Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/79ad4f5c-950b-3bdd-99b7-50ad3c8d3970.roa
File:                     79ad4f5c-950b-3bdd-99b7-50ad3c8d3970.roa (raw, json)
Hash identifier:          vkuzv/hgasChBaaOVDRmmmhY2WECEtPuAjlKf/JU6DQ=
Subject key identifier:   90:9E:CE:0A:50:C6:6D:9C:57:30:A2:92:3C:C4:D2:A5:F8:E5:57:F5
Certificate issuer:       /CN=5e3e99cc-7992-4ac1-a256-917cce07532e
Certificate serial:       010D0C9F432858470F6E501795A976F103C3FB82
Authority key identifier: D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/79ad4f5c-950b-3bdd-99b7-50ad3c8d3970.roa
Signing time:             Sat 31 Aug 2024 15:59:20 +0000
ROA not before:           Sat 31 Aug 2024 15:59:20 +0000
ROA not after:            Fri 29 Nov 2024 16:59:20 +0000
asID:                     400859
IP address blocks:        206.212.243.0/24 maxlen: 24
                          206.212.245.0/24 maxlen: 24
                          206.212.247.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 03 Sep 2024 17:42:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:0f:6e:50:17:95:a9:76:f1:03:c3:fb:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e3e99cc-7992-4ac1-a256-917cce07532e
        Validity
            Not Before: Aug 31 15:59:20 2024 GMT
            Not After : Nov 29 16:59:20 2024 GMT
        Subject: CN=48a3f22f-3f41-4f22-ae1f-5d0d7087fa4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:7e:b0:1d:c1:c7:f1:ec:cd:03:97:eb:9e:f9:
                    d9:68:f4:a4:d4:7e:40:b4:f1:6e:96:67:03:12:0b:
                    43:50:b6:a0:bc:fe:ff:5c:d3:20:b2:97:e7:e3:d8:
                    83:62:bf:b2:30:15:0e:71:1e:1b:60:07:2c:5e:fd:
                    f2:44:97:ef:f0:48:fa:49:bb:62:3c:f7:6d:d2:62:
                    bf:dd:34:fb:bf:96:db:ac:c3:e5:ff:f5:32:36:96:
                    42:a5:11:56:6e:2e:37:0e:b8:85:c7:f0:4d:a3:1a:
                    16:dd:ed:df:59:13:5f:e4:c1:cc:43:e8:94:c6:e8:
                    df:fa:a8:70:0a:88:0a:e8:24:5c:36:41:b1:5c:22:
                    9b:96:83:a9:35:35:b7:62:27:ac:65:6b:d1:dc:e0:
                    0e:a5:9c:c3:9c:af:a9:9b:40:11:ff:b6:ee:cf:fe:
                    90:4f:42:5d:ee:73:9a:c3:81:08:24:aa:e1:83:44:
                    1e:02:cd:34:b9:1f:1f:33:08:0f:f4:ba:b8:b1:92:
                    6f:b7:2d:4e:4c:0e:77:14:9d:f6:7a:f9:96:20:2b:
                    10:a2:ea:c5:a7:db:62:c2:9b:2f:33:3f:51:0c:56:
                    58:3e:01:78:82:35:db:0b:1d:01:46:1f:ec:26:be:
                    57:1e:22:63:5b:1b:ee:69:8d:0a:b5:11:fe:14:75:
                    ec:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:9E:CE:0A:50:C6:6D:9C:57:30:A2:92:3C:C4:D2:A5:F8:E5:57:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/79ad4f5c-950b-3bdd-99b7-50ad3c8d3970.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.crl

            X509v3 Authority Key Identifier:
                keyid:D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.212.243.0/24
                  206.212.245.0/24
                  206.212.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:86:c6:ec:43:e9:eb:6a:fc:f9:4e:38:1c:f4:5a:f3:b6:6a:
         06:46:a6:c6:c7:9c:b5:d6:34:63:e4:8f:a3:32:48:9f:5b:be:
         e3:49:77:eb:c7:ff:f8:52:90:46:4f:45:86:11:b1:50:cd:c6:
         f2:ee:f2:3d:4c:b7:f4:38:e7:9a:63:71:ce:23:7d:cf:95:56:
         8a:16:5d:16:52:7f:ce:08:c7:56:52:5b:86:07:b7:93:33:e1:
         2d:87:61:28:29:7b:ad:25:16:1a:a3:65:6b:04:a4:6e:5d:cf:
         8c:08:13:5d:9d:2c:41:53:8c:af:a7:48:f8:04:6a:00:20:18:
         b7:4c:f1:e6:0a:3b:01:1f:66:31:25:06:37:b7:81:d4:09:d1:
         c8:1f:87:8a:b2:8f:64:c7:1c:fa:59:58:85:86:7b:4f:1e:0f:
         e6:ec:3d:cc:3b:9f:5e:dc:94:9b:7e:27:91:ee:4a:2e:8d:91:
         22:ac:29:13:59:9a:b9:38:d1:cd:db:04:40:27:b1:44:74:a1:
         e0:8a:8a:96:da:94:ca:96:40:93:41:6b:aa:cc:94:f6:3e:9d:
         b0:7b:64:d5:e8:68:31:04:54:e8:14:5c:36:1e:51:8f:66:27:
         a8:2a:57:29:f2:9d:fd:e6:78:0c:90:d4:2a:91:05:52:e5:98:
         cd:2c:0c:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 3 19:46:16 2024 by rpki-client on console-ams.rpki-client.org