Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/7db57802-6e14-347a-b1d3-af92b09e097b.roa
File:                     7db57802-6e14-347a-b1d3-af92b09e097b.roa (raw, json)
Hash identifier:          VyiJIhgNTpjpQ0wUHPObouyVz2JJOPgsQkgEDPW1yPY=
Subject key identifier:   A6:CF:88:AC:71:C0:15:28:E8:D0:56:13:18:E3:5B:EA:50:3D:4B:17
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F43285840D30F029AED96FD0DDA2B5BC0
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/7db57802-6e14-347a-b1d3-af92b09e097b.roa
Signing time:             Mon 06 Feb 2023 17:51:09 +0000
ROA not before:           Mon 06 Feb 2023 17:51:09 +0000
ROA not after:            Sun 11 May 2025 04:00:00 +0000
asID:                     21817
IP address blocks:        104.152.100.0/22 maxlen: 24
                          199.36.176.0/21 maxlen: 24
                          199.187.148.0/22 maxlen: 24
                          2607:6200::/32 maxlen: 64

Validation:               Failed, certificate revoked on Fri 23 Jun 2023 12:59:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:d3:0f:02:9a:ed:96:fd:0d:da:2b:5b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Feb  6 17:51:09 2023 GMT
            Not After : May 11 04:00:00 2025 GMT
        Subject: CN=24f44e71-fd31-495a-9ba2-3b663ecf0b36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:8c:8c:cc:b7:3c:66:5c:97:d5:94:f3:04:af:
                    1b:48:8f:f0:60:53:ae:2c:c1:51:4b:47:2e:3b:83:
                    bc:cf:72:e1:d0:06:36:3a:36:44:47:ce:5b:89:7e:
                    df:a9:eb:62:09:0c:9b:3e:5a:46:2f:fe:10:9c:fc:
                    da:e1:be:28:15:ef:83:a4:03:e6:85:2b:94:18:0e:
                    f9:4c:86:03:1b:ad:3b:ed:54:83:e5:51:da:3b:4d:
                    1f:bf:0d:26:00:e0:a7:2d:d1:a1:98:9a:48:41:6d:
                    d9:b6:b2:45:c5:8d:a1:25:8d:d2:ed:a4:a3:2b:3a:
                    a2:39:74:7a:32:57:3e:2b:a1:7c:e4:e8:d7:7d:cb:
                    5d:0a:b6:9e:f4:ad:6a:a6:87:5b:e1:b7:85:02:72:
                    09:64:80:4f:83:21:17:ab:2b:11:ce:70:4d:6d:d0:
                    11:67:ca:d5:76:d8:00:7b:c1:de:bf:d5:e0:b7:c1:
                    d0:e2:95:44:21:be:25:f4:2c:2a:5a:4b:91:ee:c7:
                    09:7c:df:cf:19:28:33:76:2f:a1:82:c2:f3:b3:b4:
                    8e:9f:ea:40:fc:b8:b1:66:ff:09:e4:bb:0b:17:57:
                    08:82:60:c4:26:21:22:45:60:0b:82:0d:e3:0d:b7:
                    38:70:15:af:0a:9d:73:9b:76:01:2a:ac:30:f8:e3:
                    09:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:CF:88:AC:71:C0:15:28:E8:D0:56:13:18:E3:5B:EA:50:3D:4B:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/7db57802-6e14-347a-b1d3-af92b09e097b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.152.100.0/22
                  199.36.176.0/21
                  199.187.148.0/22
                IPv6:
                  2607:6200::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:0b:30:35:5b:08:e7:14:43:89:5c:9c:55:0b:a0:8d:ad:6e:
         d9:18:26:27:3d:c1:22:ba:02:e1:f3:58:08:32:aa:f4:7f:34:
         9f:e1:de:8c:48:71:78:ad:23:37:b0:93:dc:57:79:18:54:5d:
         a7:1c:67:2d:67:4d:21:bc:27:e1:33:50:6a:ab:76:d2:d4:51:
         30:87:30:7f:66:18:61:73:37:26:27:56:68:c0:90:07:93:e2:
         ae:f3:95:b8:3e:cb:c6:0b:ce:ad:55:56:fa:bc:b2:5c:3e:f7:
         f8:f5:bb:cf:4e:8f:50:04:7c:e7:9f:a8:e0:10:a6:35:cc:f8:
         db:d3:46:a1:75:32:48:48:83:4d:17:b1:00:0f:bb:25:7c:18:
         d6:c4:8c:f6:36:63:76:cd:90:32:55:96:70:ea:fa:21:a0:a3:
         11:01:43:16:4c:e4:0e:8a:24:a7:91:e5:d3:1a:57:49:5a:e4:
         62:56:ce:04:0f:9d:30:84:ee:57:b5:47:63:37:34:0e:a7:fb:
         ad:c8:e0:9a:45:7c:c7:83:15:ab:3a:1f:4c:b7:d4:57:c8:ef:
         34:e9:cf:3a:c2:8f:54:2f:0d:f9:f5:4e:2c:f5:0f:80:08:6a:
         d5:43:61:3f:12:4b:25:1f:27:ec:f6:5e:5a:1e:47:e9:b3:90:
         4f:d3:3d:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:09 2024 by rpki-client on console-fra.rpki-client.org