Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/731a926c-9fe5-4269-8549-a15eec9d00d2/379e0acf-b351-3c53-976c-931694b0e879.roa
File:                     379e0acf-b351-3c53-976c-931694b0e879.roa (raw, json)
Hash identifier:          NCzsdYzLRaoqfvcmWh5d0sCi/WGSMOO88uXJR5U9F9U=
Subject key identifier:   22:8F:65:86:9D:5B:B5:EC:7D:9B:85:7A:75:51:6F:53:3C:F0:07:09
Certificate issuer:       /CN=731a926c-9fe5-4269-8549-a15eec9d00d2
Certificate serial:       010D0C9F43285846636493DB41179F83D5577BC0
Authority key identifier: FE:3A:18:6C:95:56:43:00:70:F0:A4:7E:48:D4:23:44:5B:9E:CD:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/731a926c-9fe5-4269-8549-a15eec9d00d2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/731a926c-9fe5-4269-8549-a15eec9d00d2/379e0acf-b351-3c53-976c-931694b0e879.roa
Signing time:             Mon 01 Jul 2024 01:00:25 +0000
ROA not before:           Mon 01 Jul 2024 01:00:25 +0000
ROA not after:            Sun 29 Sep 2024 01:00:25 +0000
asID:                     208949
IP address blocks:        23.146.40.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 01 Aug 2024 13:20:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:63:64:93:db:41:17:9f:83:d5:57:7b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=731a926c-9fe5-4269-8549-a15eec9d00d2
        Validity
            Not Before: Jul  1 01:00:25 2024 GMT
            Not After : Sep 29 01:00:25 2024 GMT
        Subject: CN=04c7363b-81e4-44a1-a19d-6bb9c8002e77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:e6:71:f0:47:56:53:07:9e:9e:dd:a3:db:77:
                    ab:4e:59:a7:1d:f5:94:f0:32:3f:9c:1c:8c:7a:b9:
                    d2:d8:3e:5c:7e:73:87:5d:a9:28:b6:dc:e8:e8:b9:
                    82:98:0c:92:4b:74:dc:20:2b:80:70:78:30:b8:3a:
                    cc:7b:e5:81:f7:d4:b7:05:b9:f3:15:3d:89:3c:dd:
                    d1:86:d1:d8:7a:d6:2b:c2:96:7a:37:52:4a:89:49:
                    39:84:e5:af:24:34:aa:da:58:b2:d7:ee:5a:21:28:
                    23:54:af:8b:0f:2e:9b:61:9d:3b:a2:7a:53:fa:78:
                    29:59:5b:5c:9e:95:1d:51:22:1a:f2:6c:ef:ad:d6:
                    97:24:85:89:4b:97:7f:50:f7:44:9e:15:4b:30:27:
                    d5:ce:66:ed:9e:de:43:fb:d0:69:f2:4c:2f:5d:1e:
                    76:ea:11:75:e5:a0:d9:ab:f2:05:24:49:93:47:6f:
                    9a:24:33:a5:5e:8d:72:a2:b8:c9:bb:92:8b:21:23:
                    07:17:e9:2b:68:ba:17:33:ec:8e:45:b1:fc:30:6e:
                    b7:d2:96:4e:54:66:44:34:46:de:de:2e:67:2a:1c:
                    59:3f:ea:5c:ea:0e:78:ef:89:98:bd:7f:03:0c:63:
                    92:e9:15:35:61:58:85:e2:95:68:73:ad:f7:94:1b:
                    35:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:8F:65:86:9D:5B:B5:EC:7D:9B:85:7A:75:51:6F:53:3C:F0:07:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/731a926c-9fe5-4269-8549-a15eec9d00d2/379e0acf-b351-3c53-976c-931694b0e879.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/731a926c-9fe5-4269-8549-a15eec9d00d2/731a926c-9fe5-4269-8549-a15eec9d00d2.crl

            X509v3 Authority Key Identifier:
                keyid:FE:3A:18:6C:95:56:43:00:70:F0:A4:7E:48:D4:23:44:5B:9E:CD:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/731a926c-9fe5-4269-8549-a15eec9d00d2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.146.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:c1:34:6c:5a:7b:ba:7f:f1:1b:ee:a7:e3:66:98:d5:61:d5:
         16:b5:e7:ed:06:ff:d5:c2:0b:f0:83:c8:fa:40:98:e8:f1:df:
         0b:f9:50:95:fd:0d:b2:3a:46:ba:cf:6d:a6:22:00:64:f5:1b:
         5e:8d:90:72:4d:e7:d2:87:f3:f2:9f:8c:d5:45:cd:e1:64:b8:
         dc:bd:99:ae:1c:ec:00:a9:9e:3c:38:b0:ac:a7:36:0e:2f:6f:
         b1:df:48:42:2a:0e:35:d3:b9:5a:df:28:94:0e:b3:f3:20:3c:
         7d:02:68:20:de:60:45:1f:5c:9e:38:4a:0b:8d:e3:47:74:86:
         15:ff:d2:e1:17:11:50:d3:ac:8d:9b:a7:6a:83:10:c5:14:2a:
         2c:df:7b:f5:fb:3e:86:44:5e:7e:80:a1:de:f6:9e:91:67:4c:
         77:25:d5:a9:23:05:5b:e6:3f:2e:b7:a6:83:9a:59:7a:6a:8e:
         ce:11:29:9f:80:b6:b9:13:fe:41:35:54:08:e5:27:ee:4c:1e:
         bb:55:d3:24:5b:fc:4e:69:c7:fc:6d:94:61:78:f7:a7:3d:85:
         d5:9a:2b:eb:03:e1:69:71:50:52:54:9b:87:fc:da:6d:1d:cc:
         80:00:14:24:be:93:1d:67:f7:2f:62:e5:e3:1f:d4:69:97:ca:
         83:f9:33:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 1 16:11:52 2024 by rpki-client on console-fra.rpki-client.org