Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/020b5096-78c3-3e36-b4bf-d17bf1ea272c.roa
File:                     020b5096-78c3-3e36-b4bf-d17bf1ea272c.roa (raw, json)
Hash identifier:          WMoZxTNrVgmcPKH2jHGhuEBQJY4gQeCNjf8pakb71jQ=
Subject key identifier:   A9:A0:71:4B:60:AC:02:6C:E3:45:2F:23:9A:6B:A0:45:BB:A2:CD:DD
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285843FD53B59DF28BEBFC556FA900
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/020b5096-78c3-3e36-b4bf-d17bf1ea272c.roa
Signing time:             Fri 24 Nov 2023 02:00:16 +0000
ROA not before:           Fri 24 Nov 2023 02:00:16 +0000
ROA not after:            Thu 22 Feb 2024 02:00:16 +0000
asID:                     13332
IP address blocks:        206.206.82.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 02 Feb 2024 17:21:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:fd:53:b5:9d:f2:8b:eb:fc:55:6f:a9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Nov 24 02:00:16 2023 GMT
            Not After : Feb 22 02:00:16 2024 GMT
        Subject: CN=567321f9-2872-4988-ac75-732e30a47cf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:57:81:18:65:58:ef:ab:68:17:38:7f:00:d9:
                    78:f9:e3:28:46:1d:d0:79:ba:10:ce:ca:6b:b8:aa:
                    36:6e:86:22:c2:4a:53:9b:01:65:6a:3f:d9:6e:5a:
                    8e:d9:b1:40:d9:2c:a7:40:99:f9:a0:50:27:7b:ec:
                    54:56:52:40:74:fa:a2:85:af:04:4a:40:96:5a:78:
                    55:82:bd:06:d2:82:d3:2a:8f:17:b9:e2:26:6d:44:
                    1d:e0:16:0c:81:a3:dc:bd:4e:7e:b2:85:32:ca:b6:
                    a5:76:28:2f:19:f7:24:fa:71:81:d7:00:d5:10:cd:
                    66:39:7b:05:d0:db:73:e9:61:64:c1:59:e8:af:46:
                    18:f4:38:85:c3:a3:a6:27:ea:a2:8e:f9:0a:bf:5c:
                    e9:0c:c2:cb:f1:67:57:3b:eb:b8:ea:9f:45:ae:f8:
                    d2:f0:71:f7:a1:fd:6a:34:a2:ea:9f:a2:e3:4f:69:
                    66:54:0e:03:81:d0:9a:21:50:fb:de:d4:62:a2:81:
                    e1:f9:31:d6:ae:31:72:d5:b6:0b:0f:84:51:f1:76:
                    64:4e:c6:c0:5d:df:d3:06:2f:6e:b7:81:e9:aa:95:
                    0c:ff:28:f2:71:1b:ad:fe:60:7b:bc:7d:9e:50:0c:
                    d0:68:3b:57:2e:c3:f7:6c:93:70:4f:08:c2:98:c3:
                    15:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:A0:71:4B:60:AC:02:6C:E3:45:2F:23:9A:6B:A0:45:BB:A2:CD:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/020b5096-78c3-3e36-b4bf-d17bf1ea272c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.82.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:bf:87:b8:ba:58:95:c5:3b:6f:4c:f9:81:c4:7c:b1:5e:87:
         ff:a8:ae:ea:20:3a:41:d9:5d:f6:81:f5:41:27:20:89:07:20:
         34:30:bf:26:3a:96:9b:cb:d4:c9:41:c1:c1:17:a6:9a:3e:17:
         e2:42:2e:72:3f:88:8d:e1:48:3c:1a:3a:3c:db:7d:ed:06:f9:
         cd:a7:ac:ed:7c:de:3c:b6:40:56:49:3f:ab:a0:ef:c1:17:45:
         38:d6:81:ce:08:48:44:42:11:d8:4f:c1:82:aa:ed:08:de:8f:
         88:ca:a8:c0:28:1d:e3:0d:81:7c:cb:58:23:ba:b3:1a:c8:cf:
         3f:6e:2c:42:96:b9:ad:b2:6d:f9:0b:c1:e2:83:7f:43:04:98:
         98:31:4a:fa:df:39:f1:2d:78:2f:32:3e:3f:0e:6d:99:b0:b5:
         40:06:e9:eb:e3:51:8e:cd:2e:12:6e:bc:80:a3:52:49:f9:2a:
         51:75:09:5d:81:62:8d:1e:4d:5d:de:cf:2b:77:1e:b2:52:b0:
         12:69:16:a2:06:7f:63:42:21:8d:e9:33:55:fd:b6:6d:8f:da:
         f9:04:ba:b2:aa:0e:19:58:d9:41:c9:a1:aa:86:23:7f:a2:ff:
         3f:01:9c:11:63:79:a7:5a:a6:a4:f8:cd:7b:45:a5:4c:b5:76:
         28:72:93:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 2 20:35:37 2024 by rpki-client on console-ams.rpki-client.org