Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/a90a9578-646b-3b0e-a093-babcbe77eacd.roa
File:                     a90a9578-646b-3b0e-a093-babcbe77eacd.roa (raw, json)
Hash identifier:          +FWrZl3EXYDcOiTCYM1GUdjunNkwGxYrBIa3IcM2N6k=
Subject key identifier:   D2:B3:29:C1:4E:84:27:C1:E4:5B:43:4E:80:0B:9A:EB:61:64:DD:C0
Certificate issuer:       /CN=1284725e-3e3f-48a5-9b39-37b014dd6873
Certificate serial:       010D0C9F43285839F732643964B54C4555A9AE00
Authority key identifier: 2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/a90a9578-646b-3b0e-a093-babcbe77eacd.roa
Signing time:             Tue 18 May 2021 04:00:00 +0000
ROA not before:           Tue 18 May 2021 04:00:00 +0000
ROA not after:            Mon 01 Jan 2029 05:00:00 +0000
asID:                     11557
IP address blocks:        207.237.156.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Tue 13 Jun 2023 10:02:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:f7:32:64:39:64:b5:4c:45:55:a9:ae:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1284725e-3e3f-48a5-9b39-37b014dd6873
        Validity
            Not Before: May 18 04:00:00 2021 GMT
            Not After : Jan  1 05:00:00 2029 GMT
        Subject: CN=c4d49a6f-acfd-4a3a-804b-869af037d958
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:48:84:c5:75:45:27:fe:43:9a:36:56:f2:a8:
                    07:b2:6c:9d:38:a9:61:b6:a5:31:b7:1a:30:ea:20:
                    98:d0:22:cb:46:34:bb:e0:0c:b6:4d:9a:4e:09:bc:
                    fd:89:a8:b9:24:9d:52:b9:9a:c6:89:b1:c6:e9:f6:
                    eb:77:1a:97:8b:89:94:06:90:cb:ea:38:7c:b9:a0:
                    54:00:98:4e:0d:95:27:a1:1a:17:f0:cb:1c:34:cc:
                    a1:2f:ad:ad:a8:34:d9:c2:4a:30:2f:cc:95:11:7a:
                    d5:08:b2:f1:38:2f:af:2a:b3:c7:39:96:a8:a8:84:
                    2e:54:96:12:0c:0f:4a:b7:30:15:e8:cf:62:33:fb:
                    a7:b5:d9:43:5d:97:4c:33:05:54:d1:e4:d9:e2:e0:
                    c5:5b:ec:41:85:e2:09:d5:61:22:b4:f0:46:66:d3:
                    ef:d2:3f:eb:15:02:8a:ae:dd:65:7b:73:86:39:74:
                    1e:33:66:8c:a9:dc:12:a0:91:aa:cb:7a:75:4c:b2:
                    4f:5f:e9:c9:c2:ac:8f:3d:d8:39:5c:c4:a7:b6:8b:
                    9e:4e:15:fb:81:1e:19:42:b7:24:cc:72:4f:dd:6f:
                    38:87:19:bc:18:3f:cd:11:1c:9a:09:92:2e:06:8a:
                    97:30:d5:d6:6e:39:9b:70:29:1d:d4:96:e1:1e:51:
                    03:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:B3:29:C1:4E:84:27:C1:E4:5B:43:4E:80:0B:9A:EB:61:64:DD:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/a90a9578-646b-3b0e-a093-babcbe77eacd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl

            X509v3 Authority Key Identifier:
                keyid:2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.237.156.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:25:4f:23:d8:a9:ec:ec:7c:4e:19:be:a5:5c:d3:93:cd:f8:
         ab:a9:0e:ec:57:40:07:bc:30:d5:82:c9:b6:f5:dd:38:a6:0f:
         98:4a:54:10:8e:94:04:bb:05:31:0e:a6:d7:61:54:eb:a4:07:
         69:aa:32:c2:b0:aa:29:46:a1:c9:ff:9e:4f:27:10:c6:28:67:
         c0:5e:e8:ad:d1:29:30:74:ea:66:df:1a:93:19:50:6f:68:cc:
         6d:fd:b1:40:9c:2e:d9:8d:7b:63:06:16:6b:d3:d6:db:3b:33:
         f2:cb:d5:44:a4:c3:32:cd:c2:c6:e0:af:f3:8a:5a:c1:36:66:
         68:bd:ee:6e:bb:3b:d7:a3:6e:ed:7c:ff:75:15:05:52:c9:09:
         0e:68:42:75:ed:1e:14:e2:1a:3d:96:2f:60:e8:ef:44:ae:f1:
         fa:b9:57:05:26:53:d3:0e:74:c3:11:a2:ea:43:70:5e:0d:0a:
         a8:f2:a6:93:f5:01:72:a4:d1:9b:a7:52:5d:3a:e4:e2:c4:42:
         ba:20:0a:3d:59:e7:cd:c7:24:b2:6f:ab:1f:d4:c3:38:ce:66:
         71:a1:f2:d4:67:35:d6:ca:a3:68:d9:b6:a3:d1:97:5f:70:18:
         60:d8:92:ba:63:2c:49:d2:39:05:7e:ee:6f:b8:a7:f1:29:ce:
         f6:4b:77:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:15 2024 by rpki-client on console-fra.rpki-client.org