Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb/60801d14-94a4-3b49-82c8-dae356a836a1.roa
File:                     60801d14-94a4-3b49-82c8-dae356a836a1.roa (raw, json)
Hash identifier:          5mFVc4pac4fmdxkkSx/aKL7mThwPJFk+oaWI40nTt/8=
Subject key identifier:   BF:BE:95:34:4C:AD:57:A1:CB:39:F9:78:7B:F8:CD:04:11:2D:21:E3
Certificate issuer:       /CN=579fe1a7-1d04-4f71-b411-613b966124fb
Certificate serial:       010D0C9F43285846E8003D14C6CCE45258B5FAB0
Authority key identifier: 47:D1:03:D7:EA:92:C8:67:48:81:1A:CF:43:4B:E4:68:8C:AD:BC:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb/60801d14-94a4-3b49-82c8-dae356a836a1.roa
Signing time:             Sat 17 Aug 2024 13:00:40 +0000
ROA not before:           Sat 17 Aug 2024 13:00:40 +0000
ROA not after:            Fri 15 Nov 2024 14:00:40 +0000
asID:                     174
IP address blocks:        23.149.120.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 18 Sep 2024 18:02:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:e8:00:3d:14:c6:cc:e4:52:58:b5:fa:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=579fe1a7-1d04-4f71-b411-613b966124fb
        Validity
            Not Before: Aug 17 13:00:40 2024 GMT
            Not After : Nov 15 14:00:40 2024 GMT
        Subject: CN=aaed136a-b7cf-4378-b764-5e1e9ecf0b4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e1:bc:26:1c:19:a8:33:e6:58:1a:3d:0f:22:
                    e5:e9:3b:18:7e:f3:ee:41:2c:12:b7:98:2f:ac:0d:
                    22:6a:7d:10:39:1f:e9:48:3c:bc:0d:61:eb:16:0f:
                    e1:99:82:8b:5e:ea:e0:2a:1a:67:02:a8:8a:6a:44:
                    3e:bc:ab:7d:b3:cc:1e:39:cd:86:9e:44:ba:a7:20:
                    b1:ae:1e:98:be:10:31:81:af:25:5b:90:db:dd:e0:
                    1d:fc:f1:a8:39:c8:24:92:9e:c0:44:a9:07:23:b0:
                    1f:69:87:5d:2f:e0:84:69:be:5d:f4:ad:aa:63:a5:
                    1a:55:51:0a:bc:10:c8:0f:cd:ba:88:fa:f4:e4:91:
                    3c:29:3a:03:3b:36:5c:1c:97:0a:8e:a8:12:6f:8b:
                    64:b9:9a:48:09:7e:34:15:87:6f:9e:6e:b1:a3:00:
                    d1:e5:d6:45:68:f9:8c:eb:e3:06:9b:46:a2:44:f8:
                    2f:2d:40:90:46:d3:90:c1:0c:d7:f0:73:df:2a:be:
                    12:56:bf:4d:e3:41:0a:e9:fd:0a:2f:68:26:f6:40:
                    01:93:02:28:0c:4c:a8:42:ad:e4:14:fa:6f:ba:a1:
                    62:7c:93:05:66:dd:bf:60:7a:c7:17:c6:ac:f9:e4:
                    a5:01:2a:ca:5e:e5:88:ff:2f:c2:40:b4:72:3b:7f:
                    bb:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:BE:95:34:4C:AD:57:A1:CB:39:F9:78:7B:F8:CD:04:11:2D:21:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb/60801d14-94a4-3b49-82c8-dae356a836a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb/579fe1a7-1d04-4f71-b411-613b966124fb.crl

            X509v3 Authority Key Identifier:
                keyid:47:D1:03:D7:EA:92:C8:67:48:81:1A:CF:43:4B:E4:68:8C:AD:BC:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.149.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:7e:7c:12:3c:85:5f:75:33:12:24:8e:76:00:3e:06:2f:1e:
         f6:7a:21:80:f6:7c:03:04:f4:8f:2b:57:29:1e:97:bc:18:c0:
         90:dc:29:d7:75:d8:8d:ac:cc:53:2c:ad:48:b0:4e:65:58:aa:
         39:8a:f8:a2:de:de:11:8a:64:2d:40:f3:3c:b6:86:a5:ee:8e:
         ce:d8:47:12:21:e3:d1:33:3c:ae:7e:76:53:08:6d:33:01:40:
         3a:ac:a5:83:c8:7f:c3:00:fa:aa:03:2f:c7:ec:b5:91:4a:cb:
         17:a5:a2:83:59:f2:f8:d2:ef:1e:53:29:69:2a:96:7f:1a:99:
         92:5e:09:16:a3:18:25:82:71:0f:0d:9b:b2:23:96:30:ae:ea:
         b2:ec:03:9a:f5:4a:74:50:6b:9e:c5:a2:99:a1:a5:f2:a2:bb:
         4f:3b:af:0d:00:30:93:b8:63:62:aa:82:ea:02:30:08:f2:c4:
         9c:56:1a:73:66:6e:92:57:72:fe:df:07:ee:c9:99:6c:57:d7:
         7e:52:82:ad:97:80:70:8f:98:40:ad:f5:da:09:e7:a8:06:d8:
         fc:73:da:e9:29:71:75:8e:1a:91:a5:94:0e:7c:a3:41:8c:a2:
         e0:22:d3:bd:a9:59:2a:04:09:ad:69:2d:a7:7f:7c:ca:04:ff:
         3d:8b:0e:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 20:49:38 2024 by rpki-client on console-fra.rpki-client.org