Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/a7899416-4d8c-3fb6-9726-bb2cb548fdf2.roa
File:                     a7899416-4d8c-3fb6-9726-bb2cb548fdf2.roa (raw, json)
Hash identifier:          9tvlA6xZXbS3PmOiYC6tWq1mxssaqiVwDwB+YeB3/J4=
Subject key identifier:   B1:76:48:76:DB:E7:C8:AC:06:E2:E7:ED:F7:EC:A0:39:BC:04:D8:C2
Certificate issuer:       /CN=1284725e-3e3f-48a5-9b39-37b014dd6873
Certificate serial:       010D0C9F4328576D51CC73C042CFC16AB2030379
Authority key identifier: 2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/a7899416-4d8c-3fb6-9726-bb2cb548fdf2.roa
Signing time:             Mon 13 May 2019 16:25:03 +0000
ROA not before:           Mon 13 May 2019 04:00:00 +0000
ROA not after:            Mon 01 Jan 2029 05:00:00 +0000
asID:                     25755
IP address blocks:        207.172.153.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 13 Jun 2023 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6a:b2:03:03:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1284725e-3e3f-48a5-9b39-37b014dd6873
        Validity
            Not Before: May 13 04:00:00 2019 GMT
            Not After : Jan  1 05:00:00 2029 GMT
        Subject: CN=f7583bbe-c455-47d5-b9df-9329a4c47642
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:49:c6:19:11:4f:df:2e:ed:6d:e9:59:50:ed:
                    81:40:2f:50:b7:52:f4:1f:eb:15:66:24:8b:e9:54:
                    a7:04:5f:3b:6d:36:cc:1b:9a:ae:c1:fb:72:2e:13:
                    29:2b:94:d1:a1:72:0e:ca:60:77:b7:7f:50:3a:3c:
                    cf:89:81:29:d2:30:8e:23:a0:eb:b1:40:9c:f9:d1:
                    db:92:01:dd:cf:eb:dc:f7:70:06:56:32:cb:4d:f1:
                    3e:06:a5:5b:a6:62:79:82:2e:1a:71:4f:49:48:44:
                    57:c8:d3:0d:bf:09:dc:44:15:74:26:36:13:da:a8:
                    0e:17:8f:85:67:5b:92:e7:83:17:d9:63:8b:a0:ce:
                    2f:b1:08:0c:f7:9c:36:0f:54:f5:a4:be:00:d8:2e:
                    88:dd:54:ee:0a:fc:f7:db:46:ba:60:e3:2f:8a:4e:
                    c5:f6:d9:a1:96:ad:17:e7:a5:03:28:44:4f:2a:9d:
                    36:34:75:58:e4:24:f3:af:e6:99:42:f7:70:fd:91:
                    fe:59:73:57:cc:59:11:12:aa:89:25:04:bd:f1:d7:
                    f6:45:82:af:d6:eb:3a:4f:03:66:38:74:60:fc:92:
                    4e:3d:87:35:63:4c:82:25:cd:8e:ca:7c:d3:71:e3:
                    ae:58:f0:99:da:7e:7e:1a:86:25:dd:48:83:65:cf:
                    a7:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:76:48:76:DB:E7:C8:AC:06:E2:E7:ED:F7:EC:A0:39:BC:04:D8:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/a7899416-4d8c-3fb6-9726-bb2cb548fdf2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl

            X509v3 Authority Key Identifier:
                keyid:2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.172.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:5c:e7:ef:14:02:11:76:f0:41:9e:e0:b3:8b:c6:70:33:bc:
         f2:3c:d4:17:47:76:95:54:50:58:b7:81:51:bd:f0:73:b3:f7:
         c0:4e:56:58:54:ca:d7:df:5f:07:30:c8:dc:63:3e:4f:2e:4f:
         a6:a7:f3:9e:c4:45:28:c8:cf:36:64:aa:4f:4a:58:36:9c:e5:
         b7:02:6f:54:07:86:14:50:6f:0c:42:1f:41:35:c5:a3:c2:11:
         6e:06:35:99:f7:65:73:e5:66:78:4e:71:0e:a6:db:76:ef:69:
         60:10:d9:19:20:85:d2:e0:ca:80:ca:78:47:63:4c:a7:2b:fc:
         b2:3d:65:d2:06:57:6c:3c:c5:91:69:27:52:64:26:09:d4:bf:
         68:fa:5a:c6:f4:a5:f9:7a:db:5d:e8:53:cc:c8:69:68:45:0c:
         4e:93:bf:9a:bb:06:73:72:96:5f:1c:66:b5:ff:07:ca:66:80:
         a8:23:81:ef:98:7e:20:40:c1:f2:db:69:e0:3a:53:5b:c1:ee:
         b6:44:f8:40:56:be:1c:5a:74:7a:a9:5f:e2:f4:34:1d:0b:77:
         62:26:47:5b:dd:24:9f:00:43:3c:ea:11:0d:db:8e:50:8d:70:
         df:0c:3e:8a:64:29:0f:ae:76:f5:e2:04:f5:b9:4c:1a:45:8b:
         20:bf:16:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:15 2024 by rpki-client on console-fra.rpki-client.org