Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/b88174f9-17ae-3189-a9d6-8b0c1ce2e7cf.roa
File:                     b88174f9-17ae-3189-a9d6-8b0c1ce2e7cf.roa (raw, json)
Hash identifier:          cnK9FNF8xSJ/01FZtjyfyoZ8ZhH6yoUDKz4pTDQJ4/M=
Subject key identifier:   E4:33:E7:32:49:D5:14:C3:8B:56:D5:3F:34:7E:BD:46:83:C9:C3:2C
Certificate issuer:       /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Certificate serial:       010D0C9F4328584582F2FF00AF105C526A174780
Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/b88174f9-17ae-3189-a9d6-8b0c1ce2e7cf.roa
Signing time:             Thu 11 Apr 2024 15:30:46 +0000
ROA not before:           Thu 11 Apr 2024 15:30:46 +0000
ROA not after:            Wed 10 Jul 2024 15:30:46 +0000
asID:                     394805
IP address blocks:        66.35.81.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 11 Apr 2024 16:51:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:82:f2:ff:00:af:10:5c:52:6a:17:47:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
        Validity
            Not Before: Apr 11 15:30:46 2024 GMT
            Not After : Jul 10 15:30:46 2024 GMT
        Subject: CN=0fc1c45b-4c52-4596-a4ee-3717f1859d56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:e8:dd:90:09:77:a2:14:b0:8d:b4:8f:ff:e8:
                    e4:a5:90:3a:e9:27:00:1b:21:fd:2f:1d:a0:6b:ca:
                    a9:90:87:77:2a:b3:ab:48:ce:4f:25:26:7d:87:19:
                    51:e9:94:40:c5:79:6d:84:54:5e:3b:a7:91:ac:2d:
                    e4:17:ef:f4:04:28:be:4e:dc:b6:ba:0e:91:5a:b6:
                    de:20:8a:c0:1a:f9:95:b8:71:cf:61:67:c7:11:96:
                    ea:d0:f2:f9:5c:9f:47:63:5c:6e:af:ff:06:28:44:
                    c6:b0:94:35:aa:10:01:ac:3a:04:f9:17:62:3c:c1:
                    44:99:a7:e1:41:75:6c:3f:4b:1e:48:3f:fc:00:de:
                    c4:06:26:1d:8d:09:14:45:e1:3d:8f:67:f3:46:9b:
                    10:30:fe:21:8b:aa:cf:2c:11:95:b2:cc:db:ea:6b:
                    6e:ab:72:10:85:46:81:84:fe:09:cc:81:98:5c:70:
                    9f:fd:c7:00:24:e2:2f:e8:2c:bf:39:81:13:56:ef:
                    23:4c:8a:75:c1:e2:1c:3c:a8:30:34:27:89:62:7c:
                    9a:a7:a0:3f:96:0c:d5:a0:55:16:3e:4b:af:bb:b4:
                    ac:e6:5e:e4:bd:4c:0d:85:2f:23:ba:54:3b:75:6d:
                    d0:79:a1:f0:03:49:1f:88:d2:bb:98:b1:3f:6a:f3:
                    d9:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:33:E7:32:49:D5:14:C3:8B:56:D5:3F:34:7E:BD:46:83:C9:C3:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/b88174f9-17ae-3189-a9d6-8b0c1ce2e7cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl

            X509v3 Authority Key Identifier:
                keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.35.81.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:b3:58:b9:c0:b5:b5:f1:6b:70:14:02:80:ad:d6:11:52:85:
         ac:79:d9:35:ce:b9:53:eb:2d:b3:cc:a0:ae:3d:7a:21:62:2c:
         9e:70:1f:36:93:cd:a3:3f:09:11:26:79:a6:c4:60:c4:3d:36:
         e1:4e:f6:ea:f6:fe:b6:56:0d:80:8a:d8:8c:c3:6a:46:46:7a:
         52:a9:97:07:ba:80:3a:08:f1:84:24:bc:78:a8:0d:78:56:91:
         fd:66:8a:f7:c3:3e:0c:ea:ba:a5:87:b0:ed:72:29:53:b3:48:
         dc:e6:cc:65:68:7c:b4:ab:64:5f:c5:d5:7d:85:5f:02:a4:df:
         19:c8:82:93:4c:7d:8d:d1:8b:a0:ec:47:14:ab:77:cd:29:15:
         12:6f:88:6e:9b:3b:96:79:02:6a:9f:1c:19:7e:79:be:aa:4e:
         a3:f7:c6:91:1a:d6:14:ed:ec:46:02:dc:bc:81:2a:60:ad:52:
         11:1d:56:9c:84:81:63:82:88:2a:73:8f:28:24:32:9f:cc:c1:
         34:fc:50:db:db:22:c8:72:01:49:1b:fe:0b:50:d1:3d:d6:3c:
         c6:25:62:e5:1b:f4:cf:71:f3:ca:21:1e:f1:05:ec:b0:fb:f3:
         f0:63:f7:37:ac:5f:63:d1:94:0f:6d:11:fb:a7:d8:c7:ac:08:
         8d:38:8d:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:47 2024 by rpki-client on console-ams.rpki-client.org