Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/8c43b186-c2ad-3ce1-ac5d-906faa3f2bc0.roa
File:                     8c43b186-c2ad-3ce1-ac5d-906faa3f2bc0.roa (raw, json)
Hash identifier:          v9DGxo+UMmshJWJMComfBfidFi5lqMv6duo8J+IiZBU=
Subject key identifier:   78:BC:9A:B3:19:B9:D5:D3:45:B4:B2:80:17:82:F8:EA:75:0C:5F:4E
Certificate issuer:       /CN=c91a680c-10f9-4064-bc75-a0790274df80
Certificate serial:       010D0C9F43285845F683D518D4494D9F75C0EC90
Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/8c43b186-c2ad-3ce1-ac5d-906faa3f2bc0.roa
Signing time:             Thu 23 May 2024 01:00:26 +0000
ROA not before:           Thu 23 May 2024 01:00:26 +0000
ROA not after:            Wed 21 Aug 2024 01:00:26 +0000
asID:                     54702
IP address blocks:        209.51.159.0/24 maxlen: 24
                          209.51.156.0/24 maxlen: 24
                          209.51.136.0/24 maxlen: 24
                          209.51.134.0/24 maxlen: 24
                          209.51.132.0/24 maxlen: 24
                          209.51.128.0/24 maxlen: 24
                          209.51.152.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 27 Jun 2024 15:36:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:f6:83:d5:18:d4:49:4d:9f:75:c0:ec:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80
        Validity
            Not Before: May 23 01:00:26 2024 GMT
            Not After : Aug 21 01:00:26 2024 GMT
        Subject: CN=99f3b4b7-71ee-4621-a3a3-dd589e582f9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:36:86:b7:2d:3c:b7:bd:ee:5a:66:24:dd:08:
                    5e:48:b8:19:52:68:cd:00:17:a7:4b:f8:05:af:e4:
                    5d:33:ff:5d:37:c5:dc:33:28:c8:f3:64:28:09:8d:
                    d7:9f:08:31:b0:d6:31:4b:e4:11:a2:6a:80:26:aa:
                    72:7b:fc:c8:f6:5b:68:91:3c:38:24:e7:9c:d5:07:
                    9e:b2:3c:e8:3d:27:de:68:ee:f7:09:07:e9:47:39:
                    e0:8d:42:e5:d8:7d:ae:f2:d9:e6:1a:65:d2:4b:53:
                    6a:61:a0:ba:0f:28:ba:af:ed:eb:4d:e3:83:48:37:
                    76:00:ff:62:1f:31:c4:ec:ab:a4:81:0a:f3:5a:fa:
                    7b:68:12:35:53:65:d6:6e:68:01:7e:9c:7c:3f:f6:
                    45:0a:d8:31:f6:99:a5:6b:cb:9d:47:41:ef:dd:e5:
                    d5:75:f7:b7:db:41:87:2e:9b:3a:e4:b6:a0:77:5d:
                    7b:c7:85:3e:fc:1b:ad:8b:fd:0f:c9:fb:e7:79:f9:
                    c1:fa:5a:5f:f2:2e:42:a6:b0:76:96:3b:8e:eb:67:
                    8d:c4:16:c5:e5:40:11:a0:a8:2c:0a:18:bb:9b:25:
                    14:59:e3:d9:69:49:cb:63:fc:06:33:53:1e:07:9c:
                    6f:9f:36:66:6f:dd:38:73:4c:18:c3:ab:4c:8b:3f:
                    72:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:BC:9A:B3:19:B9:D5:D3:45:B4:B2:80:17:82:F8:EA:75:0C:5F:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/8c43b186-c2ad-3ce1-ac5d-906faa3f2bc0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl

            X509v3 Authority Key Identifier:
                keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.51.128.0/24
                  209.51.132.0/24
                  209.51.134.0/24
                  209.51.136.0/24
                  209.51.152.0/24
                  209.51.156.0/24
                  209.51.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:3e:80:45:42:41:0c:5e:c7:e3:cf:eb:d5:5c:71:23:92:c9:
         57:15:61:a0:ec:1f:09:a1:c7:50:99:c9:bf:31:68:0d:76:da:
         1e:5a:a1:b8:67:ce:71:e5:33:8b:42:9a:91:67:12:2b:cc:fa:
         7a:9c:f3:84:80:12:dd:02:ab:44:ab:ce:ce:cc:45:25:d4:5c:
         c8:92:3e:d6:bf:1c:eb:db:47:d5:80:07:14:9a:b0:7b:31:ca:
         d4:a6:ba:1a:36:7f:ea:68:8a:09:01:27:bf:14:bf:31:5b:b4:
         f3:09:7b:1b:a4:54:69:58:ec:66:0a:90:6a:38:26:b5:83:a0:
         e1:8f:5d:e8:91:7c:61:a8:99:e7:05:d4:b7:0a:e5:ff:fc:81:
         bc:8b:2b:70:32:0f:c6:56:b6:0f:eb:9c:8a:ac:aa:61:01:b6:
         a3:a7:f6:cd:e8:3d:7c:7f:94:69:4c:f9:2d:e7:47:cd:df:1d:
         98:8c:79:a9:99:c6:87:9a:ff:ba:26:99:0a:12:0f:0b:d5:84:
         16:92:1e:85:81:63:a6:cd:b9:8b:b1:18:2a:00:56:cf:bd:8f:
         49:34:66:e7:dd:df:ec:4e:04:54:0c:e3:31:24:9b:e0:db:00:
         b3:91:7b:8e:19:a1:15:46:a5:e1:e2:4e:2c:1f:9d:e5:05:80:
         9d:1e:df:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 27 20:23:53 2024 by rpki-client on console-ams.rpki-client.org