:
                    d8:6d:e7:91:a3:b7:0d:fc:f8:9c:e1:19:d4:f9:82:
                    bf:ba:05:cb:0c:27:44:e2:3a:87:ec:1b:49:b9:02:
                    39:de:c9:18:a6:27:8e:b1:d5:72:3f:4d:2a:13:72:
                    f5:f9:78:1c:84:7e:ff:f5:20:44:54:7e:21:07:ec:
                    ee:89:f0:49:85:ce:3d:17:65:a1:ec:e2:ba:9b:34:
                    77:f2:89:dd:63:2f:32:52:dc:f9:f9:1f:6e:08:0b:
                    ed:c2:93:c4:b5:d8:0f:c9:42:f8:9c:d7:17:4d:60:
                    93:a3:8e:14:2f:a7:f4:52:7c:2f:3b:b2:19:b3:d5:
                    68:ac:c7:25:09:be:9c:1d:a2:23:71:9f:31:5d:33:
                    81:4c:04:cd:d9:db:72:af:43:20:fd:47:86:96:28:
                    07:bf:b4:54:59:d9:7b:b1:0d:b3:f3:dc:75:9a:f6:
                    06:34:f4:bc:81:d5:86:b3:3e:4a:3d:04:98:3e:6d:
                    86:d3:22:68:fc:5f:59:5b:d3:3e:17:1c:bf:63:a8:
                    7d:85:8f:7b:b3:a0:9e:f4:c6:59:a9:66:19:99:6a:
                    93:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:2E:1B:5F:93:79:F2:9F:6D:12:A6:81:52:1E:A3:12:0C:B1:64:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/8ff57519-5762-32fa-9d7b-407711ba005e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4/48f8534f-57cd-45ba-bfa4-ce60842463a4.crl

            X509v3 Authority Key Identifier:
                keyid:E8:53:DD:09:72:55:3A:20:6A:9B:7D:EE:50:46:52:6A:5F:62:66:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/48f8534f-57cd-45ba-bfa4-ce60842463a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.136.201.0/24
                  199.119.137.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:e5:b7:3a:c8:46:3d:1b:08:4b:ee:e8:8c:ed:bf:0b:93:cd:
         bf:ae:99:72:8a:01:60:c6:8f:08:9a:36:0f:d2:a1:0b:a4:92:
         9e:2c:59:32:66:fd:8f:c0:19:ed:60:7e:b1:6e:15:a3:84:09:
         6c:01:a3:4b:1d:06:ef:4c:c8:b3:a4:df:56:7e:49:46:c3:20:
         b1:89:bc:93:04:53:f1:6f:30:7a:b3:3a:95:ab:0c:fe:b8:55:
         5a:b6:b8:05:28:02:93:e5:84:70:74:4c:82:32:c0:9b:65:c9:
         82:64:a4:c2:22:de:4a:ca:06:56:c2:41:24:20:d5:9a:46:c0:
         bb:06:c5:9c:f9:f4:61:21:3b:a7:04:57:db:03:c6:b6:63:db:
         8f:7e:bc:b1:56:63:d2:cb:68:10:df:b7:04:bd:56:f7:f1:fa:
         0a:4b:c1:08:a5:3b:3b:b1:69:4d:0b:b8:b6:10:15:44:fd:71:
         81:3d:cf:f8:a6:de:f3:de:41:a8:a8:ed:3d:b2:74:1e:39:e1:
         72:b5:ae:8d:f4:96:01:cf:9f:0d:d0:4e:8f:e4:90:bd:72:39:
         66:00:89:df:c9:2e:1d:14:90:69:5c:00:7d:4e:67:5d:a6:c6:
         62:85:87:6f:89:79:36:5f:1f:11:b1:86:eb:11:44:60:3d:be:
         47:95:ef:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 8 22:48:48 2024 by rpki-client on console-fra.rpki-client.org