Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/35bf3647-9312-38ee-94ae-dc3c3701a46b.roa
File:                     35bf3647-9312-38ee-94ae-dc3c3701a46b.roa (raw, json)
Hash identifier:          JKDD6mo0FnFYvWCSusB+m5ZzXkVwEBY2xiGxqNPUQgk=
Subject key identifier:   3C:65:5D:70:19:9C:93:85:EB:45:97:DD:F2:5C:55:95:8A:E1:48:58
Certificate issuer:       /CN=5e3e99cc-7992-4ac1-a256-917cce07532e
Certificate serial:       010D0C9F432858465B048FEF1AEF80591E3F2BD8
Authority key identifier: D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/35bf3647-9312-38ee-94ae-dc3c3701a46b.roa
Signing time:             Fri 28 Jun 2024 01:00:24 +0000
ROA not before:           Fri 28 Jun 2024 01:00:24 +0000
ROA not after:            Thu 26 Sep 2024 01:00:24 +0000
asID:                     15083
IP address blocks:        206.212.241.0/24 maxlen: 24
                          206.212.243.0/24 maxlen: 24
                          206.212.245.0/24 maxlen: 24
                          206.212.247.0/24 maxlen: 24
                          206.212.249.0/24 maxlen: 24
                          206.212.250.0/24 maxlen: 24
                          206.212.252.0/24 maxlen: 24
                          206.212.254.0/24 maxlen: 24
                          206.212.255.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 03 Jul 2024 17:42:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:5b:04:8f:ef:1a:ef:80:59:1e:3f:2b:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e3e99cc-7992-4ac1-a256-917cce07532e
        Validity
            Not Before: Jun 28 01:00:24 2024 GMT
            Not After : Sep 26 01:00:24 2024 GMT
        Subject: CN=124e83e2-efca-451c-a2cd-a44594d303c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a9:71:b3:b2:5d:01:fe:c2:13:6c:c5:da:b6:
                    55:ca:48:b0:2a:a8:3f:27:72:5c:80:42:51:77:13:
                    0a:bd:15:6d:5c:4f:81:f3:d1:94:e2:42:9b:31:b0:
                    a3:8b:f8:c3:23:b9:6d:77:2c:bd:5d:7e:c0:4c:7f:
                    49:20:18:1e:5a:25:57:5e:63:20:94:9d:0b:0b:b7:
                    5f:35:80:d9:66:f0:38:b0:3f:04:31:a1:88:1b:66:
                    be:20:ce:a5:d0:56:52:63:d2:dc:2a:8d:88:b9:20:
                    64:ce:19:8f:73:69:66:bf:3e:83:15:34:ce:db:35:
                    7e:4f:d3:8b:b1:2b:3d:10:46:bd:ad:aa:b4:f3:c7:
                    27:b5:23:f0:f6:6b:84:21:44:b2:28:38:53:4c:20:
                    b0:64:bb:c3:6f:f7:63:f0:58:11:50:e0:a9:35:dc:
                    27:9e:c6:27:6e:c5:88:50:fd:a5:d0:88:84:ab:8b:
                    bf:25:a4:b9:b6:c4:57:55:4b:18:01:25:59:3a:61:
                    65:62:e0:a6:6a:84:e3:7c:0a:fa:b7:3b:21:eb:0c:
                    83:e4:07:12:3f:0d:2f:ff:24:38:44:d3:ae:7a:cd:
                    5e:1f:5d:11:16:2c:5e:cb:d1:6d:a5:4a:b0:3e:cb:
                    d2:80:cf:2d:c0:9b:01:3e:98:02:8c:b9:fd:72:a8:
                    cc:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:65:5D:70:19:9C:93:85:EB:45:97:DD:F2:5C:55:95:8A:E1:48:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/35bf3647-9312-38ee-94ae-dc3c3701a46b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.crl

            X509v3 Authority Key Identifier:
                keyid:D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.212.241.0/24
                  206.212.243.0/24
                  206.212.245.0/24
                  206.212.247.0/24
                  206.212.249.0-206.212.250.255
                  206.212.252.0/24
                  206.212.254.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:06:a7:62:a0:96:c2:91:12:6d:2a:e6:c7:a5:b7:64:73:74:
         d4:cc:2e:e3:28:5b:01:82:ab:83:76:89:2a:70:ff:4c:03:a8:
         c9:f6:86:90:ec:33:1c:25:b2:ce:8f:d4:3f:6e:2f:4c:d6:ff:
         ab:f4:98:e8:df:49:52:70:28:e8:aa:bb:77:34:1b:62:13:88:
         fe:29:0e:26:e6:b0:c9:e6:fd:3b:8e:21:13:4e:b4:3f:f6:49:
         69:67:63:23:47:48:0e:b2:a5:a4:1c:2c:7d:51:dc:ac:55:82:
         8e:47:b5:f7:1d:d7:29:ab:df:81:20:1a:2e:f9:9b:98:79:19:
         e6:d3:c6:99:6b:ba:5d:a7:ca:49:9a:8a:42:01:03:06:f4:9c:
         e6:71:64:3a:d9:0b:49:09:d3:f6:5b:3a:25:c4:5b:8d:30:31:
         ba:43:7a:5b:46:83:e0:70:2d:ed:46:3a:d7:45:c3:99:84:26:
         d0:a9:0f:53:f2:25:ae:06:e0:66:cc:08:59:33:a0:1a:d7:2c:
         2a:10:99:6a:66:46:e6:0f:08:35:fe:bf:08:62:a6:75:8c:87:
         dc:5c:b0:a9:f1:db:f7:a3:be:00:e7:5e:01:25:bd:5e:8f:c2:
         85:16:61:80:07:b3:af:3d:20:3a:39:bd:fa:2c:08:e4:6b:94:
         74:2e:a7:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 3 20:03:53 2024 by rpki-client on console-ams.rpki-client.org