Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/591c008c-2f51-328b-8e64-7ded58b981e4.roa
File:                     591c008c-2f51-328b-8e64-7ded58b981e4.roa (raw, json)
Hash identifier:          rvT4O4gPvGg9/cEmbrTnefp6Nm53SCeBUd1Vl+uw0gs=
Subject key identifier:   32:68:B0:85:39:47:C8:9B:A2:6C:88:23:EF:4F:1E:F7:9B:A5:FF:B0
Certificate issuer:       /CN=d44d3fac-ab99-4b37-a42e-dbf67a95c460
Certificate serial:       010D0C9F43285844C8B16E63C7A58FBB041C1800
Authority key identifier: 10:77:E4:74:A6:2D:64:5B:43:F0:7E:38:D7:5F:B6:CE:AB:37:5B:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/591c008c-2f51-328b-8e64-7ded58b981e4.roa
Signing time:             Sun 04 Feb 2024 22:18:19 +0000
ROA not before:           Sun 04 Feb 2024 22:18:19 +0000
ROA not after:            Sat 04 May 2024 21:18:19 +0000
asID:                     7922
IP address blocks:        199.187.188.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Tue 27 Feb 2024 23:12:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:c8:b1:6e:63:c7:a5:8f:bb:04:1c:18:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d44d3fac-ab99-4b37-a42e-dbf67a95c460
        Validity
            Not Before: Feb  4 22:18:19 2024 GMT
            Not After : May  4 21:18:19 2024 GMT
        Subject: CN=b8593414-94ea-4124-9162-d143c0b553ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:76:c4:9f:22:8f:1a:87:21:ae:32:53:f0:70:
                    72:b7:cc:69:c9:82:2d:eb:c4:74:44:3a:37:5d:96:
                    25:6b:e6:cc:89:a5:83:f1:de:18:7b:81:68:7c:43:
                    1c:71:ae:08:a1:39:87:0e:a3:c6:ce:6d:8b:b9:79:
                    65:5f:ee:3a:02:cf:70:1d:85:b0:1f:71:95:53:43:
                    94:3b:20:8d:69:9d:5f:aa:f8:f9:b5:5e:94:6a:0e:
                    dd:15:b6:d4:b6:0d:d0:fe:cd:69:d5:12:5f:ff:fa:
                    46:f3:bc:83:b9:c0:39:a5:7a:10:d6:bf:12:a0:f5:
                    df:da:96:c7:2e:00:e4:28:43:3b:ee:44:01:41:7b:
                    64:48:7e:36:87:b0:67:14:0e:64:61:cc:97:e3:c9:
                    e3:3b:8e:07:27:fb:99:23:67:0d:e3:90:4a:13:ab:
                    44:8f:af:28:84:ae:45:40:c3:aa:fc:8b:b5:3e:ee:
                    c8:b6:c7:80:0a:5b:fa:c8:86:dc:ca:ca:7f:f3:b6:
                    5f:17:e6:17:55:32:80:d0:48:5e:61:5a:48:70:42:
                    ef:55:88:b9:1a:75:9b:d1:9a:c7:71:a5:8c:86:73:
                    06:8d:b8:35:10:e8:dd:31:b8:a9:ad:d3:43:62:0a:
                    82:e3:fc:51:f4:c2:50:71:5c:23:91:11:81:1b:2e:
                    2c:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:68:B0:85:39:47:C8:9B:A2:6C:88:23:EF:4F:1E:F7:9B:A5:FF:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/591c008c-2f51-328b-8e64-7ded58b981e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/d44d3fac-ab99-4b37-a42e-dbf67a95c460.crl

            X509v3 Authority Key Identifier:
                keyid:10:77:E4:74:A6:2D:64:5B:43:F0:7E:38:D7:5F:B6:CE:AB:37:5B:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.187.188.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:66:6e:d3:8f:91:12:df:d1:4e:6e:90:66:19:cd:89:84:c5:
         17:84:2e:14:12:6f:7a:68:7d:ae:01:f5:65:59:5b:06:20:9f:
         30:0f:db:00:54:43:da:a3:e9:31:f1:1f:ab:b0:f9:a8:3d:6b:
         ee:00:3b:aa:93:0c:99:4e:c4:46:b8:3a:b1:83:e7:da:a9:44:
         d3:d0:8a:4f:55:c7:52:b3:bf:27:8a:1a:c4:1b:31:a1:82:b2:
         e2:62:8a:9f:b5:a1:31:ea:67:5f:1a:71:4a:69:bd:97:92:d0:
         98:43:c9:70:f2:90:ae:ef:00:00:eb:11:b2:32:52:e5:ca:7a:
         7c:27:31:2d:2b:04:8a:ee:ec:ff:ef:e8:b2:b8:8a:78:b8:74:
         23:22:12:76:57:f3:2a:a2:4e:47:ae:d2:3b:f5:3a:60:80:bc:
         d5:af:a9:0c:26:ee:29:75:09:1b:6e:2e:72:68:2f:fd:a4:7a:
         ac:9e:d3:f7:92:87:21:0f:1e:a1:ac:59:ff:6d:c1:e5:03:3d:
         53:2b:17:24:94:f2:74:bd:2a:44:6e:31:a1:dd:1b:cd:b4:6a:
         5e:9f:b3:e5:26:31:de:7e:21:ea:8d:e2:5e:c5:56:d3:46:47:
         ea:2b:8a:64:72:ca:09:54:9a:d0:dc:3f:61:2e:57:24:c3:34:
         42:27:68:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 28 02:53:49 2024 by rpki-client on console-fra.rpki-client.org