Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651/df2d4ef7-4ac8-3e85-905b-bde4d00503d9.roa
File:                     df2d4ef7-4ac8-3e85-905b-bde4d00503d9.roa (raw, json)
Hash identifier:          4tpUN1ikYzqd2UfOU0A6oq4FAAoRbdRgvqo4UyznPRg=
Subject key identifier:   D4:19:B5:C7:27:45:2C:29:77:28:87:7F:15:2A:89:65:96:BA:56:99
Certificate issuer:       /CN=a278da28-82b3-48fe-bc76-7859a82f5651
Certificate serial:       010D0C9F432858456E9415B02D04255C8E5FAD80
Authority key identifier: F6:2A:63:3E:5D:7E:81:0B:03:E4:5F:CF:7F:24:96:AE:EF:A3:59:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651/df2d4ef7-4ac8-3e85-905b-bde4d00503d9.roa
Signing time:             Thu 04 Apr 2024 08:23:22 +0000
ROA not before:           Thu 04 Apr 2024 08:23:22 +0000
ROA not after:            Wed 03 Jul 2024 08:23:22 +0000
asID:                     38082
IP address blocks:        209.209.85.0/24 maxlen: 24
                          209.209.87.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 14 Apr 2024 03:19:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:6e:94:15:b0:2d:04:25:5c:8e:5f:ad:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a278da28-82b3-48fe-bc76-7859a82f5651
        Validity
            Not Before: Apr  4 08:23:22 2024 GMT
            Not After : Jul  3 08:23:22 2024 GMT
        Subject: CN=4ef10387-9a28-4a9a-8dbf-fcb25118441a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:99:16:1a:dc:86:36:98:8a:a9:65:d1:98:3f:
                    88:e9:82:37:05:ec:a8:45:18:fc:ab:9b:ba:fa:57:
                    b5:1c:f7:c2:24:6a:25:92:cb:66:82:e5:13:cb:78:
                    59:d2:d9:6a:11:ab:f5:15:ea:5d:c0:4b:28:b1:55:
                    9d:20:ef:85:be:83:a9:25:c0:55:59:73:5d:98:0c:
                    32:ad:53:95:e3:f5:2a:e9:8c:27:6b:d9:03:4e:d4:
                    f6:e2:cf:e3:fe:c8:7f:70:c5:94:27:f2:f1:17:03:
                    1d:73:b4:38:52:1e:6d:8f:b4:ea:13:7b:ce:5e:b2:
                    27:e3:03:a5:53:06:54:2f:a4:92:e0:d5:1d:1a:45:
                    84:7f:d2:c9:aa:be:cb:4c:48:6e:55:9b:74:ee:5f:
                    d7:8a:85:4e:41:af:af:8c:59:88:12:62:68:76:bc:
                    9b:77:84:eb:84:f2:ab:ca:66:e2:1e:56:68:6f:e2:
                    fd:d6:34:82:0f:63:1c:f3:59:38:3c:fd:50:84:58:
                    74:6d:0b:cc:82:d1:5d:7a:5e:bd:33:b7:75:46:58:
                    88:f5:e0:e3:21:49:71:f5:7e:a8:a3:92:88:80:6f:
                    ec:07:ad:ef:d4:d0:46:46:52:90:4a:12:8f:03:b4:
                    50:67:0b:50:60:70:69:d9:cb:65:88:71:fc:bb:ef:
                    08:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:19:B5:C7:27:45:2C:29:77:28:87:7F:15:2A:89:65:96:BA:56:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651/df2d4ef7-4ac8-3e85-905b-bde4d00503d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651/a278da28-82b3-48fe-bc76-7859a82f5651.crl

            X509v3 Authority Key Identifier:
                keyid:F6:2A:63:3E:5D:7E:81:0B:03:E4:5F:CF:7F:24:96:AE:EF:A3:59:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a278da28-82b3-48fe-bc76-7859a82f5651.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.209.85.0/24
                  209.209.87.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:be:c4:d3:2a:cb:11:fc:95:52:e6:66:53:29:ca:f7:07:49:
         07:f4:b8:34:3d:9d:b4:3c:ef:85:0e:fc:f5:aa:0c:3a:1a:04:
         0e:39:4a:4a:10:34:80:35:11:eb:48:12:76:89:16:2b:07:94:
         6e:82:99:24:84:99:fa:e4:eb:f0:b2:ab:93:4e:61:a1:b3:92:
         67:9f:83:b0:f5:a2:9a:3a:a1:2a:60:0a:93:c0:2c:58:39:5c:
         f4:99:9f:6b:64:93:40:30:6a:2d:d2:67:6f:11:b2:c1:2c:47:
         9d:41:f6:64:dd:1d:68:5a:f9:0e:f4:44:1e:bc:f5:31:b1:be:
         0e:34:7b:e8:68:6a:8a:31:65:07:9b:7c:b9:f1:e6:7a:11:26:
         6d:7d:a8:55:97:72:6a:75:01:1c:b1:e4:fc:1a:87:68:c6:31:
         42:00:5a:92:16:47:ec:fb:03:65:8e:92:b6:61:c3:72:03:8c:
         b0:08:ea:11:68:12:fb:85:ed:96:5a:06:5d:32:a3:e8:44:40:
         24:b9:42:27:d7:46:4f:58:66:32:cb:8a:8f:2d:5a:01:d9:29:
         63:25:14:0e:82:95:8f:55:18:f4:1f:60:2b:1c:77:32:ab:bc:
         ea:0c:61:f8:d5:1e:f9:19:3f:7c:04:06:04:f3:9f:04:51:4b:
         76:12:29:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 14 04:05:52 2024 by rpki-client on console-fra.rpki-client.org