Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/160965a9-ceab-4a04-8e58-1c844268d35a/0f3f5c33-48c8-36da-80a6-f955043bab97.roa
File:                     0f3f5c33-48c8-36da-80a6-f955043bab97.roa (raw, json)
Hash identifier:          xcWj+csjmCSt921Cz78fxJmHKeMwciutllCB1fUkCDQ=
Subject key identifier:   42:06:EC:88:AB:04:25:B2:CC:1C:85:19:9B:02:FC:0D:18:D5:4B:53
Certificate issuer:       /CN=160965a9-ceab-4a04-8e58-1c844268d35a
Certificate serial:       010D0C9F4328584510B3BBED6AB82059A0878700
Authority key identifier: A8:AD:66:52:62:08:9B:D1:1B:3A:A8:C1:71:D4:1B:5D:B4:86:FA:6C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/160965a9-ceab-4a04-8e58-1c844268d35a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/160965a9-ceab-4a04-8e58-1c844268d35a/0f3f5c33-48c8-36da-80a6-f955043bab97.roa
Signing time:             Fri 01 Mar 2024 17:21:09 +0000
ROA not before:           Fri 01 Mar 2024 17:21:09 +0000
ROA not after:            Thu 30 May 2024 16:21:09 +0000
asID:                     8075
IP address blocks:        204.152.92.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Fri 01 Mar 2024 18:03:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:10:b3:bb:ed:6a:b8:20:59:a0:87:87:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=160965a9-ceab-4a04-8e58-1c844268d35a
        Validity
            Not Before: Mar  1 17:21:09 2024 GMT
            Not After : May 30 16:21:09 2024 GMT
        Subject: CN=4d1f6be8-867c-4a47-9fff-336a4f78b96c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:8b:0e:c2:72:a2:82:72:48:95:a1:73:cb:ce:
                    34:58:70:98:58:b0:88:c5:2a:0e:8f:fe:a8:7d:90:
                    bb:21:85:7b:1b:32:97:60:cf:f0:a0:ae:3d:f6:dd:
                    d2:8a:0b:83:3d:54:3c:ec:e4:0f:0c:f5:3c:77:61:
                    26:d7:44:a1:8a:d7:33:71:32:3e:d5:60:52:80:f1:
                    a0:98:04:c8:25:d6:9e:f4:46:bb:4b:8f:78:4e:44:
                    8a:ff:2e:e9:7d:11:4b:33:8d:c3:d0:20:ad:e7:33:
                    f7:3a:3a:b2:07:0c:f1:d3:28:c3:14:43:f5:1e:b4:
                    a3:9e:fa:64:9f:0c:3b:4e:40:fa:07:af:19:53:c2:
                    49:f8:b4:b5:a4:1b:28:dc:cf:ab:0f:7f:8d:09:a6:
                    e2:9d:19:ce:b3:e0:40:a3:cd:7c:0a:1f:f7:bd:6c:
                    73:55:92:d1:bd:7c:2f:dd:94:da:b7:f4:e5:a6:ca:
                    a5:d0:1a:e5:05:90:33:14:12:c3:a7:2a:cc:10:f8:
                    e4:7b:9e:c2:26:91:3b:0d:f1:df:c0:f7:28:61:c0:
                    cc:c2:3e:35:c9:9e:37:ad:cf:72:87:bf:be:e4:e3:
                    ee:8a:b9:cb:cb:6e:5d:3b:8c:73:44:0e:5f:71:c7:
                    0d:8c:e8:48:49:c3:20:f4:ca:37:a6:f8:c3:91:58:
                    41:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:06:EC:88:AB:04:25:B2:CC:1C:85:19:9B:02:FC:0D:18:D5:4B:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/160965a9-ceab-4a04-8e58-1c844268d35a/0f3f5c33-48c8-36da-80a6-f955043bab97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/160965a9-ceab-4a04-8e58-1c844268d35a/160965a9-ceab-4a04-8e58-1c844268d35a.crl

            X509v3 Authority Key Identifier:
                keyid:A8:AD:66:52:62:08:9B:D1:1B:3A:A8:C1:71:D4:1B:5D:B4:86:FA:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/160965a9-ceab-4a04-8e58-1c844268d35a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.152.92.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:d4:35:90:89:f7:a2:d3:0f:60:fa:e4:c0:62:14:50:09:54:
         b0:55:d2:cc:ae:b1:6a:a3:4e:dd:b2:a5:b7:7b:9e:7f:1b:c4:
         07:ea:18:bc:68:68:fa:af:98:55:77:df:7a:ce:0e:35:1a:a0:
         77:16:e0:30:30:71:4e:ed:dc:4b:f8:2f:bb:b5:66:7c:eb:51:
         f3:b0:fe:31:55:8c:fa:5d:e6:71:b4:f0:da:32:6a:91:85:19:
         36:7b:7d:ec:00:b8:ad:7d:59:d8:ca:77:ee:69:ee:e8:58:2f:
         a4:7f:0f:31:90:52:3f:30:bf:c5:a6:3c:63:3b:5a:8c:fd:82:
         2b:dd:81:37:7d:dd:a7:92:33:63:b2:77:36:be:20:d0:d5:49:
         65:ee:a4:eb:02:ff:ec:12:29:4c:1b:f9:f2:a2:7b:44:e8:73:
         82:e4:05:14:d5:1b:35:19:59:96:41:87:63:7a:cd:7f:a4:e9:
         1e:94:c9:e5:36:d6:0e:0e:d2:c8:88:93:16:2c:41:eb:18:16:
         aa:df:f6:b6:19:bd:d2:c9:71:3a:c4:be:6a:78:08:f4:29:b9:
         3f:f6:d2:a8:c3:cf:46:c8:3f:17:25:05:9a:7d:9a:59:51:1c:
         6b:ac:5c:6e:06:05:d4:71:7c:a2:96:2c:d3:82:99:90:30:4f:
         39:84:d2:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 2 00:12:42 2024 by rpki-client on console.sobornost.net