Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/71430e18-9975-31d7-ac95-b56ddb52370b.roa
File:                     71430e18-9975-31d7-ac95-b56ddb52370b.roa (raw, json)
Hash identifier:          pCsFm32sbn+0gNBkYWxtwl8v8Ft3AAizl46rQkNhWc4=
Subject key identifier:   0F:C1:09:50:15:22:0D:E5:96:66:73:15:91:33:85:EF:0B:D8:21:88
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F432858418DA6BF45252502A79EA28B80
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/71430e18-9975-31d7-ac95-b56ddb52370b.roa
Signing time:             Tue 13 Dec 2022 18:27:09 +0000
ROA not before:           Tue 13 Dec 2022 18:27:09 +0000
ROA not after:            Thu 17 Jul 2025 04:00:00 +0000
asID:                     834
IP address blocks:        216.10.9.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:8d:a6:bf:45:25:25:02:a7:9e:a2:8b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Dec 13 18:27:09 2022 GMT
            Not After : Jul 17 04:00:00 2025 GMT
        Subject: CN=4d51e5f2-62bf-4ff9-a593-3db48aacea30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:40:47:ed:68:af:6f:e1:57:12:2c:ce:ab:c6:
                    60:f6:57:9f:c1:d5:e9:2a:02:18:17:c3:a2:64:52:
                    3e:cf:4b:ad:b9:7a:df:9e:50:64:99:44:36:ac:7c:
                    79:bf:96:70:58:4f:12:9f:b2:ae:7b:46:f8:7d:84:
                    20:42:74:a1:82:c0:c3:83:a5:c8:68:ac:f6:ff:be:
                    42:94:9f:2e:70:da:64:d9:13:28:66:d7:f9:c9:7c:
                    49:7f:d5:42:f1:bc:9f:8c:ef:22:71:3d:fb:c2:ea:
                    11:57:c3:cb:49:a1:81:45:b0:f8:af:f3:87:82:49:
                    ab:58:9c:d1:18:0e:ab:f2:2d:10:c2:12:6e:7d:ec:
                    64:46:e9:ee:4f:55:ec:b9:77:b0:20:d8:28:f2:b1:
                    63:67:c0:a7:38:dc:58:e6:6f:7e:32:6c:68:37:23:
                    ef:a0:fd:49:0f:4b:26:e5:99:c1:a5:ab:0a:8c:71:
                    f8:3b:fb:b5:04:2a:38:39:69:84:2c:5e:e2:1d:cb:
                    60:4e:fc:7c:46:fd:46:f2:b5:0c:a4:04:b1:68:ba:
                    a5:6b:74:67:18:f9:03:bf:d7:67:12:ea:01:d4:47:
                    0b:3d:ab:ae:ad:c2:94:ad:6b:ae:5f:bc:96:32:a6:
                    77:a6:ed:14:6b:21:26:3f:3a:2e:9f:1d:2c:32:19:
                    7e:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:C1:09:50:15:22:0D:E5:96:66:73:15:91:33:85:EF:0B:D8:21:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/71430e18-9975-31d7-ac95-b56ddb52370b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.10.9.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:cf:80:ee:f7:7f:09:c4:93:c8:20:66:c9:b6:74:1a:d7:5b:
         4e:78:6d:99:43:67:f0:11:71:d3:19:48:36:a6:67:ab:3e:f0:
         8b:2f:8e:50:a8:e6:6c:9b:16:ea:ef:79:4f:9d:82:39:54:64:
         ec:50:0e:4e:59:f6:f6:77:88:51:3b:fd:df:5c:ec:80:ad:a0:
         76:73:8e:10:85:ca:83:18:e1:f5:07:9b:69:4e:09:fd:2e:06:
         19:0b:e7:45:0f:90:70:e1:ee:86:2f:5b:58:c5:43:8f:0f:e9:
         cd:30:da:90:74:d2:f9:63:f5:aa:8f:64:01:c6:f9:e9:0f:4e:
         91:27:2b:1a:bb:63:3a:a4:e5:17:a4:96:ee:be:91:a9:79:09:
         78:03:e6:57:1d:69:4a:23:d8:2a:63:d3:6c:f0:a6:1e:0a:90:
         f7:8e:83:46:57:60:d9:a3:69:94:d8:b9:7f:2e:d7:82:a0:e4:
         66:fd:14:b1:6c:c9:3f:a5:2a:87:4c:33:3b:d6:de:5f:e3:63:
         88:b1:32:ed:03:dc:e3:54:16:8c:49:5b:78:17:85:10:6c:d5:
         af:08:75:2f:06:63:dc:17:bb:de:4c:7a:68:bc:69:87:03:35:
         38:d4:3f:88:12:03:0f:bf:78:ed:c6:f2:92:d4:d8:14:50:f5:
         5f:a1:7f:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:26 2023 by rpki-client on console-fra.rpki-client.org