Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/527be9a5-3b55-3ed4-97ea-1697964d40dd.roa
File:                     527be9a5-3b55-3ed4-97ea-1697964d40dd.roa (raw, json)
Hash identifier:          O/BTfKrITRZLhmsW9aK2bCLBXLDh8u7Y5bbyRq6sIrU=
Subject key identifier:   11:17:FE:EC:D0:85:1D:C1:50:67:DA:70:6C:85:A8:7D:DB:32:AA:EB
Certificate issuer:       /CN=9de5b47f-bd49-4614-b658-9980cfd17769
Certificate serial:       010D0C9F4328584664C9E1F5AB711E3C2929A858
Authority key identifier: 8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/527be9a5-3b55-3ed4-97ea-1697964d40dd.roa
Signing time:             Mon 01 Jul 2024 13:00:33 +0000
ROA not before:           Mon 01 Jul 2024 13:00:33 +0000
ROA not after:            Sun 29 Sep 2024 13:00:33 +0000
asID:                     14618
IP address blocks:        67.219.244.0/24 maxlen: 24
                          67.219.245.0/24 maxlen: 24
                          67.219.246.0/24 maxlen: 24
                          67.219.247.0/24 maxlen: 24
                          67.219.248.0/24 maxlen: 24
                          67.219.249.0/24 maxlen: 24
                          67.219.250.0/24 maxlen: 24
                          67.219.251.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 10 Jul 2024 11:21:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:64:c9:e1:f5:ab:71:1e:3c:29:29:a8:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9de5b47f-bd49-4614-b658-9980cfd17769
        Validity
            Not Before: Jul  1 13:00:33 2024 GMT
            Not After : Sep 29 13:00:33 2024 GMT
        Subject: CN=dd3e8c00-d6db-4740-a0c4-b68baa6dd87f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f9:23:aa:7d:54:1a:2f:93:f1:fa:50:e7:63:
                    0e:2b:f8:0b:22:f1:dc:90:07:8a:f0:1a:bb:47:d4:
                    f6:73:10:fb:76:eb:c9:4f:6b:e4:9d:da:97:f9:e0:
                    35:2b:69:3e:fa:ce:52:4e:d3:7d:db:35:c2:e0:da:
                    5b:81:c2:b3:94:a8:c4:06:44:7c:4a:85:95:9f:71:
                    70:3e:50:f8:4b:e8:35:ca:6e:2d:22:c6:a1:d5:99:
                    21:2d:15:17:db:0d:0f:d4:7b:cb:3f:20:df:4a:3a:
                    d0:d0:93:ec:66:aa:50:1e:23:ed:f9:9e:a7:22:48:
                    59:e7:9d:9b:c2:b0:ad:9a:f0:87:e0:d1:1b:fb:66:
                    b5:e5:80:2a:44:6e:d9:35:e2:72:6c:b1:66:a0:26:
                    af:00:fb:b7:46:3e:c5:41:07:9f:bb:d6:16:d9:74:
                    5a:d6:33:b8:ed:11:86:fa:00:e1:86:14:7d:16:f9:
                    51:55:f7:ce:03:5a:61:a9:fa:0b:8d:63:fb:a4:7e:
                    35:fd:96:05:b1:20:d7:3e:cc:bf:51:6a:0d:48:95:
                    e1:3a:a8:01:85:db:00:a3:f8:55:8e:5b:a7:be:04:
                    07:c5:e4:43:db:5c:3e:ef:48:4b:70:74:4b:a3:06:
                    be:86:b7:9f:b8:a7:92:cd:20:8f:f8:91:b6:b6:49:
                    54:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:17:FE:EC:D0:85:1D:C1:50:67:DA:70:6C:85:A8:7D:DB:32:AA:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/527be9a5-3b55-3ed4-97ea-1697964d40dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl

            X509v3 Authority Key Identifier:
                keyid:8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.219.244.0-67.219.251.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:20:59:59:5e:a5:91:61:e2:43:41:64:de:c0:97:4a:8c:d6:
         6a:aa:4f:0f:7f:d8:b9:0e:35:69:0d:43:4e:7c:21:05:88:8c:
         88:e5:e3:3e:06:e2:23:d4:4c:b1:90:49:14:20:18:28:95:36:
         51:b5:39:3a:8b:d3:80:05:32:80:69:79:fc:0f:fa:70:d4:8b:
         d6:8f:1a:3a:c6:a4:c1:55:17:8f:37:f2:58:df:d5:62:dc:fb:
         c6:b2:b8:38:1a:b0:41:98:b1:ee:dc:96:14:a2:74:89:39:cc:
         ca:ca:40:fe:67:5d:f8:91:07:f5:a8:32:32:49:64:8a:e3:e8:
         d8:3a:0f:17:02:89:52:4a:7a:b4:ab:e6:7f:1d:df:f3:ed:3a:
         93:b7:38:19:38:b0:a0:14:30:45:35:bf:1e:ba:61:20:8f:5a:
         9c:fd:b3:66:60:6c:5f:30:aa:3a:18:45:58:83:59:cc:6f:c5:
         c2:97:9a:4d:05:59:99:93:ad:3a:87:0b:85:4d:21:31:93:bc:
         55:e2:6a:5e:1e:21:85:31:9d:9f:71:fa:5f:6c:c1:dd:8c:95:
         67:2c:05:86:7d:ae:d9:15:30:5f:7d:a3:88:82:ef:14:2c:af:
         1b:90:41:b0:6f:04:d9:42:47:a7:20:48:95:b2:ac:58:a1:26:
         ca:e2:dc:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 10 14:24:16 2024 by rpki-client on console-ams.rpki-client.org