Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/bb65d73f-a72f-3466-ab1c-087e88be06c7.roa
File:                     bb65d73f-a72f-3466-ab1c-087e88be06c7.roa (raw, json)
Hash identifier:          awGcoZAirrgwYRInaXfrqtRt/88q0Lp5cCbb3PM+8F8=
Subject key identifier:   62:77:B8:11:F4:6F:78:DD:6C:04:28:51:28:1A:13:DC:29:45:E5:3A
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285846EDC4F1358EC493011EB94280
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/bb65d73f-a72f-3466-ab1c-087e88be06c7.roa
Signing time:             Mon 19 Aug 2024 14:36:24 +0000
ROA not before:           Mon 19 Aug 2024 14:36:24 +0000
ROA not after:            Sun 17 Nov 2024 15:36:24 +0000
asID:                     25867
IP address blocks:        216.240.196.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 03 Oct 2024 20:03:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:ed:c4:f1:35:8e:c4:93:01:1e:b9:42:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Aug 19 14:36:24 2024 GMT
            Not After : Nov 17 15:36:24 2024 GMT
        Subject: CN=c419c51a-c2b9-4589-94a1-cbbee4d6bae8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a1:40:fe:3a:2a:38:5e:6f:23:f4:3b:2a:7c:
                    ea:38:eb:b9:04:51:e8:b6:73:d6:4c:63:73:77:84:
                    f6:56:9c:5c:9a:f9:67:0a:28:19:4a:b2:8d:c7:2e:
                    ae:0b:ba:7a:15:6c:fc:a3:c1:42:2a:38:d9:89:39:
                    d0:6f:da:78:60:a9:42:e6:4f:19:2f:e2:9b:73:f6:
                    9c:2f:9c:a7:0f:f6:5b:73:d9:99:bc:e2:fd:00:21:
                    2a:01:4a:1b:46:a5:12:75:cf:44:f1:14:7c:82:e9:
                    dd:9e:a2:bc:de:d8:21:0f:09:dd:f3:3d:a9:13:fa:
                    b0:e6:36:dc:ee:8b:05:49:89:ea:26:97:f1:84:b7:
                    54:03:51:43:c9:05:c1:de:0a:32:85:8c:58:63:80:
                    8c:b3:a8:c3:14:19:66:3e:8b:11:c2:a0:98:75:3b:
                    d4:2f:eb:65:75:d4:40:b1:7f:8b:5c:e7:00:b5:57:
                    09:b0:f3:c4:3f:bc:b6:61:91:73:08:2a:6d:c1:d9:
                    49:49:ec:3c:42:33:5f:51:07:cd:ea:78:59:e1:b7:
                    e2:e4:f8:01:4b:7e:cd:b2:15:3b:2e:c5:f5:61:de:
                    c7:16:7a:74:9d:52:3d:e0:a3:84:f0:3b:f4:57:10:
                    e7:74:a8:81:e9:d1:c2:7e:43:46:15:9d:5d:7c:9a:
                    03:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:77:B8:11:F4:6F:78:DD:6C:04:28:51:28:1A:13:DC:29:45:E5:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/bb65d73f-a72f-3466-ab1c-087e88be06c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.240.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:d5:69:ec:84:da:2e:68:35:a2:93:32:19:3d:96:9f:85:bd:
         48:17:8e:dc:9c:16:4a:d9:5a:8c:d4:7b:1e:4c:20:d4:eb:94:
         1f:3b:d3:9f:ad:7f:ab:29:3d:34:7b:9d:f8:10:0c:a1:c4:16:
         12:21:ff:a5:b9:d9:37:e5:30:f2:ea:1b:15:e2:d3:72:2c:a7:
         0e:b7:2c:91:e8:88:44:57:df:4b:ef:db:57:ee:06:80:9c:11:
         76:7b:25:6f:a2:fd:72:f0:f6:44:b7:5a:11:e7:2d:89:6c:9a:
         f2:9a:f2:ce:1f:aa:4b:18:9f:78:04:fc:6a:f7:c0:a6:4a:bf:
         03:01:b7:24:48:d3:08:de:85:5a:a8:e6:3e:70:77:de:1f:fd:
         84:9e:21:6b:84:48:25:51:ba:33:99:7c:ef:27:eb:8a:bf:c3:
         47:8c:19:66:8f:81:76:f3:66:2a:8d:84:fd:74:dd:47:fd:7b:
         44:98:7a:a3:12:db:e0:0b:35:e7:3b:53:b5:2e:5e:ee:83:b1:
         f1:ab:c0:a6:9e:94:d1:86:e5:21:a9:ae:d7:e9:2e:8f:37:33:
         be:c1:bc:0e:33:c0:ae:18:09:03:c0:86:45:27:a6:3f:90:ca:
         d2:10:2b:53:ac:92:58:0b:cb:1d:07:e8:cf:c2:d0:f9:0a:14:
         1b:f6:61:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 3 21:58:06 2024 by rpki-client on console-fra.rpki-client.org