Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/999fd348-f5c5-3040-b30f-6d1f4823dc8c.roa
File:                     999fd348-f5c5-3040-b30f-6d1f4823dc8c.roa (raw, json)
Hash identifier:          z61c5BkZjkjuWNdc4nDUWg1YZe6NB7Y7IqPt6u9OzPQ=
Subject key identifier:   53:92:3F:50:70:FA:BC:44:09:FD:C0:01:89:31:C4:2F:D7:0B:6E:67
Certificate issuer:       /CN=67ec447a-9170-4e11-ba80-1aaca76fcd42
Certificate serial:       010D0C9F432858481B69A5F40A4FA7FEBE979100
Authority key identifier: D7:FE:BC:7A:80:E2:0D:5A:61:4C:0C:62:E8:F4:8C:90:39:FE:4C:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/999fd348-f5c5-3040-b30f-6d1f4823dc8c.roa
Signing time:             Thu 05 Dec 2024 15:46:35 +0000
ROA not before:           Thu 05 Dec 2024 15:46:35 +0000
ROA not after:            Wed 05 Mar 2025 15:46:35 +0000
asID:                     376
IP address blocks:        132.213.164.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Fri 13 Dec 2024 14:19:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:1b:69:a5:f4:0a:4f:a7:fe:be:97:91:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67ec447a-9170-4e11-ba80-1aaca76fcd42
        Validity
            Not Before: Dec  5 15:46:35 2024 GMT
            Not After : Mar  5 15:46:35 2025 GMT
        Subject: CN=45826eef-7943-41ad-82c3-23a5996a33ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:7c:e4:0d:1f:64:d1:51:0b:e9:43:f7:3a:b2:
                    f5:4b:8d:18:86:cd:9a:80:3c:f6:7d:44:72:48:49:
                    46:bd:a2:d3:eb:75:0c:30:1f:25:39:ae:d3:b5:84:
                    41:bc:3e:78:87:15:e6:6c:58:13:1c:14:9f:fb:04:
                    36:cd:8b:61:7d:83:c1:df:3c:46:b1:c2:62:6e:1b:
                    3d:9f:2f:d4:0e:70:2a:a5:bd:da:af:23:e4:d5:29:
                    d0:21:9c:13:35:47:00:51:c7:37:cb:4c:60:c9:71:
                    6a:2a:bd:c1:51:2b:3f:e5:1d:2b:f5:8b:10:26:ce:
                    fb:8f:66:c1:6d:66:e8:8d:9f:8c:94:81:41:39:bc:
                    30:a3:8d:a5:01:92:d2:cc:1a:ab:3c:6e:ba:a2:93:
                    d5:2d:93:c8:1e:c5:7c:e7:0a:2a:14:ac:7a:3c:fc:
                    f7:d9:4e:eb:88:52:41:80:0f:f5:7a:f4:7e:c0:b8:
                    73:05:f5:a9:f1:a6:e1:89:b0:43:cd:90:48:5d:d8:
                    64:33:ad:10:16:2b:fd:ba:9a:68:05:cc:bb:6f:7c:
                    3c:a0:54:7c:d2:8a:92:9c:8c:34:7b:85:e5:4b:32:
                    bc:45:d5:08:6a:79:f7:bd:36:2c:1f:a2:f4:f9:09:
                    aa:31:aa:96:c8:ff:09:e0:0f:07:b0:b2:14:c2:d8:
                    0f:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:92:3F:50:70:FA:BC:44:09:FD:C0:01:89:31:C4:2F:D7:0B:6E:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/999fd348-f5c5-3040-b30f-6d1f4823dc8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/67ec447a-9170-4e11-ba80-1aaca76fcd42.crl

            X509v3 Authority Key Identifier:
                keyid:D7:FE:BC:7A:80:E2:0D:5A:61:4C:0C:62:E8:F4:8C:90:39:FE:4C:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.213.164.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c1:d0:49:cf:0d:e9:43:97:b2:c5:28:01:7e:03:89:58:67:09:
         6a:d6:35:1b:0c:9a:ad:76:2e:52:05:e5:af:6d:36:75:93:d7:
         05:f9:b4:14:06:48:45:43:84:43:e2:88:90:99:b8:3f:32:80:
         6e:39:17:b4:9c:17:81:f6:93:ef:39:bb:dc:d9:a5:c8:ce:89:
         0e:6b:bd:ed:b4:45:f3:28:50:51:10:37:d1:b9:f2:f9:53:78:
         44:cf:a4:5f:9e:d9:cc:85:6e:fe:26:55:ed:06:2b:77:08:7d:
         36:b1:22:f9:57:8e:7c:e1:9c:d8:f8:d7:76:22:71:4c:15:d1:
         06:8f:cd:6c:27:a0:d5:f2:47:53:ef:70:63:20:2b:7a:f2:e6:
         9a:da:ef:85:b6:8e:2d:bb:1f:9d:25:56:16:b6:f5:35:d0:76:
         70:39:13:e1:47:91:1f:3d:fb:f5:20:a5:57:3e:cb:de:f9:d6:
         c8:2b:d4:c6:ae:ed:d9:dc:55:72:13:59:e2:c7:5b:9b:b8:6e:
         b6:23:34:a5:cf:08:8d:77:85:03:35:80:cc:64:49:46:4e:14:
         17:d2:0e:37:36:dc:68:5b:bf:32:99:d7:08:50:57:6e:9f:b4:
         ca:82:b4:90:c9:31:42:98:9a:fd:9e:3f:11:9e:bc:ce:33:f8:
         b6:da:a6:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 13 16:43:13 2024 by rpki-client on console-ams.rpki-client.org