Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/95af0235-1afa-302e-9108-fa66a308013f.roa
File:                     95af0235-1afa-302e-9108-fa66a308013f.roa (raw, json)
Hash identifier:          SMDp/GeRda0He2gTWOX6lxm9e1xhk2rSHbERczKs288=
Subject key identifier:   72:2F:00:68:08:71:B5:2F:E9:C4:C5:02:30:4D:37:11:AE:84:69:D8
Certificate issuer:       /CN=f1fa0620-c80f-4a94-9e95-ead44fb79978
Certificate serial:       010D0C9F43285846CDDD2C33A971F26035917580
Authority key identifier: A6:11:BF:71:01:87:C4:1C:39:01:A2:AA:26:B9:D3:81:0C:FE:2B:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/95af0235-1afa-302e-9108-fa66a308013f.roa
Signing time:             Thu 08 Aug 2024 04:19:22 +0000
ROA not before:           Thu 08 Aug 2024 04:19:22 +0000
ROA not after:            Wed 06 Nov 2024 05:19:22 +0000
asID:                     399358
IP address blocks:        160.79.108.0/22 maxlen: 32

Validation:               Failed, certificate revoked on Fri 09 Aug 2024 03:44:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:cd:dd:2c:33:a9:71:f2:60:35:91:75:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1fa0620-c80f-4a94-9e95-ead44fb79978
        Validity
            Not Before: Aug  8 04:19:22 2024 GMT
            Not After : Nov  6 05:19:22 2024 GMT
        Subject: CN=cf55559d-c38d-43de-add5-0c19bd455e2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:d7:05:b1:73:b2:c9:69:b1:64:15:41:0a:c2:
                    38:a6:65:dd:33:9f:1c:49:ed:b1:25:b4:f0:5a:3c:
                    ff:62:07:fc:10:58:47:c3:19:42:42:82:f5:3a:62:
                    c5:ce:35:68:de:f3:09:7b:3e:51:f9:d4:e4:55:47:
                    1d:0d:96:13:06:7c:0c:95:ef:0d:ff:9a:73:16:ee:
                    5e:b3:26:44:c3:69:b5:9d:9f:9a:49:bd:6b:09:b0:
                    71:72:e5:25:6f:d5:b9:cc:b5:74:f7:0f:e9:7e:51:
                    53:41:40:23:14:a2:16:e8:5e:3d:22:e5:69:b3:b8:
                    c6:3b:19:2f:bd:86:40:60:92:b2:e5:da:b0:8f:73:
                    2e:c0:4a:c9:b3:b6:0e:8d:13:89:89:36:99:f1:90:
                    ef:df:90:1c:64:39:ec:1e:5a:f3:67:92:ff:34:78:
                    21:6a:38:e0:24:84:1e:32:d2:f5:f8:74:07:2f:ff:
                    61:36:46:2e:8f:1f:ac:e0:72:18:4b:85:bd:47:4d:
                    f0:84:80:a2:31:d9:3d:f4:98:3b:71:b6:f2:03:83:
                    62:50:09:db:48:b6:f3:70:cc:2b:71:ec:b8:79:17:
                    80:1c:4e:4a:d1:a8:da:80:f3:e6:04:44:c7:ac:a2:
                    d6:52:18:e0:12:73:59:71:7c:bd:8f:1e:4d:bc:d8:
                    5c:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:2F:00:68:08:71:B5:2F:E9:C4:C5:02:30:4D:37:11:AE:84:69:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/95af0235-1afa-302e-9108-fa66a308013f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/f1fa0620-c80f-4a94-9e95-ead44fb79978.crl

            X509v3 Authority Key Identifier:
                keyid:A6:11:BF:71:01:87:C4:1C:39:01:A2:AA:26:B9:D3:81:0C:FE:2B:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.79.108.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:6f:03:86:5f:ca:c0:05:5b:b7:15:cb:16:2c:f3:7f:c1:e9:
         2d:0e:d1:42:69:83:15:bc:a0:9c:78:15:c0:7a:97:17:92:b9:
         7a:11:6b:a7:e2:f1:89:eb:d4:f9:23:c2:0f:23:4d:68:d0:a7:
         d8:f8:1f:26:ec:43:ae:ca:78:3b:09:40:0d:07:e6:78:dc:1c:
         c6:dd:c8:6e:70:da:0c:c2:ba:be:7e:11:b1:16:2d:0c:6d:b2:
         82:08:56:cd:94:39:a5:ae:45:62:d3:e8:ce:76:fc:08:36:65:
         aa:0f:15:2a:43:74:97:cc:36:6f:51:ae:f5:5a:3f:bb:45:1c:
         cd:63:54:7c:d8:a4:36:2e:8e:d3:5e:cf:4e:50:7c:7c:08:ca:
         97:30:07:70:ae:4e:09:19:c9:23:fa:d3:57:db:a4:37:30:59:
         03:5c:ba:6b:83:df:e8:d8:c0:11:cf:46:83:d4:fe:7c:5e:a4:
         2e:bd:92:29:0b:5f:14:e3:31:24:50:96:92:7f:78:13:0c:e4:
         72:30:06:ff:a4:40:e2:3c:dc:2e:90:6f:a4:66:87:1c:f5:89:
         fd:c8:30:8b:14:6c:65:6c:df:ee:37:e0:7c:81:f6:60:0f:cf:
         4f:37:42:93:4b:4f:79:32:9f:65:e3:74:b9:f9:7f:48:0c:b1:
         65:0b:59:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 9 05:55:29 2024 by rpki-client on console-ams.rpki-client.org