Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/b38c7936-9ec5-3984-a7ed-01d29b8258e1.roa
File:                     b38c7936-9ec5-3984-a7ed-01d29b8258e1.roa (raw, json)
Hash identifier:          YA8Z8dR5rQa5GH2H/4+1P0g61bGF6sFEAOT/jObEVXE=
Subject key identifier:   D1:8A:76:88:9D:3B:34:1B:5B:1F:B5:B7:3E:A6:7D:5D:16:F8:68:A0
Certificate issuer:       /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial:       010D0C9F4328583D73D4931920592EF24D546120
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/b38c7936-9ec5-3984-a7ed-01d29b8258e1.roa
Signing time:             Tue 18 May 2021 04:00:00 +0000
ROA not before:           Tue 18 May 2021 04:00:00 +0000
ROA not after:            Sat 06 Jul 2030 04:00:00 +0000
asID:                     9009
IP address blocks:        172.98.160.0/24 maxlen: 24
                          172.98.163.0/24 maxlen: 24
                          172.98.164.0/24 maxlen: 24
                          172.98.183.0/24 maxlen: 24
                          172.98.186.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 23 May 2022 22:32:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:73:d4:93:19:20:59:2e:f2:4d:54:61:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
        Validity
            Not Before: May 18 04:00:00 2021 GMT
            Not After : Jul  6 04:00:00 2030 GMT
        Subject: CN=39e21850-99bc-48a6-ae1b-71f94c095154
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:ab:e9:1e:7b:bb:6a:a1:7c:0e:af:d3:7b:59:
                    a3:d0:6f:04:ab:fb:78:73:e1:ca:2d:73:b2:fd:ba:
                    3f:ce:60:bb:1d:5c:41:04:f5:fd:c4:e1:c6:5f:46:
                    f2:7f:f7:19:56:8e:84:d3:39:de:a9:03:1b:24:42:
                    14:d1:b7:cd:a9:b5:04:46:0d:bc:16:2b:f8:93:1a:
                    ff:90:75:1b:ce:f9:00:13:d7:c5:f7:64:cf:28:46:
                    98:64:94:f7:9f:1e:d4:8e:4a:22:70:9b:6e:a0:51:
                    1a:4e:8d:84:10:5c:34:df:b4:30:e2:49:18:9b:ec:
                    6f:e5:2a:5b:ad:57:38:58:6f:67:51:57:bc:7d:d1:
                    b2:78:43:dc:6f:72:d2:83:b6:53:7d:b8:36:59:8b:
                    05:29:d7:6d:ca:44:bd:1d:91:8e:cd:a6:91:49:e6:
                    00:aa:56:87:9a:7d:ef:ad:9c:c2:f5:4f:2a:1e:7d:
                    3b:2e:71:f7:fa:9b:48:40:c0:a0:98:ef:d4:a6:59:
                    b2:82:61:a1:9a:cb:01:da:9d:f4:be:51:08:03:9d:
                    b4:c1:3e:29:b0:20:4c:70:7f:b4:ef:a3:10:6c:0c:
                    61:9a:48:72:21:c4:6f:e5:48:aa:d9:32:ed:3b:9e:
                    dd:a5:92:3a:e9:66:07:93:2f:6d:31:36:6f:c6:d8:
                    f0:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:8A:76:88:9D:3B:34:1B:5B:1F:B5:B7:3E:A6:7D:5D:16:F8:68:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/b38c7936-9ec5-3984-a7ed-01d29b8258e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl

            X509v3 Authority Key Identifier:
                keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.98.160.0/24
                  172.98.163.0-172.98.164.255
                  172.98.183.0/24
                  172.98.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:cf:1e:2a:97:a8:d7:d7:5f:2f:f5:c0:aa:50:7d:b6:c5:6f:
         c9:f9:41:f4:8e:2e:0f:fd:dd:8a:cd:70:26:9e:a9:a5:7f:41:
         ef:50:28:ca:4e:92:4a:f4:f2:87:7a:09:e1:b7:f3:88:fa:ee:
         3a:ec:66:60:25:fd:89:8d:03:c8:48:c5:ea:0b:3a:9d:a9:8f:
         3f:15:cb:a8:58:6e:89:ba:b7:4c:61:6d:c3:86:c3:c7:d4:7f:
         49:15:59:47:a7:e6:9e:b2:43:04:a1:fa:51:42:de:e6:39:f5:
         45:35:60:e8:7b:6d:f2:83:0f:d7:9a:5d:52:ce:01:86:5d:3c:
         a5:22:1a:4f:38:38:e7:69:d3:33:6d:d0:63:17:6d:85:53:57:
         2c:a8:5a:6c:ad:ef:3c:b5:f5:55:12:cf:7c:9e:5e:f3:6a:d3:
         01:bf:f5:6a:ec:9e:88:55:12:af:e7:76:c5:db:66:cd:9a:91:
         96:2f:cc:81:98:61:3e:54:fd:d5:67:ac:64:8d:8e:1f:f4:90:
         d8:f6:ec:c4:4c:2e:9f:f0:48:bf:04:13:16:43:95:c3:19:89:
         5a:9a:34:dc:bc:9a:27:f4:6c:59:d0:77:cf:16:11:d0:2e:15:
         e9:b7:a9:37:f4:f2:6e:db:14:c4:8f:10:dc:cb:7c:2e:d3:0a:
         00:a4:9e:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:08 2024 by rpki-client on console-fra.rpki-client.org