Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d037641d-aa90-4eab-864e-a73e03e24cfa/1bf1e871-d7e2-3ca6-b5e2-e9a4bdd2399a.roa
File:                     1bf1e871-d7e2-3ca6-b5e2-e9a4bdd2399a.roa (raw, json)
Hash identifier:          xX9Ffr8GWYpwHJyDE3SjbIqgU/luYX9IqGaT9F/XMX0=
Subject key identifier:   37:BE:EF:DF:D7:8F:97:86:A8:81:8E:89:89:B6:63:50:91:32:40:CD
Certificate issuer:       /CN=d037641d-aa90-4eab-864e-a73e03e24cfa
Certificate serial:       010D0C9F43285845655836FF4B83878E5700CB00
Authority key identifier: B7:BB:43:7E:D1:FE:FB:F4:08:65:EB:A6:E8:8F:3D:39:E5:86:48:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d037641d-aa90-4eab-864e-a73e03e24cfa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d037641d-aa90-4eab-864e-a73e03e24cfa/1bf1e871-d7e2-3ca6-b5e2-e9a4bdd2399a.roa
Signing time:             Mon 01 Apr 2024 01:00:26 +0000
ROA not before:           Mon 01 Apr 2024 01:00:26 +0000
ROA not after:            Sun 30 Jun 2024 01:00:26 +0000
asID:                     398759
IP address blocks:        23.165.120.0/24 maxlen: 24
                          2602:f9eb::/36 maxlen: 48

Validation:               Failed, certificate revoked on Sun 26 May 2024 19:40:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:65:58:36:ff:4b:83:87:8e:57:00:cb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d037641d-aa90-4eab-864e-a73e03e24cfa
        Validity
            Not Before: Apr  1 01:00:26 2024 GMT
            Not After : Jun 30 01:00:26 2024 GMT
        Subject: CN=7b6a381c-9680-455e-a25c-89f338b15821
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:81:15:59:68:25:13:41:81:b2:1f:17:2a:3e:
                    77:bb:c6:9d:67:e1:3f:15:66:4f:ae:21:30:00:6f:
                    32:90:bc:3c:9b:96:dc:69:ed:7d:17:a8:b3:83:a6:
                    69:96:ee:d4:d3:98:da:d7:a6:4d:66:08:e8:9b:1c:
                    e4:c5:99:b5:75:c1:8b:c6:37:1f:d6:50:4f:53:02:
                    2d:ed:13:16:a5:2e:0e:6c:ab:d0:da:77:18:b4:12:
                    cc:4a:bd:c3:8e:5c:d9:22:fe:83:06:a9:36:a4:1b:
                    98:f1:d0:81:05:4c:51:3a:86:2a:45:db:35:a4:99:
                    fe:1e:11:0d:a9:3e:d6:ef:ca:b5:33:4d:2b:b4:45:
                    0e:46:74:62:b7:41:71:c5:00:ba:03:71:bc:bd:02:
                    3c:e6:70:0a:94:f0:ae:bd:92:bb:16:fc:20:1a:27:
                    ec:e0:aa:5d:ac:91:65:12:99:2b:96:16:51:c8:03:
                    9c:e3:91:de:7b:89:68:b5:f0:7b:dd:00:28:59:f4:
                    1d:67:6c:8d:98:f0:ff:d2:ae:64:cb:2a:c9:cf:4b:
                    f0:4f:b5:37:06:7f:bb:89:a8:ac:2a:0f:83:23:8d:
                    04:20:16:03:e0:30:d6:8b:a0:14:44:73:bb:2e:be:
                    90:33:2d:0c:b8:5e:28:97:d3:4f:cb:61:3f:5c:43:
                    e5:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:BE:EF:DF:D7:8F:97:86:A8:81:8E:89:89:B6:63:50:91:32:40:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d037641d-aa90-4eab-864e-a73e03e24cfa/1bf1e871-d7e2-3ca6-b5e2-e9a4bdd2399a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d037641d-aa90-4eab-864e-a73e03e24cfa/d037641d-aa90-4eab-864e-a73e03e24cfa.crl

            X509v3 Authority Key Identifier:
                keyid:B7:BB:43:7E:D1:FE:FB:F4:08:65:EB:A6:E8:8F:3D:39:E5:86:48:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d037641d-aa90-4eab-864e-a73e03e24cfa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.165.120.0/24
                IPv6:
                  2602:f9eb::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:94:90:fb:2b:64:24:c7:08:0b:72:c7:bd:89:1a:fb:10:76:
         35:9f:48:ca:9b:70:98:24:92:c7:9b:fb:51:8b:81:7e:93:2a:
         c5:db:c3:42:a4:6a:35:7c:64:8b:8d:46:34:63:9d:0c:82:15:
         8f:dd:e6:6e:af:26:f7:48:b4:25:8b:79:98:6a:ff:66:0b:35:
         48:1f:d9:9a:a0:8a:0d:d3:f0:23:3f:ec:65:f7:f8:c1:cc:41:
         8d:75:ea:35:f4:b7:0c:a1:df:c7:cb:3f:f5:bc:be:e0:b0:3d:
         3d:8e:05:f1:f9:7b:aa:d0:86:5e:5a:d1:4a:f6:27:cc:f5:84:
         70:a0:63:64:02:8d:10:8e:b1:ff:33:66:10:e9:0d:5f:79:d0:
         79:4a:9c:4c:3a:27:6b:b0:df:9c:40:3a:7b:40:f7:6f:1e:b4:
         ec:c0:3d:e9:db:69:d2:85:ba:89:bc:6e:ee:5a:c2:56:f2:aa:
         3e:4f:76:5a:0e:1f:39:f5:d8:10:63:e6:c5:6e:f6:08:f1:05:
         a4:23:f1:1d:20:34:d2:2f:69:b6:2c:93:b8:55:eb:7e:91:9b:
         f4:26:46:8e:8e:d6:22:a7:fd:47:b5:2f:74:50:5c:9b:25:a0:
         9e:64:1a:ea:85:be:13:46:eb:2f:2f:90:0e:64:30:4c:b0:7f:
         27:3f:08:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 23:38:05 2024 by rpki-client on console-ams.rpki-client.org