Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8818451e-2b15-4de5-89f9-f3d1cb4d7366/06df7c84-fa8f-3de4-8bb1-1fad1abdb051.roa
File:                     06df7c84-fa8f-3de4-8bb1-1fad1abdb051.roa (raw, json)
Hash identifier:          uhrJyKY9KD6yaQcZ4EByp0wnsC9z4y74rBgd4O0MXNI=
Subject key identifier:   B9:9F:69:D1:E8:C5:6A:C7:A3:1C:94:D7:18:2C:75:C9:5B:71:7E:8F
Certificate issuer:       /CN=8818451e-2b15-4de5-89f9-f3d1cb4d7366
Certificate serial:       010D0C9F432858453B0D2415B7CBE4BA74D815C0
Authority key identifier: 9E:7C:F0:C6:2D:14:2D:7E:6D:BE:76:F6:20:E1:3E:1D:95:7B:2A:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8818451e-2b15-4de5-89f9-f3d1cb4d7366.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8818451e-2b15-4de5-89f9-f3d1cb4d7366/06df7c84-fa8f-3de4-8bb1-1fad1abdb051.roa
Signing time:             Sat 16 Mar 2024 21:25:15 +0000
ROA not before:           Sat 16 Mar 2024 21:25:15 +0000
ROA not after:            Fri 14 Jun 2024 21:25:15 +0000
asID:                     7029
IP address blocks:        23.148.216.0/24 maxlen: 24
                          2607:2cc0::/32 maxlen: 32

Validation:               Failed, certificate revoked on Fri 12 Apr 2024 07:12:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:3b:0d:24:15:b7:cb:e4:ba:74:d8:15:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8818451e-2b15-4de5-89f9-f3d1cb4d7366
        Validity
            Not Before: Mar 16 21:25:15 2024 GMT
            Not After : Jun 14 21:25:15 2024 GMT
        Subject: CN=6a775f14-3ec0-47b1-8cef-4541abb8bbfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:e1:e7:76:99:e8:0a:a2:c3:3a:82:96:20:77:
                    33:d7:64:e7:03:2a:0f:84:13:0d:b3:38:26:9d:0c:
                    7f:bf:34:4a:bc:f8:8d:3a:aa:68:1f:97:7c:10:78:
                    17:00:1b:73:d7:99:fa:5b:02:fc:fc:8b:20:ed:ce:
                    3d:62:a0:6a:cc:94:07:0c:c3:b1:c3:58:9e:8c:3a:
                    ff:c6:07:de:39:41:ac:4d:b3:4e:67:b6:c0:62:17:
                    ad:12:61:4f:96:63:66:16:37:2f:76:e3:e2:73:c0:
                    c2:18:ab:f7:9b:7c:5e:72:fd:39:e3:c5:2e:f5:31:
                    c0:e3:4d:45:a3:78:f2:d2:c4:18:98:69:fe:38:9b:
                    ad:a3:b1:c6:99:a8:e4:c2:58:4a:87:fa:2e:7b:27:
                    8b:86:7e:b7:3b:36:78:30:35:47:0a:2a:ef:12:9d:
                    8d:e6:91:59:6e:2e:28:af:b3:95:c7:4a:60:40:ac:
                    ca:f1:9a:dc:2f:57:d4:6c:98:e9:24:ac:db:e5:07:
                    0f:5c:50:82:d6:fd:eb:38:96:b2:e2:e0:ad:a5:ff:
                    2b:ac:c3:9a:0a:b7:98:98:6c:ad:33:58:7e:d9:86:
                    9c:e7:a3:78:60:f1:07:a2:95:c8:bb:92:76:55:0e:
                    4b:1b:c5:d5:0a:37:16:6f:d3:5a:80:18:93:03:06:
                    ec:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:9F:69:D1:E8:C5:6A:C7:A3:1C:94:D7:18:2C:75:C9:5B:71:7E:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8818451e-2b15-4de5-89f9-f3d1cb4d7366/06df7c84-fa8f-3de4-8bb1-1fad1abdb051.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8818451e-2b15-4de5-89f9-f3d1cb4d7366/8818451e-2b15-4de5-89f9-f3d1cb4d7366.crl

            X509v3 Authority Key Identifier:
                keyid:9E:7C:F0:C6:2D:14:2D:7E:6D:BE:76:F6:20:E1:3E:1D:95:7B:2A:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8818451e-2b15-4de5-89f9-f3d1cb4d7366.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.148.216.0/24
                IPv6:
                  2607:2cc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:c1:42:87:97:31:d4:91:d3:1b:17:ec:c0:e3:e0:c3:24:71:
         c7:db:35:ff:46:81:e4:d7:9f:d9:b5:7e:d4:3f:d7:bd:4b:c1:
         1a:e3:dd:ea:fb:4e:51:c5:7c:26:2f:35:13:ea:38:c5:c0:0d:
         dd:98:5e:86:17:29:4a:a3:0c:ab:da:d5:41:f2:de:a1:78:31:
         0c:84:89:bf:08:1d:c1:89:8a:4d:e0:b1:7e:e9:56:5f:7f:2d:
         7f:24:d2:3e:f6:ef:33:b5:14:9b:fb:1b:d8:73:6b:d8:20:2b:
         1e:a0:8b:9d:15:14:ca:3c:b5:45:39:62:7a:5a:2e:10:4d:a5:
         10:c4:10:31:a5:20:9a:46:79:96:83:c0:f3:a4:cc:ff:9d:83:
         17:00:86:2d:f5:04:7e:c3:5a:a8:b0:40:bf:52:59:dd:69:7f:
         21:bf:f0:d5:1e:53:af:ad:ff:5c:24:5f:ac:a9:da:7e:b9:d2:
         d4:66:03:cb:d2:3d:79:f1:2c:aa:c4:02:cc:ac:91:c0:18:d9:
         26:44:45:0a:c7:ef:b5:dd:fe:aa:d2:c4:b5:28:42:6b:0c:54:
         21:cd:d3:24:5c:15:4b:16:b1:79:60:52:e6:12:8c:59:d7:43:
         43:41:d2:3f:97:b6:f0:21:f4:ce:0f:7e:92:35:3c:b8:18:1a:
         7c:b8:60:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:14 2024 by rpki-client on console-fra.rpki-client.org