Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651/dd8faec9-da6b-386c-925a-a7b7eef2d969.roa
File:                     dd8faec9-da6b-386c-925a-a7b7eef2d969.roa (raw, json)
Hash identifier:          /novBeNKIKwknamKEAK2hvkYfIWdv+m4x3FdgHK3U/g=
Subject key identifier:   48:60:34:6F:F0:1D:F3:7B:9F:A7:03:40:49:62:F6:32:EA:0D:9B:AA
Certificate issuer:       /CN=a278da28-82b3-48fe-bc76-7859a82f5651
Certificate serial:       010D0C9F43285844C4EFB6421215245ADA3F1D00
Authority key identifier: F6:2A:63:3E:5D:7E:81:0B:03:E4:5F:CF:7F:24:96:AE:EF:A3:59:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651/dd8faec9-da6b-386c-925a-a7b7eef2d969.roa
Signing time:             Sat 03 Feb 2024 14:00:30 +0000
ROA not before:           Sat 03 Feb 2024 14:00:30 +0000
ROA not after:            Fri 03 May 2024 13:00:30 +0000
asID:                     135542
IP address blocks:        209.209.85.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 04 Apr 2024 08:21:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:c4:ef:b6:42:12:15:24:5a:da:3f:1d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a278da28-82b3-48fe-bc76-7859a82f5651
        Validity
            Not Before: Feb  3 14:00:30 2024 GMT
            Not After : May  3 13:00:30 2024 GMT
        Subject: CN=2bc44b3a-ecce-41e0-a55e-bc9ac4b990ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:81:3a:76:7f:5e:6f:4f:75:05:da:d8:43:ee:
                    6c:23:9e:51:dd:87:34:15:2a:3a:c8:7c:e1:e0:d9:
                    2c:eb:cd:36:ea:61:71:44:32:a5:4a:f8:00:e4:64:
                    2c:5d:29:43:17:d0:5f:e6:a4:e6:57:66:d1:c3:88:
                    f0:69:82:a6:37:4b:a6:9e:0b:06:ae:8e:cf:45:87:
                    d1:0a:78:d3:44:16:84:51:38:16:ae:de:f8:0b:a0:
                    e8:6f:33:35:42:3a:8e:4d:fa:b1:42:28:43:86:3f:
                    e0:d9:20:28:82:2c:24:3e:8d:b1:4b:cf:0c:f0:6a:
                    f1:af:da:17:84:4a:a1:15:9e:92:f9:90:76:a7:1a:
                    2b:56:a1:a9:bf:a1:c1:5d:db:43:eb:24:7e:e5:70:
                    e1:9e:e5:2f:e7:43:18:7c:4a:f3:89:cb:d1:49:0c:
                    b9:ad:57:be:88:b1:47:fb:65:8e:c0:cf:a2:c4:8a:
                    1e:51:08:62:54:84:37:ea:8b:fb:91:f8:ca:ce:2e:
                    0b:ea:ac:c7:7b:a4:3b:35:5c:1b:10:75:9e:70:45:
                    39:64:5f:24:a6:cd:28:0b:08:88:bc:3d:8e:70:54:
                    c9:3e:90:0e:c6:87:75:b5:00:87:44:b9:f7:58:aa:
                    ea:27:5a:f7:58:35:32:f0:f0:7b:80:fe:41:62:07:
                    c9:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:60:34:6F:F0:1D:F3:7B:9F:A7:03:40:49:62:F6:32:EA:0D:9B:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651/dd8faec9-da6b-386c-925a-a7b7eef2d969.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651/a278da28-82b3-48fe-bc76-7859a82f5651.crl

            X509v3 Authority Key Identifier:
                keyid:F6:2A:63:3E:5D:7E:81:0B:03:E4:5F:CF:7F:24:96:AE:EF:A3:59:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.209.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:29:37:ae:c3:21:17:5a:de:e9:81:9a:bc:3a:4d:3b:f3:37:
         cc:7b:b0:0a:25:19:b4:53:93:6a:23:7c:41:8f:49:9e:47:f8:
         36:a9:1a:bc:90:63:d8:58:1a:71:49:f1:b5:2a:4d:3a:39:8d:
         77:32:ff:5f:2f:08:3b:f8:bd:db:3d:c7:99:65:40:08:18:3a:
         9e:57:3d:fd:48:71:bf:4a:c8:5c:d1:c1:fd:6a:c0:53:a9:d0:
         3d:25:36:0d:5b:17:57:c1:20:28:36:ff:72:5a:00:cd:56:ee:
         10:5a:5a:69:9d:26:b1:20:fe:29:bd:17:14:e0:16:f8:12:f7:
         54:2f:1a:39:6a:19:84:7a:d0:f8:3f:64:a3:4d:72:63:76:ca:
         a8:f3:9f:83:b4:99:c8:ca:c7:24:ca:f5:73:0c:43:72:ac:c1:
         6a:63:63:f2:de:7d:81:4a:66:25:bb:a0:c5:77:f8:ee:ee:21:
         ca:8a:53:30:9e:1f:29:54:79:8f:87:42:c8:80:45:05:1b:b8:
         42:a4:79:40:ad:0b:d2:94:11:7b:03:64:62:c5:9c:55:88:7f:
         e2:01:0e:47:39:6d:3b:f9:5f:2d:b0:29:be:cb:b4:1e:1a:ba:
         45:0c:39:5f:51:02:c3:7d:c4:b4:bd:1c:d0:16:ef:bb:10:a1:
         e5:d1:ed:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 4 12:05:28 2024 by rpki-client on console-fra.rpki-client.org