Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/a28bfc7d-6a1e-3d14-bf1e-22f8166db424.roa
File:                     a28bfc7d-6a1e-3d14-bf1e-22f8166db424.roa (raw, json)
Hash identifier:          PkIPmvAi3T4Xk187ve5H2tn6Vr10U7egXq+ZKhgQMzc=
Subject key identifier:   07:0C:FE:C7:72:DE:B4:53:E3:16:7F:A4:28:26:6E:BB:7B:24:BD:F8
Certificate issuer:       /CN=9de5b47f-bd49-4614-b658-9980cfd17769
Certificate serial:       010D0C9F4328584664C9E1BEEC4E8DE25A8FB0E0
Authority key identifier: 8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/a28bfc7d-6a1e-3d14-bf1e-22f8166db424.roa
Signing time:             Mon 01 Jul 2024 13:00:33 +0000
ROA not before:           Mon 01 Jul 2024 13:00:33 +0000
ROA not after:            Sun 29 Sep 2024 13:00:33 +0000
asID:                     26282
IP address blocks:        67.219.244.0/23 maxlen: 23
                          67.219.246.0/23 maxlen: 23
                          67.219.248.0/23 maxlen: 23
                          67.219.250.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 10 Jul 2024 12:30:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:64:c9:e1:be:ec:4e:8d:e2:5a:8f:b0:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9de5b47f-bd49-4614-b658-9980cfd17769
        Validity
            Not Before: Jul  1 13:00:33 2024 GMT
            Not After : Sep 29 13:00:33 2024 GMT
        Subject: CN=eb542f6b-4eaf-4b5f-b6fd-131e30f5e373
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:52:da:43:a3:d4:9a:58:18:8d:1b:e3:be:f8:
                    4f:86:c9:2e:c7:16:ce:07:36:75:25:1c:f5:f0:d5:
                    0d:82:b4:da:d8:b3:65:f3:28:91:b4:05:0c:fb:c9:
                    fe:f9:f3:4e:4d:74:22:5e:b0:1e:ce:09:7d:09:81:
                    7e:92:b0:65:4f:62:b6:fb:8b:4e:eb:ca:53:d8:18:
                    6f:8b:35:8f:1c:0c:27:b9:e5:24:72:80:a5:16:43:
                    2b:9f:ce:8a:61:5c:9c:f9:25:e1:3c:bb:db:9d:22:
                    d5:85:ba:e3:96:53:26:ec:d6:b5:f8:a2:0d:c9:cd:
                    b6:75:e0:22:43:ea:2b:cc:3e:77:1b:04:77:bf:8d:
                    c5:ba:ce:be:9e:44:e9:3e:e3:be:b8:88:05:1b:43:
                    57:8f:d2:f1:db:8d:98:b6:e4:3f:72:12:ba:75:8b:
                    9f:32:c6:06:d8:20:bf:40:97:ab:17:77:42:a1:f0:
                    56:2a:6a:d6:86:7c:66:e3:b6:25:8b:c3:8e:fe:cb:
                    33:00:30:03:d7:de:47:ea:5c:49:e8:6c:07:99:0a:
                    d7:7e:d3:41:75:b0:1b:f4:e8:df:84:a3:6f:1a:8a:
                    90:66:cf:e6:63:e9:12:65:5e:92:79:ac:da:6f:2d:
                    18:2a:34:e8:e3:18:e8:cb:f1:69:69:73:0c:98:f7:
                    70:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:0C:FE:C7:72:DE:B4:53:E3:16:7F:A4:28:26:6E:BB:7B:24:BD:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/a28bfc7d-6a1e-3d14-bf1e-22f8166db424.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl

            X509v3 Authority Key Identifier:
                keyid:8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.219.244.0-67.219.251.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:ab:92:95:8b:18:99:71:30:02:3b:4e:f7:c4:2e:39:45:85:
         f0:31:6e:6a:47:61:f5:cc:db:f1:e1:db:1d:d0:92:d9:c1:81:
         55:08:e7:23:0b:81:63:0e:6c:95:a3:34:f9:7e:34:7e:15:6a:
         67:c5:7b:cc:ce:3c:84:fd:5d:72:82:e3:29:b6:34:97:f2:e8:
         8e:4c:43:1c:8e:79:6f:79:fd:61:f4:5b:d9:4c:a8:0b:7b:00:
         c4:1b:13:48:bb:b5:cc:b9:72:3c:ea:2f:d1:cf:94:e6:5b:8a:
         1e:18:9c:27:87:c2:27:00:61:ad:cd:5d:46:9e:bf:9b:0a:65:
         58:ce:b0:a3:a0:e4:6a:a9:65:7d:91:bd:1b:6d:6e:27:3b:8d:
         d2:bc:a2:fb:d4:4f:c7:05:1c:8f:3c:96:c1:b7:6c:cb:6b:5e:
         ea:d1:c3:6b:6b:18:64:ab:90:26:d5:c3:b0:9a:fa:8a:af:19:
         f9:29:86:7e:31:1b:f5:f2:36:0b:62:c0:dd:62:97:d6:da:5f:
         07:3d:0f:27:76:71:de:ac:68:cb:29:7a:49:11:a1:57:11:c6:
         22:53:19:1e:9e:84:cc:ad:3e:59:0e:2a:5d:a8:89:dd:42:11:
         1d:9d:e1:3b:89:37:86:a2:0b:58:64:4d:62:8e:77:58:a0:8c:
         02:71:85:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 10 14:24:16 2024 by rpki-client on console-ams.rpki-client.org