Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee7fb547-811b-4ddf-ac51-f3d6a4925515/cd39e269-f130-3026-ad31-5e92d35c563c.roa
File:                     cd39e269-f130-3026-ad31-5e92d35c563c.roa (raw, json)
Hash identifier:          SS33M8XjWaIuNVRaWmwOTkFm9tbQVPfnm/8eGtrsLG4=
Subject key identifier:   A1:2D:CC:94:2E:21:86:84:E3:7B:45:96:5B:9A:F4:9F:F8:20:AF:CC
Certificate issuer:       /CN=ee7fb547-811b-4ddf-ac51-f3d6a4925515
Certificate serial:       010D0C9F4328576D51CC73C042CFC16E35E1B20F
Authority key identifier: FC:56:E0:E7:6E:4B:6A:A0:7C:7E:D3:33:F9:06:DE:16:32:5B:F5:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee7fb547-811b-4ddf-ac51-f3d6a4925515.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee7fb547-811b-4ddf-ac51-f3d6a4925515/cd39e269-f130-3026-ad31-5e92d35c563c.roa
Signing time:             Mon 04 Nov 2019 10:06:53 +0000
ROA not before:           Mon 04 Nov 2019 05:00:00 +0000
ROA not after:            Mon 04 Nov 2024 05:00:00 +0000
asID:                     16276
IP address blocks:        139.99.128.0/17 maxlen: 17

Validation:               Failed, certificate revoked on Tue 22 Oct 2024 07:27:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6e:35:e1:b2:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee7fb547-811b-4ddf-ac51-f3d6a4925515
        Validity
            Not Before: Nov  4 05:00:00 2019 GMT
            Not After : Nov  4 05:00:00 2024 GMT
        Subject: CN=59d1ca17-19a3-4bfc-8930-2db81d7110e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:3d:0e:93:a6:7e:56:5c:41:68:d4:50:7c:52:
                    ec:b5:aa:eb:2c:a9:36:34:22:94:e6:d7:de:13:17:
                    cb:c3:c5:4c:19:d7:79:11:2c:41:24:e4:18:23:c9:
                    63:d8:ca:81:46:ef:94:0e:e9:f1:13:18:6f:46:f5:
                    82:e6:36:a2:5a:75:4e:bd:e9:f3:f4:67:5d:ae:aa:
                    4d:5a:d9:a3:02:e2:87:db:0d:5e:f4:90:58:43:92:
                    d6:d8:89:f1:07:2e:42:41:30:54:39:79:17:4d:74:
                    4c:4c:82:d2:39:22:da:91:d8:8f:52:9b:c7:35:6e:
                    3d:da:d4:16:46:ba:56:e1:91:52:2f:3f:00:9f:ea:
                    95:84:d2:6d:d8:1a:23:ec:80:f8:5d:17:3a:43:90:
                    1e:fb:d7:c5:b3:ba:59:72:89:dc:33:02:b6:40:00:
                    de:67:d9:3c:3f:51:ed:ae:cc:37:f8:01:36:82:4a:
                    ab:ef:49:16:4a:a0:4c:96:49:64:73:53:bc:2b:bc:
                    31:0b:2f:1b:45:ed:44:1e:f9:7d:e3:cc:00:4e:06:
                    f4:42:3a:4d:48:e7:c0:21:c7:0c:3e:13:c4:2d:6d:
                    be:2d:93:e8:b8:19:b4:30:04:d8:78:ed:2e:39:16:
                    44:95:2a:43:d4:78:4b:fe:da:a0:09:cc:38:bb:c0:
                    18:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:2D:CC:94:2E:21:86:84:E3:7B:45:96:5B:9A:F4:9F:F8:20:AF:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee7fb547-811b-4ddf-ac51-f3d6a4925515/cd39e269-f130-3026-ad31-5e92d35c563c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee7fb547-811b-4ddf-ac51-f3d6a4925515/ee7fb547-811b-4ddf-ac51-f3d6a4925515.crl

            X509v3 Authority Key Identifier:
                keyid:FC:56:E0:E7:6E:4B:6A:A0:7C:7E:D3:33:F9:06:DE:16:32:5B:F5:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ee7fb547-811b-4ddf-ac51-f3d6a4925515.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.99.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:20:27:c8:2e:d4:77:70:94:b7:ca:f8:6d:65:41:78:20:3a:
         b7:a4:0c:a0:d1:48:9c:56:68:69:48:bc:0a:67:04:b1:bd:56:
         d0:8c:4b:17:ae:0a:57:08:32:84:f8:6c:09:3c:90:8f:e4:71:
         7a:da:72:7b:89:11:db:a5:1e:8b:c2:e1:1f:c0:fa:97:2a:72:
         18:b2:be:2c:5b:fa:7d:54:70:96:d5:bb:c2:76:ef:9b:5d:c0:
         f9:77:49:d8:d7:e5:c3:04:e7:59:ed:3c:42:a3:dd:10:dc:4a:
         9f:81:cc:96:84:0d:89:15:1c:9d:3b:38:f3:58:af:3d:a2:85:
         80:1d:da:f1:f7:1d:0f:0e:38:fc:b1:0d:ed:d2:2f:c0:4f:c8:
         42:da:a7:c2:7e:bc:e8:56:2b:23:b9:61:54:89:f3:52:86:13:
         a4:5c:af:9d:61:8f:12:3c:e8:d5:ca:8e:69:a7:cd:ce:4b:41:
         8c:b7:d7:28:a3:d8:9a:8d:63:1e:01:8d:7d:4c:93:b2:eb:65:
         7f:f4:ae:83:51:57:00:11:ac:92:7f:c4:a1:3b:e2:58:5f:fd:
         bd:4d:91:9e:0f:4b:4e:68:fd:37:76:bd:12:cf:da:53:8f:e5:
         a3:59:de:46:f6:a9:4d:7a:b4:d0:4f:84:ec:63:91:e3:fc:1f:
         63:82:1c:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 10:09:29 2024 by rpki-client on console-fra.rpki-client.org