Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e670a794-6ccb-491d-aeb1-ca84859c3950/9bff1b8d-b541-3163-a58c-158b50b20abe.roa
File:                     9bff1b8d-b541-3163-a58c-158b50b20abe.roa (raw, json)
Hash identifier:          51GX+dYY9b7ULPWpEQUXTSiGni3qnnP9FH3nxDKGK20=
Subject key identifier:   4D:C0:55:B7:DC:30:E5:B8:00:19:54:14:39:48:16:D7:E8:CC:5C:92
Certificate issuer:       /CN=e670a794-6ccb-491d-aeb1-ca84859c3950
Certificate serial:       010D0C9F43285844219E9AF337F95EEFF1015E17
Authority key identifier: E8:BA:F4:42:97:3A:12:36:13:19:3B:DF:0B:26:9C:D4:61:A2:E7:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e670a794-6ccb-491d-aeb1-ca84859c3950.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e670a794-6ccb-491d-aeb1-ca84859c3950/9bff1b8d-b541-3163-a58c-158b50b20abe.roa
Signing time:             Thu 07 Dec 2023 02:00:17 +0000
ROA not before:           Thu 07 Dec 2023 02:00:17 +0000
ROA not after:            Wed 06 Mar 2024 02:00:17 +0000
asID:                     398698
IP address blocks:        66.245.167.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 17 Jan 2024 18:54:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:21:9e:9a:f3:37:f9:5e:ef:f1:01:5e:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e670a794-6ccb-491d-aeb1-ca84859c3950
        Validity
            Not Before: Dec  7 02:00:17 2023 GMT
            Not After : Mar  6 02:00:17 2024 GMT
        Subject: CN=d33fc97a-5878-468c-846e-21b7a52b5f57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b9:04:30:74:01:9f:67:b8:a2:d6:9d:d6:f5:
                    6f:f8:50:71:3b:17:19:d2:16:7a:d5:f8:db:b7:68:
                    0b:99:5a:20:35:83:8c:ec:0a:6b:c9:ee:63:2a:22:
                    43:9c:fe:d4:2a:71:1c:95:92:79:49:8e:a1:00:6b:
                    83:fc:2f:83:1e:c8:99:2a:40:4e:a8:5c:9c:95:34:
                    9a:6f:bf:3a:ba:eb:26:71:3f:2b:6e:17:f5:e4:bf:
                    11:c8:e1:eb:ca:0b:d8:70:28:89:75:96:92:52:77:
                    cc:52:b1:8f:47:34:f4:08:74:5f:2a:57:b2:fe:de:
                    54:88:7c:70:3a:a2:06:19:d0:75:f9:54:83:65:e7:
                    fd:14:92:57:5b:75:6a:1f:7b:5d:dc:05:73:28:a1:
                    ef:39:98:26:21:46:2a:9d:c0:64:b7:a4:b4:40:60:
                    81:54:31:42:0a:2d:e7:9d:f4:9d:bf:e3:97:26:b8:
                    99:7d:a0:40:cc:10:88:0f:0a:45:61:e5:38:87:a8:
                    0d:c1:01:97:50:b4:36:f3:fd:f5:c3:3b:41:1c:64:
                    5e:1c:6f:5f:c6:2d:a1:65:55:31:d5:b8:45:48:b7:
                    1a:39:c9:ae:97:80:19:7e:9b:73:5d:1f:1c:e1:2d:
                    ff:b8:12:97:b9:92:6e:91:c7:aa:87:23:65:09:06:
                    f2:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:C0:55:B7:DC:30:E5:B8:00:19:54:14:39:48:16:D7:E8:CC:5C:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e670a794-6ccb-491d-aeb1-ca84859c3950/9bff1b8d-b541-3163-a58c-158b50b20abe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e670a794-6ccb-491d-aeb1-ca84859c3950/e670a794-6ccb-491d-aeb1-ca84859c3950.crl

            X509v3 Authority Key Identifier:
                keyid:E8:BA:F4:42:97:3A:12:36:13:19:3B:DF:0B:26:9C:D4:61:A2:E7:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e670a794-6ccb-491d-aeb1-ca84859c3950.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.245.167.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:90:2b:1d:f4:34:f7:0e:11:0b:09:a1:44:aa:c9:23:ed:dc:
         0f:45:82:9d:1b:21:99:0d:64:68:01:a0:37:b1:5a:e3:53:12:
         78:c3:00:9d:be:ce:14:a0:62:8f:3c:c5:21:65:13:1c:9d:bf:
         32:c2:da:12:a9:ae:d6:9f:a3:46:76:8a:41:5c:a7:2b:77:cc:
         f3:e7:16:7a:24:7b:07:f1:1a:de:d6:c9:79:13:ea:66:87:7c:
         34:72:33:44:bd:55:2b:fa:01:96:61:07:46:69:68:59:ea:2a:
         32:25:3c:9c:ff:ed:14:1a:d8:12:96:4d:eb:a7:e4:52:6a:c9:
         7f:b5:38:de:85:c7:00:49:23:29:ad:4b:8e:b0:da:82:be:c3:
         3b:03:6a:cc:1f:9f:92:74:1f:ee:a0:f1:80:f3:7b:bd:04:06:
         59:c1:80:91:23:db:2a:0f:86:9e:9d:74:62:d4:17:d3:a9:7f:
         b3:7f:48:96:5d:a0:76:fa:59:80:41:3e:37:0d:5d:c9:af:fd:
         7f:9e:ab:a1:e3:eb:2d:76:e9:f8:7b:fb:5d:bf:df:3c:00:da:
         26:81:0c:b7:47:ea:a1:bc:05:37:04:11:3b:51:98:b5:df:ce:
         1b:34:93:a4:13:1a:fb:a2:95:52:57:5c:f6:b2:fa:fa:9a:29:
         43:10:40:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 17 21:47:45 2024 by rpki-client on console-fra.rpki-client.org