Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/286c3b2a-7b5f-398f-accf-00afdeeb2385.roa
File:                     286c3b2a-7b5f-398f-accf-00afdeeb2385.roa (raw, json)
Hash identifier:          L8AYfgohbbbuKqfaoQWHHa6Oxg3W2VNPdau12oKCCFQ=
Subject key identifier:   B3:03:88:37:14:21:D1:F3:22:B3:4D:A0:DD:16:8E:5D:B7:F7:04:82
Certificate issuer:       /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Certificate serial:       010D0C9F4328583E9BB5E21160A32E41FBA9EA80
Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/286c3b2a-7b5f-398f-accf-00afdeeb2385.roa
Signing time:             Sun 17 Jul 2022 12:00:00 +0000
ROA not before:           Sun 17 Jul 2022 12:00:00 +0000
ROA not after:            Mon 10 Jul 2028 04:00:00 +0000
asID:                     55293
IP address blocks:        170.0.4.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 11:58:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:9b:b5:e2:11:60:a3:2e:41:fb:a9:ea:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
        Validity
            Not Before: Jul 17 12:00:00 2022 GMT
            Not After : Jul 10 04:00:00 2028 GMT
        Subject: CN=e6f26d66-defa-4752-a9e9-4c8eaadb5aab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:fa:bb:fb:04:10:5d:f1:42:c3:15:7a:8c:6d:
                    19:ee:32:fb:09:6d:95:d7:4f:a0:11:fc:63:22:6f:
                    53:10:00:bc:be:6e:d1:49:cc:68:65:35:c4:8e:84:
                    04:8e:80:d6:3c:97:ba:b1:29:28:ab:3f:be:a5:fe:
                    60:f8:0c:eb:81:9e:9f:d1:27:6c:05:06:11:b6:5b:
                    92:fe:ac:cc:59:e6:9f:c2:2c:ea:03:7e:7d:38:f0:
                    20:6a:0b:2e:a1:9d:8c:69:d3:a7:00:fb:df:2a:a7:
                    fb:94:1b:f5:46:e3:6d:8d:74:ce:e3:d7:14:65:f5:
                    ff:20:5a:32:24:00:b9:5b:d1:00:a5:66:ec:5e:15:
                    61:42:bf:b8:b3:2d:dc:61:00:ef:38:ee:43:47:cb:
                    7f:1a:b2:db:98:c4:29:0b:54:48:cb:99:d7:ad:29:
                    59:21:81:66:a2:cb:29:14:d5:c7:18:b1:82:c9:d5:
                    9c:a0:b3:50:26:53:84:a6:fa:b5:95:43:82:f0:7f:
                    1a:4b:9f:a5:08:53:17:6c:a5:c0:29:8b:7d:65:0a:
                    d5:6a:93:24:ad:cf:29:58:66:11:d0:9b:8e:44:f4:
                    14:4e:86:35:80:57:34:1f:de:3f:9c:20:cc:74:55:
                    8c:2e:63:a9:dc:da:3d:22:24:c3:86:fb:5a:04:1a:
                    8d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:03:88:37:14:21:D1:F3:22:B3:4D:A0:DD:16:8E:5D:B7:F7:04:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/286c3b2a-7b5f-398f-accf-00afdeeb2385.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl

            X509v3 Authority Key Identifier:
                keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.4.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:76:c0:17:4f:dc:ac:2d:36:1b:fc:f2:13:51:db:df:8d:eb:
         28:b5:47:3f:5e:0e:80:fd:01:48:b0:24:cc:e7:87:b6:16:4c:
         8d:5c:72:33:08:b3:0a:4b:96:09:8a:d0:af:82:47:30:82:2f:
         c0:b1:b9:a5:b1:d2:95:8f:6e:3e:c3:83:3c:41:02:bc:df:dd:
         da:02:27:77:27:a2:cb:71:38:1f:08:1d:61:b6:17:48:38:92:
         c9:14:78:d5:02:d7:17:5e:ba:64:97:27:9c:27:67:46:eb:1b:
         a2:62:ee:65:79:da:63:a4:b4:4e:f2:49:48:9a:c0:7c:0c:0d:
         f9:f0:dd:66:84:73:cf:3e:de:e3:6e:fb:87:86:f6:06:28:8e:
         2a:cd:92:aa:31:08:3b:93:62:b8:af:fe:1a:e2:27:2a:ea:60:
         c7:69:4d:72:3b:0b:ab:8b:88:58:a0:19:92:11:8c:92:9e:f5:
         f4:dd:aa:44:0b:fa:90:83:43:d1:31:d7:ae:09:4e:5b:5b:c7:
         3e:9d:1f:52:d2:72:23:0b:97:b2:ae:50:fe:cd:e8:2b:02:a2:
         0d:ac:be:2f:68:e6:ca:05:8b:d2:1e:4a:03:98:5e:29:a5:4f:
         84:b6:ed:c0:f2:bb:0b:5a:44:88:37:56:e9:0f:74:d2:b7:52:
         34:75:91:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:33 2024 by rpki-client on console-ams.rpki-client.org