Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99d7c699-190f-4fad-a37d-bd259bb116b5/895769ae-a88d-3de8-a6ab-bfcafa25d572.roa
File:                     895769ae-a88d-3de8-a6ab-bfcafa25d572.roa (raw, json)
Hash identifier:          G6r4J6Vc3lzjjtlSJ0J7Rn2gadIXIKUQtqY8ZExsP7o=
Subject key identifier:   A2:9B:BB:7A:7F:C3:0E:30:8C:E6:AA:28:96:8D:2E:EB:D2:DB:AF:47
Certificate issuer:       /CN=99d7c699-190f-4fad-a37d-bd259bb116b5
Certificate serial:       010D0C9F43285844527990DB4C0E57C4CE696680
Authority key identifier: 50:C5:AC:07:70:3F:38:98:35:3F:3C:A2:42:48:86:19:AB:0B:75:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99d7c699-190f-4fad-a37d-bd259bb116b5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99d7c699-190f-4fad-a37d-bd259bb116b5/895769ae-a88d-3de8-a6ab-bfcafa25d572.roa
Signing time:             Sun 24 Dec 2023 14:00:20 +0000
ROA not before:           Sun 24 Dec 2023 14:00:20 +0000
ROA not after:            Sat 23 Mar 2024 13:00:20 +0000
asID:                     20473
IP address blocks:        147.189.152.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Fri 02 Feb 2024 04:33:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:52:79:90:db:4c:0e:57:c4:ce:69:66:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99d7c699-190f-4fad-a37d-bd259bb116b5
        Validity
            Not Before: Dec 24 14:00:20 2023 GMT
            Not After : Mar 23 13:00:20 2024 GMT
        Subject: CN=0ffeb6f8-f917-4a10-8b92-a1fc12b9f127
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:2b:85:3c:52:6a:43:04:1c:f6:5e:5e:4b:d8:
                    a9:7b:d7:29:b9:0d:6b:b3:fc:ce:f0:16:4a:da:65:
                    a6:d9:fb:f7:3d:33:be:39:80:7e:28:b8:89:3d:aa:
                    0a:ee:07:e0:52:9b:94:41:11:9d:69:22:f5:03:66:
                    40:1d:ec:44:77:50:a9:cd:55:a8:90:5d:85:7e:4f:
                    5e:ca:67:b0:b0:d7:4a:d8:1d:83:c4:f5:d9:04:29:
                    7d:be:a1:0e:e6:08:bd:9f:7a:c7:7e:ed:26:c6:7a:
                    50:2e:1e:44:d9:0b:5f:78:2e:7a:08:64:89:20:bd:
                    77:e6:f2:21:39:b3:74:4d:fe:af:bf:9f:ba:0d:ad:
                    fe:7b:3f:2b:23:90:27:21:b6:b9:ed:a4:db:4f:67:
                    41:5d:a6:71:1b:87:a1:e9:27:07:04:48:1a:85:81:
                    38:29:50:23:b2:5d:f5:e8:76:7f:d2:30:bf:c1:7f:
                    51:75:1c:8e:ce:7b:59:da:a2:60:a4:a5:75:88:01:
                    dd:ae:b2:21:f6:30:36:a0:ac:18:9c:16:b6:92:34:
                    6b:32:23:6b:33:ae:34:df:22:d1:be:86:c4:ad:a6:
                    a3:31:53:f5:d0:65:6e:dc:bc:18:ad:2c:fa:1c:fd:
                    64:77:48:01:73:67:3e:ed:71:bf:b8:6d:63:e7:16:
                    a8:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:9B:BB:7A:7F:C3:0E:30:8C:E6:AA:28:96:8D:2E:EB:D2:DB:AF:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99d7c699-190f-4fad-a37d-bd259bb116b5/895769ae-a88d-3de8-a6ab-bfcafa25d572.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99d7c699-190f-4fad-a37d-bd259bb116b5/99d7c699-190f-4fad-a37d-bd259bb116b5.crl

            X509v3 Authority Key Identifier:
                keyid:50:C5:AC:07:70:3F:38:98:35:3F:3C:A2:42:48:86:19:AB:0B:75:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99d7c699-190f-4fad-a37d-bd259bb116b5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.189.152.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:3f:1e:dd:d2:dd:2e:a0:46:a0:27:e5:07:a2:8a:b8:e7:22:
         49:55:56:2f:42:41:a8:3e:a1:9c:a0:a5:03:78:9b:0e:c6:18:
         92:d6:44:c0:8b:e2:ff:ff:a0:15:a3:20:d9:85:c0:ae:ec:42:
         4f:b4:be:43:82:70:15:c0:cd:e0:bb:6b:e1:08:53:8a:de:3f:
         07:06:9f:23:fa:29:42:fc:bc:65:78:f6:c9:2a:90:d0:68:43:
         19:48:13:4f:b4:5e:f9:4f:2f:6a:c9:ae:4f:61:13:9c:e0:d3:
         26:54:41:db:4c:1d:7c:e3:ba:65:1f:22:e6:ed:55:89:8c:c2:
         d3:ed:b5:69:f8:c8:be:31:87:53:6d:4a:76:09:b8:d6:47:f2:
         74:c6:1b:cf:df:23:22:56:88:7b:d2:c0:87:1a:12:9f:4a:cd:
         6e:99:b6:dd:9b:63:a8:57:06:12:a5:57:5c:db:30:38:dc:32:
         12:d1:a0:a4:a7:53:ed:72:2b:87:df:73:27:ba:e3:df:20:08:
         62:8c:e5:9a:c9:c7:64:72:f1:93:72:0d:12:b0:dc:ec:a3:9c:
         16:55:95:dd:c9:7e:a2:31:8d:cc:e5:86:f5:a3:af:fb:38:60:
         ca:65:60:7d:b9:00:08:b0:38:8c:4d:24:21:c4:ab:01:59:d2:
         1d:3f:24:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 2 05:11:09 2024 by rpki-client on console-ams.rpki-client.org