Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/57a0375c-fcf6-34d2-a741-0d176a2ab90c.roa
File:                     57a0375c-fcf6-34d2-a741-0d176a2ab90c.roa (raw, json)
Hash identifier:          ifUy0pJ7NvsrclUQzKVIR2/+HJt8IVnfFJYFCps6IgA=
Subject key identifier:   83:66:F8:45:2B:85:D2:B5:FE:33:6D:B0:A7:92:25:22:2F:40:94:72
Certificate issuer:       /CN=9de5b47f-bd49-4614-b658-9980cfd17769
Certificate serial:       010D0C9F4328584664C9E20C774B554DFDF16480
Authority key identifier: 8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/57a0375c-fcf6-34d2-a741-0d176a2ab90c.roa
Signing time:             Mon 01 Jul 2024 13:00:33 +0000
ROA not before:           Mon 01 Jul 2024 13:00:33 +0000
ROA not after:            Sun 29 Sep 2024 13:00:33 +0000
asID:                     16509
IP address blocks:        67.219.240.0/24 maxlen: 24
                          67.219.241.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 10 Jul 2024 11:21:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:64:c9:e2:0c:77:4b:55:4d:fd:f1:64:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9de5b47f-bd49-4614-b658-9980cfd17769
        Validity
            Not Before: Jul  1 13:00:33 2024 GMT
            Not After : Sep 29 13:00:33 2024 GMT
        Subject: CN=d81eb68b-1a49-4dbe-bac5-3f814d72ff84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:26:1c:b2:17:0a:70:8d:ba:a8:db:fe:ff:e8:
                    c3:c0:62:06:97:61:c0:18:ca:48:10:0c:95:7d:67:
                    37:08:50:9f:c1:4e:bd:f8:c5:22:ee:a4:14:9b:bb:
                    d5:31:d6:95:92:73:76:ba:80:f9:6b:94:3e:f6:14:
                    62:1e:e4:c9:f1:8b:a6:56:f7:61:01:ad:62:7c:cb:
                    2b:8d:f6:6d:e6:92:fd:36:99:b2:f8:61:48:69:42:
                    6f:06:30:99:10:3a:a5:19:87:89:f7:46:0f:99:99:
                    c9:85:96:fc:9d:7d:84:0f:0e:d9:75:30:8a:ed:90:
                    de:a3:64:3e:04:23:f5:1f:78:36:22:22:88:cc:0f:
                    e6:99:f2:76:db:30:e8:1f:1a:d2:f0:35:95:e2:e6:
                    23:a6:10:4e:1c:b8:63:80:1b:1c:49:35:25:74:e0:
                    06:ef:f6:a8:74:db:66:ea:6e:ed:68:2e:5d:34:30:
                    eb:9d:4b:36:d4:07:1e:0c:3e:e3:b3:46:fe:8c:c7:
                    06:e0:dd:67:a8:fd:88:55:65:7e:5e:77:36:6e:9e:
                    ce:e3:f1:18:52:11:ba:31:0c:15:52:e9:d8:65:12:
                    be:c3:1b:99:0e:58:85:7b:49:f9:e2:01:5b:62:30:
                    86:96:4d:3b:17:6a:a4:2b:db:8f:41:63:ad:09:f4:
                    5e:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:66:F8:45:2B:85:D2:B5:FE:33:6D:B0:A7:92:25:22:2F:40:94:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/57a0375c-fcf6-34d2-a741-0d176a2ab90c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl

            X509v3 Authority Key Identifier:
                keyid:8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.219.240.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:19:49:1b:e1:ff:e7:fa:b9:05:7e:b5:25:f1:0d:25:d8:43:
         63:e8:91:a5:2c:03:cc:31:80:23:e8:53:9e:38:ea:51:81:41:
         f5:76:76:c9:45:46:05:eb:a7:76:35:5f:a4:45:52:c2:54:b8:
         14:87:40:0e:3d:90:77:72:54:49:06:89:09:48:ca:9a:e7:f3:
         2f:40:66:ab:3f:d9:d3:4b:a4:5d:90:eb:ec:bf:8c:30:2e:0f:
         a5:54:7a:d0:e8:2f:b8:cb:43:85:e3:92:16:14:8d:61:ac:0b:
         dd:25:18:f2:20:57:90:27:05:8c:4f:5b:47:35:9f:a6:9a:39:
         3a:e7:a1:68:07:d5:1c:ed:ef:41:99:75:ff:f9:d3:c7:f1:a3:
         82:77:4e:96:ec:98:7e:db:72:33:4d:01:22:6d:48:11:63:cf:
         86:0c:f5:99:f6:04:cb:08:b8:b5:83:37:d4:3b:35:92:b6:b9:
         40:bc:1c:c6:ce:d7:52:c1:ab:92:69:e5:10:00:51:4e:5f:c8:
         24:93:1b:c5:ce:f5:96:ab:1a:40:79:ef:85:29:68:03:8b:0d:
         db:99:42:f7:74:5e:55:2d:a9:a1:d6:05:64:64:b5:bb:e1:70:
         8d:c8:f4:34:4f:a9:16:e6:c4:07:08:ad:f1:55:de:a4:ea:39:
         6a:c4:27:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 10 14:24:16 2024 by rpki-client on console-ams.rpki-client.org