Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4c6c7a66-2a6e-3d97-97b3-2411df4e62cd.roa
File:                     4c6c7a66-2a6e-3d97-97b3-2411df4e62cd.roa (raw, json)
Hash identifier:          vDZR9Ab88ptpp2h0qhEzMA+l/w3KundDPq2oN2GbhLs=
Subject key identifier:   80:2F:83:27:86:A3:4D:22:AD:4F:66:B8:15:C5:14:1D:04:C0:BD:2C
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F43285844712F1B0661C04A71A9C24A40
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4c6c7a66-2a6e-3d97-97b3-2411df4e62cd.roa
Signing time:             Thu 04 Jan 2024 14:00:21 +0000
ROA not before:           Thu 04 Jan 2024 14:00:21 +0000
ROA not after:            Wed 03 Apr 2024 13:00:21 +0000
asID:                     64267
IP address blocks:        108.165.100.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 04 Mar 2024 18:13:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:71:2f:1b:06:61:c0:4a:71:a9:c2:4a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Jan  4 14:00:21 2024 GMT
            Not After : Apr  3 13:00:21 2024 GMT
        Subject: CN=c9624c66-4cd3-483f-a334-de5769c74697
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:4f:88:f9:8b:bd:b2:52:6f:16:a5:cd:cd:34:
                    ee:9e:56:84:24:6f:b4:b2:46:b7:08:61:bd:26:a9:
                    cb:83:e0:58:ef:f2:78:37:d6:68:3a:60:f7:6a:5e:
                    fc:97:d8:92:5e:c2:73:63:5b:f9:2c:0a:e2:a8:73:
                    e6:ac:24:27:b7:52:e3:5b:97:cd:10:15:89:57:8f:
                    47:86:1b:c9:2e:82:ff:7a:79:a2:f6:42:8c:ea:7b:
                    79:d0:9b:92:83:ed:08:68:d4:4c:06:49:27:8c:5f:
                    62:1c:cb:4c:f9:94:e1:d1:21:21:ee:ef:26:5b:06:
                    87:83:9d:20:fb:fc:c7:d9:27:c8:ef:ad:56:58:c5:
                    69:b9:50:69:12:30:b7:67:cb:7e:c4:a5:99:e9:90:
                    6f:be:c3:aa:80:00:3c:cb:47:bd:92:bc:2c:dc:b1:
                    93:f2:77:59:4a:42:18:6d:81:6e:1f:a2:5d:5b:32:
                    c2:59:79:86:e3:39:16:24:40:9f:64:09:df:3d:8d:
                    8a:12:72:01:45:5b:0a:7e:9e:90:7e:d6:50:0a:5d:
                    86:de:b7:c5:f5:dd:4f:55:d9:65:a2:b8:b9:b3:3c:
                    a8:11:dd:e7:23:9e:66:ea:d2:d0:7e:0c:c7:13:31:
                    73:c8:bd:db:a6:d0:68:20:bf:ca:bc:9e:30:e5:46:
                    43:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:2F:83:27:86:A3:4D:22:AD:4F:66:B8:15:C5:14:1D:04:C0:BD:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/4c6c7a66-2a6e-3d97-97b3-2411df4e62cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:13:1f:6b:1d:a0:84:0f:08:90:ce:63:0f:b1:f5:15:de:ae:
         3a:d1:5b:cd:ee:84:a4:35:f1:73:b0:d2:83:69:d3:00:21:93:
         a6:b4:7a:dd:f3:da:e4:aa:82:9f:c3:24:61:a8:43:3d:9b:e2:
         fa:fb:c7:40:83:1e:fd:3a:ed:5b:5b:91:2e:23:19:5d:0f:4c:
         60:16:c5:5c:70:6b:bc:c9:34:49:8c:3f:2f:2b:51:15:ee:0b:
         fc:74:df:a7:c4:b7:05:0f:fc:a6:29:00:61:02:cd:1d:f8:72:
         3b:bb:c0:8d:d1:60:c0:a1:80:dd:3b:17:7b:22:2e:26:09:c9:
         67:21:92:07:14:d4:d1:b9:30:84:64:45:69:c6:af:e0:87:1e:
         ee:9c:dd:b7:a8:37:28:2a:0f:ab:1d:5b:c6:d3:2f:8d:9f:21:
         93:41:0e:a3:36:8a:63:1b:e5:b8:19:dc:b6:2f:9f:e2:f0:69:
         af:3d:ea:7f:17:74:79:04:26:47:7a:eb:2c:7e:62:e2:38:18:
         e8:8f:2c:b9:9e:0a:a7:25:eb:53:56:44:2a:88:b7:5f:d0:d9:
         d2:5c:73:70:dd:54:58:ca:b8:ad:ec:29:32:43:8d:9b:af:93:
         cf:84:ca:77:c0:ae:ad:92:a4:28:66:54:1e:8d:c5:74:cc:73:
         8e:5e:8c:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 4 20:51:07 2024 by rpki-client on console-fra.rpki-client.org