Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee7fb547-811b-4ddf-ac51-f3d6a4925515/2b7838f2-2cd3-345d-ab16-f508f54aa47a.roa
File:                     2b7838f2-2cd3-345d-ab16-f508f54aa47a.roa (raw, json)
Hash identifier:          QqnUBfg5HOQ9Q8LdxjZ5tmTM4HpkkFR2k8VU2BCsk6E=
Subject key identifier:   6F:BE:7D:74:85:74:50:3A:CD:EE:F7:AB:12:D0:2C:E0:63:F2:45:9F
Certificate issuer:       /CN=ee7fb547-811b-4ddf-ac51-f3d6a4925515
Certificate serial:       010D0C9F4328576D51CC73C042CFC16E35EFBF59
Authority key identifier: FC:56:E0:E7:6E:4B:6A:A0:7C:7E:D3:33:F9:06:DE:16:32:5B:F5:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee7fb547-811b-4ddf-ac51-f3d6a4925515.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee7fb547-811b-4ddf-ac51-f3d6a4925515/2b7838f2-2cd3-345d-ab16-f508f54aa47a.roa
Signing time:             Mon 04 Nov 2019 10:22:14 +0000
ROA not before:           Mon 04 Nov 2019 05:00:00 +0000
ROA not after:            Mon 04 Nov 2024 05:00:00 +0000
asID:                     16276
IP address blocks:        51.79.0.0/17 maxlen: 17

Validation:               Failed, certificate revoked on Tue 22 Oct 2024 07:26:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6e:35:ef:bf:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee7fb547-811b-4ddf-ac51-f3d6a4925515
        Validity
            Not Before: Nov  4 05:00:00 2019 GMT
            Not After : Nov  4 05:00:00 2024 GMT
        Subject: CN=dfde3da7-53a6-4b1c-9ad1-eb84f7a87e5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:59:10:36:53:3d:a1:bd:80:b4:b1:a8:63:06:
                    45:e1:f5:ba:40:77:d4:0c:af:04:fc:39:64:95:ed:
                    5f:5c:0f:92:01:25:2a:49:4a:be:e8:9b:f9:e8:37:
                    ae:37:aa:0a:13:bf:43:d6:16:7b:d3:fa:2c:03:af:
                    74:fe:4e:a8:35:f2:33:93:9f:9b:0e:ce:43:83:07:
                    36:29:6b:c7:57:0a:a4:73:78:d8:af:1c:d5:55:b3:
                    58:84:c5:b6:50:6e:54:51:08:0a:ac:7a:bb:d3:41:
                    8e:5b:54:25:e1:f0:35:29:75:de:28:17:f7:5e:fd:
                    9c:a3:6e:20:bb:b6:52:89:a7:b4:fe:fe:d2:43:51:
                    86:c6:41:2d:2f:d7:75:aa:b0:b3:7b:b6:a9:16:da:
                    15:34:80:9c:97:ac:68:e8:e1:41:4a:04:e7:88:7a:
                    b5:ef:dc:68:da:14:a1:ab:74:65:c7:db:ab:5e:1a:
                    73:5b:07:ae:bc:54:71:1d:dd:2e:2b:cd:a8:24:83:
                    45:d8:70:06:ce:46:f1:c7:77:6a:1b:72:fd:47:df:
                    50:86:92:62:0e:a5:ef:b0:67:9a:6b:74:62:43:56:
                    0c:4f:d3:c0:f9:46:48:90:e6:7b:95:da:07:83:06:
                    84:f6:78:a3:57:17:e2:12:8b:54:62:cc:24:3f:f5:
                    c3:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:BE:7D:74:85:74:50:3A:CD:EE:F7:AB:12:D0:2C:E0:63:F2:45:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee7fb547-811b-4ddf-ac51-f3d6a4925515/2b7838f2-2cd3-345d-ab16-f508f54aa47a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee7fb547-811b-4ddf-ac51-f3d6a4925515/ee7fb547-811b-4ddf-ac51-f3d6a4925515.crl

            X509v3 Authority Key Identifier:
                keyid:FC:56:E0:E7:6E:4B:6A:A0:7C:7E:D3:33:F9:06:DE:16:32:5B:F5:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee7fb547-811b-4ddf-ac51-f3d6a4925515.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  51.79.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:1a:cc:e0:ed:9d:46:cd:83:62:8f:34:3a:33:0e:ab:18:6a:
         d3:e8:29:15:96:3f:fb:69:e4:15:4d:79:f4:32:78:e2:c2:d4:
         91:ba:2d:37:0d:cf:d3:9c:b2:1b:e0:b8:3e:83:91:51:48:c7:
         e8:4e:ce:00:56:76:5d:42:18:70:ba:41:6d:10:33:7c:10:d6:
         d6:f8:24:5f:3f:9c:57:f2:77:1b:22:97:92:32:90:ba:fe:0b:
         d2:d5:b9:2c:b3:19:37:fa:e1:51:7e:b7:7f:c6:fd:ba:cc:6e:
         56:5a:75:0e:33:f6:09:6e:3e:37:6e:c3:51:7a:3f:d7:aa:f6:
         a7:73:53:29:d4:cd:2c:8d:51:61:52:20:b6:54:67:26:b7:bc:
         49:46:7e:0c:26:1c:d5:c0:d4:37:4d:ec:a3:ea:0c:49:7f:e7:
         5e:e9:a5:b9:87:a5:43:de:2f:5f:dc:2e:b3:20:23:b0:0c:3e:
         18:ee:ad:67:e3:d5:58:b6:66:83:e4:f2:5c:41:8d:08:7f:e6:
         e3:ed:ee:ab:82:84:cd:95:d6:85:ad:42:90:4a:a9:48:05:e6:
         22:33:f6:41:c6:e4:14:1f:b8:67:0f:4c:6b:ed:92:6e:3d:f8:
         d2:9e:05:38:a5:f9:7a:a6:d2:ad:5a:cc:19:85:3e:5d:d0:ef:
         44:e4:1a:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 11:00:16 2024 by rpki-client on console-ams.rpki-client.org