Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/4bc52f84-507c-3c99-90e8-31eb13ab1436.roa
File:                     4bc52f84-507c-3c99-90e8-31eb13ab1436.roa (raw, json)
Hash identifier:          JLp3G6/kCRm59WMwAq7MeMCnv3GIGevPPgF+S9HKB+0=
Subject key identifier:   16:23:9D:A3:E6:15:AB:CA:CB:E6:D8:21:99:D1:C3:ED:0E:23:1F:A9
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F432858447F964362FDE45BE4DDB04EC0
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/4bc52f84-507c-3c99-90e8-31eb13ab1436.roa
Signing time:             Tue 09 Jan 2024 17:49:34 +0000
ROA not before:           Tue 09 Jan 2024 17:49:34 +0000
ROA not after:            Mon 08 Apr 2024 16:49:34 +0000
asID:                     16509
IP address blocks:        184.174.80.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 10 Mar 2024 06:03:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:7f:96:43:62:fd:e4:5b:e4:dd:b0:4e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jan  9 17:49:34 2024 GMT
            Not After : Apr  8 16:49:34 2024 GMT
        Subject: CN=5ee38daa-4c0b-41e2-ae0c-b6c93316f8c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:12:7e:0b:39:0a:57:00:87:37:07:20:ac:cb:
                    38:4b:90:1b:f2:2b:6e:f7:6f:1d:b4:51:c8:e2:c5:
                    aa:27:0a:31:fb:50:06:8c:93:70:a4:ea:d6:ea:af:
                    14:bc:7f:1a:9c:2e:7d:c4:ec:39:93:e5:3d:1b:db:
                    58:c2:bb:a9:52:82:b4:0b:06:98:2b:6c:4c:ee:41:
                    e4:1e:ec:43:8d:12:dd:bd:a7:46:ae:39:b9:7f:c9:
                    66:69:4c:5b:03:3f:8b:84:0e:1d:0a:58:cc:e3:33:
                    e2:ec:58:89:b6:ba:f3:e3:f1:41:52:57:d5:03:2d:
                    e0:71:a8:01:fe:c7:9f:91:30:94:3b:34:c7:6b:12:
                    62:b7:6e:2c:86:b7:e6:e0:de:6b:ee:c7:f4:08:04:
                    af:1c:b1:a9:22:65:58:d1:30:ff:96:ef:f4:60:96:
                    40:e0:b6:e6:a4:74:72:d8:19:d8:dd:a9:fc:67:c3:
                    90:c8:01:8b:36:77:4d:19:39:60:36:71:a3:c1:c9:
                    94:c6:ac:5a:9e:75:d0:78:e3:7e:0f:2b:22:51:aa:
                    7b:91:0f:42:39:a9:29:02:61:7e:ad:61:d1:cb:0e:
                    96:4c:8f:d8:a9:93:52:87:22:84:8f:61:0b:c1:13:
                    2b:3c:aa:c6:91:53:ec:07:c7:ad:24:25:29:82:38:
                    1b:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:23:9D:A3:E6:15:AB:CA:CB:E6:D8:21:99:D1:C3:ED:0E:23:1F:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/4bc52f84-507c-3c99-90e8-31eb13ab1436.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.174.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:d4:e1:52:1e:79:3a:35:00:8d:a9:2d:c3:3b:e6:31:8e:18:
         05:11:0b:67:8d:12:36:cb:dd:f7:24:57:1d:c3:4c:39:df:47:
         87:19:2e:f4:97:38:00:07:dd:e0:63:5a:db:19:43:e0:98:33:
         4f:cc:1e:5b:40:ec:57:4f:36:4a:5b:04:cd:f1:98:d6:01:68:
         47:d5:30:78:05:ac:96:93:f2:46:ea:f2:84:39:58:e4:9b:74:
         3d:7c:cb:08:fd:db:4a:29:cc:e7:ab:70:c2:76:a9:a6:ab:bd:
         12:38:35:3a:3f:fb:3c:98:bb:f5:b3:1a:3a:07:04:d3:23:3e:
         2d:e1:98:1b:4b:75:16:9e:28:b8:b5:87:8a:db:c7:b9:58:a5:
         64:0e:dc:ad:dc:d0:e3:4a:c8:2d:55:2f:9b:b0:d0:71:9a:cb:
         71:24:18:ef:4d:ed:96:71:bb:13:82:57:60:21:fe:e8:6f:bb:
         6e:11:f0:c4:44:41:55:ba:68:20:01:c7:89:17:4d:41:c6:d7:
         4c:af:41:10:39:06:6f:08:46:ca:ea:e5:a4:86:10:83:49:5c:
         9d:96:e4:5f:ef:bc:f3:70:65:16:dd:1f:b3:e6:e9:ef:cd:6f:
         ac:13:1d:a3:0d:77:25:6e:03:99:7e:06:b0:fa:e3:80:c3:fb:
         37:b0:a6:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 10 08:31:09 2024 by rpki-client on console-ams.rpki-client.org