Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/29c0bf74-c4b7-3802-905c-c47aec518142.roa
File:                     29c0bf74-c4b7-3802-905c-c47aec518142.roa (raw, json)
Hash identifier:          9tz5Tx6L/3mL60Rm8VOi8YvZx3UfHXhT6j6cCHnr9Hg=
Subject key identifier:   99:65:9B:F5:A1:E2:28:3A:AA:AA:40:B2:7A:01:88:39:78:85:62:16
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328583F071ACEF3E7C4123E20348A00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/29c0bf74-c4b7-3802-905c-c47aec518142.roa
Signing time:             Thu 25 Aug 2022 12:00:00 +0000
ROA not before:           Thu 25 Aug 2022 12:00:00 +0000
ROA not after:            Sun 24 Aug 2025 04:00:00 +0000
asID:                     701
IP address blocks:        151.196.0.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 05 Dec 2023 19:32:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:07:1a:ce:f3:e7:c4:12:3e:20:34:8a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 25 12:00:00 2022 GMT
            Not After : Aug 24 04:00:00 2025 GMT
        Subject: CN=1690b57e-7662-4afd-839d-61b999c8d795
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:a6:a8:9d:c8:21:94:30:d7:31:8b:b3:76:a0:
                    54:c2:c4:26:64:bd:dc:f6:75:d2:b2:a1:33:18:d7:
                    c3:f3:da:ff:29:4d:ba:3d:56:2e:50:73:f0:f3:5a:
                    25:f4:ff:26:29:0f:a0:54:03:8e:cc:ea:47:32:bf:
                    8d:e8:ef:55:f8:f6:c2:28:c4:ac:83:86:af:d5:d2:
                    0f:46:b5:5a:9f:95:13:60:ff:68:4b:ac:1c:d0:cd:
                    e3:ac:6c:2d:bb:49:81:b3:b0:33:1f:88:95:20:64:
                    6a:9f:ec:a6:75:db:63:f2:86:b5:86:67:f4:15:a8:
                    d5:51:6b:0a:a4:6f:25:63:b0:d6:73:15:54:7f:52:
                    e7:a8:f9:d0:8e:7e:c4:27:49:c7:9c:3a:5b:24:e8:
                    f9:b7:1f:b4:57:14:53:37:db:49:39:26:a3:f4:1c:
                    d3:5c:48:4b:f9:7e:93:b7:44:95:66:cd:81:b3:e9:
                    94:9b:6d:1c:15:aa:c6:ba:36:c3:bd:01:8d:a7:95:
                    9c:98:63:99:03:1e:93:89:02:d0:1f:40:0b:29:2a:
                    c9:18:b8:72:a1:81:43:2d:91:71:cf:cd:14:8b:c0:
                    ed:e4:66:95:19:46:42:cd:ef:64:46:5e:92:3b:7e:
                    34:e1:31:f2:b8:0d:7d:a9:c0:3c:c6:9a:cf:17:27:
                    73:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:65:9B:F5:A1:E2:28:3A:AA:AA:40:B2:7A:01:88:39:78:85:62:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/29c0bf74-c4b7-3802-905c-c47aec518142.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.196.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:24:21:78:d6:f4:c3:fc:7d:a5:f0:5f:0f:41:76:8b:0e:2b:
         32:bd:3b:78:3c:98:f2:c7:bd:5b:7a:bc:8d:d1:8f:e5:30:37:
         95:3c:d7:d7:2a:94:aa:86:24:df:79:c3:1c:be:ac:f1:b1:a7:
         de:5b:30:70:dc:1f:3f:4a:44:49:6a:d9:3f:09:54:2a:66:5e:
         f5:a0:b2:b8:19:e3:64:81:ea:6e:05:bd:25:8c:de:52:ff:9f:
         8b:7b:c6:14:b3:8a:9f:82:f5:3b:62:da:5f:2f:00:c3:4f:b8:
         d4:05:7c:3e:6f:32:0f:6a:b0:ab:82:cf:12:48:5f:d3:2e:82:
         34:e4:3e:16:3b:a0:2b:9e:53:8a:e4:ec:1d:78:5e:31:8d:05:
         9a:29:a7:74:02:43:f9:8b:da:e4:d7:f0:25:73:8a:d4:77:15:
         3c:03:79:dd:58:47:cb:b6:58:ea:9c:5c:65:9d:60:77:48:d9:
         d7:c9:eb:6a:84:0f:3e:ad:d9:9b:1b:3c:ac:38:cf:11:fb:e0:
         3a:19:3f:f6:48:ef:0e:e2:5b:f5:b8:81:68:36:c1:21:ae:cd:
         4b:3d:15:03:5f:cf:13:1a:e0:3b:65:30:f2:78:fc:9b:af:4b:
         fb:d0:d9:78:d0:c6:fe:fc:0d:f6:82:94:11:b2:82:4b:70:cd:
         ac:04:76:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:41 2024 by rpki-client on console-fra.rpki-client.org