Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/bce33d6d-8d34-312c-aa02-c0fae8af1eeb.roa
File:                     bce33d6d-8d34-312c-aa02-c0fae8af1eeb.roa (raw, json)
Hash identifier:          a9K++gyXHNg0YpkrsMzQXVVgYiLnKaMSpVBdaHyHXQ0=
Subject key identifier:   01:BC:A3:70:D5:55:B9:A0:ED:61:47:44:30:ED:A2:5C:9A:90:BD:D4
Certificate issuer:       /CN=55640631-1b52-4455-ab16-7633a452f342
Certificate serial:       010D0C9F432858464152C1802845E8ECD92D2540
Authority key identifier: 50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/bce33d6d-8d34-312c-aa02-c0fae8af1eeb.roa
Signing time:             Tue 18 Jun 2024 20:07:18 +0000
ROA not before:           Tue 18 Jun 2024 20:07:18 +0000
ROA not after:            Mon 16 Sep 2024 20:07:18 +0000
asID:                     13760
IP address blocks:        199.187.136.0/23 maxlen: 23
                          199.187.140.0/23 maxlen: 23
                          199.187.142.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Mon 01 Jul 2024 17:34:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:41:52:c1:80:28:45:e8:ec:d9:2d:25:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55640631-1b52-4455-ab16-7633a452f342
        Validity
            Not Before: Jun 18 20:07:18 2024 GMT
            Not After : Sep 16 20:07:18 2024 GMT
        Subject: CN=13fb8f44-3889-4616-9318-5fb47b97ea89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:b8:8a:28:86:ca:f8:ab:97:02:7f:d5:80:36:
                    9c:93:7a:bf:2d:44:1b:0f:a8:aa:e3:87:a1:31:38:
                    ac:18:76:f6:57:ca:06:ab:a1:23:f0:38:d8:5f:12:
                    2e:4c:de:65:ac:8b:50:68:64:09:1a:02:7c:04:53:
                    3f:01:b6:52:70:84:39:03:5e:7a:4d:c7:78:03:6f:
                    47:53:9f:60:32:c0:6b:80:d6:59:e4:c6:aa:1a:14:
                    f3:7c:0a:9b:b7:21:76:50:94:ce:2c:15:d5:5f:ab:
                    6a:7c:37:94:c4:90:99:cc:14:74:1b:e9:bc:b6:6a:
                    10:6b:b5:5b:b6:a1:c2:2d:15:2b:2c:a4:7a:d9:ab:
                    05:9b:4c:40:86:be:75:2b:0e:c9:d3:c8:0a:36:27:
                    70:cc:3c:bc:38:f6:92:ea:45:c0:4e:46:a1:84:04:
                    aa:f2:a3:b0:29:9c:eb:89:20:2d:e2:30:c4:a7:38:
                    17:d8:e4:98:41:dc:1e:d5:2e:db:57:ef:8e:fa:0d:
                    fb:cf:fa:71:fe:af:b8:c7:32:c1:ec:f0:71:db:b7:
                    ac:8d:b2:df:7e:79:fc:15:85:78:bc:d2:40:28:a8:
                    9f:5e:a6:0f:37:08:cd:fe:88:3d:f1:be:f0:3a:19:
                    7e:f8:d9:b0:39:8d:93:62:7f:2b:1c:8e:4c:ad:a4:
                    b2:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:BC:A3:70:D5:55:B9:A0:ED:61:47:44:30:ED:A2:5C:9A:90:BD:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/bce33d6d-8d34-312c-aa02-c0fae8af1eeb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.crl

            X509v3 Authority Key Identifier:
                keyid:50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.187.136.0/23
                  199.187.140.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:54:f4:3b:47:81:5b:c3:23:2d:bb:b0:6c:d3:9e:dd:e0:09:
         dd:7c:49:34:44:b1:8f:d4:32:1c:1d:82:3c:6e:9b:58:26:b5:
         52:5a:b0:b5:b8:a3:1f:67:7b:d6:2a:f5:f7:f4:d9:d3:66:55:
         43:8b:be:b2:fb:94:99:88:48:ef:4f:b4:43:75:83:14:07:a2:
         b7:aa:e2:dc:3f:cd:be:9f:75:d5:ce:53:7a:ad:4c:aa:bc:3c:
         fc:b0:2f:0b:25:00:00:12:42:dd:cf:61:24:bd:8b:41:47:c5:
         63:a0:ae:52:fe:73:a4:3a:51:73:eb:73:76:3f:23:f0:ce:5e:
         59:90:9c:11:b4:03:52:bc:c6:cd:6a:f0:94:35:54:0c:fc:70:
         d7:a4:e8:57:dc:b9:86:e1:c5:bd:62:84:ac:a4:15:26:a1:a7:
         8d:5d:8f:63:01:86:34:ef:35:27:27:f9:3a:71:ab:99:d0:42:
         b6:8c:8b:bf:0e:67:ae:60:4e:83:2b:b5:1b:27:14:51:a5:13:
         f8:d8:ba:9d:24:fc:47:cd:54:63:04:1f:1a:06:d2:90:bd:36:
         b7:21:b4:84:f7:75:1d:1b:91:71:0d:ec:9b:59:5f:05:61:e3:
         fc:f7:39:33:21:72:a6:8f:98:98:7e:94:00:63:76:d2:03:1d:
         2b:4b:33:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 19:40:48 2024 by rpki-client on console-ams.rpki-client.org