Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/b003583e-d71b-32f5-ac55-e0f391c4a3d0.roa
File:                     b003583e-d71b-32f5-ac55-e0f391c4a3d0.roa (raw, json)
Hash identifier:          jrI9xg1TvaCT1qjjWZO0WXXIGjZj8ROwy1BV64GvW/o=
Subject key identifier:   E9:99:96:19:5E:FE:66:97:69:E6:5E:EA:26:72:DC:79:DC:17:B6:D3
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F432858447F97077B3451CCBA835DA300
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/b003583e-d71b-32f5-ac55-e0f391c4a3d0.roa
Signing time:             Tue 09 Jan 2024 17:51:06 +0000
ROA not before:           Tue 09 Jan 2024 17:51:06 +0000
ROA not after:            Mon 08 Apr 2024 16:51:06 +0000
asID:                     14618
IP address blocks:        216.74.106.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 10 Mar 2024 06:06:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:7f:97:07:7b:34:51:cc:ba:83:5d:a3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jan  9 17:51:06 2024 GMT
            Not After : Apr  8 16:51:06 2024 GMT
        Subject: CN=caa7bf8d-b9d8-4c11-ac50-981ed2169fff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:fe:db:76:58:3a:2c:a9:7c:98:a2:f6:45:cf:
                    a9:00:08:3f:b2:af:45:39:37:75:ab:24:56:a8:16:
                    44:16:1d:09:c3:51:31:f8:bf:b5:f9:de:fe:06:ee:
                    be:5f:c0:d7:ca:2d:ee:8b:18:b8:e0:b9:af:f6:dc:
                    e6:43:2a:e4:78:6f:9d:33:bf:0c:4a:8c:d8:60:0b:
                    90:cb:68:86:3a:2a:ee:31:fd:77:af:17:35:1d:02:
                    51:7e:b7:84:32:56:8c:68:ac:39:c6:36:40:2b:8f:
                    45:b1:0b:30:b8:11:5d:3c:1e:59:f5:6b:ac:f5:af:
                    3e:6d:9a:9d:c0:cf:0b:16:a1:73:fa:3d:06:f5:21:
                    39:19:94:f2:39:e3:63:0e:a6:98:62:75:17:24:98:
                    26:0a:56:58:3d:b7:3f:6b:71:55:8c:06:32:15:c1:
                    36:2a:87:66:5a:e6:7e:cf:80:07:63:59:71:d9:c6:
                    e3:e9:1d:bd:01:b3:8f:89:23:29:00:2d:6c:86:e5:
                    c2:c6:73:f2:fb:0e:d2:37:dc:e3:72:4a:12:73:8c:
                    dc:e0:03:35:d5:69:d4:9e:b5:db:f1:9b:e7:43:7c:
                    7e:b8:9f:fa:66:cd:84:e4:d5:da:1a:ad:b5:96:a7:
                    6a:12:04:a7:6d:7f:9b:96:09:c8:87:e6:6f:89:85:
                    1e:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:99:96:19:5E:FE:66:97:69:E6:5E:EA:26:72:DC:79:DC:17:B6:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/b003583e-d71b-32f5-ac55-e0f391c4a3d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.74.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:69:95:94:8f:f0:3f:8e:81:a4:4a:09:c1:21:ca:42:ab:3e:
         a4:87:d1:15:1d:79:54:aa:90:68:a0:d7:58:4b:0f:80:94:67:
         69:b9:9a:7e:94:bb:5b:8e:8e:6b:7c:a2:82:4a:06:30:f3:d4:
         57:46:7f:04:c5:bf:0b:a8:f0:f9:a3:fe:94:a7:09:b6:4a:9f:
         c2:63:57:48:cb:7f:6c:de:66:d9:46:5c:81:7c:40:4f:f0:7b:
         01:39:c8:a0:a8:f4:5f:95:cd:4d:2d:ad:6a:df:ca:65:49:d9:
         a4:b9:68:b2:61:41:e5:f5:25:f1:47:44:fb:71:97:ea:f5:0a:
         0a:5d:ac:74:b2:cc:c1:be:8a:a7:6a:1e:d0:29:0f:a5:58:4a:
         57:ab:dd:1a:9c:bb:1c:67:13:e5:83:ee:6c:d3:7f:cb:a0:7b:
         bc:7e:90:b6:08:3e:3b:96:1e:88:e6:90:fb:fd:10:8f:17:de:
         6f:58:2a:7a:eb:74:56:b4:37:00:79:e8:e0:15:50:91:00:01:
         1d:30:51:8d:bc:67:1b:27:da:9b:04:6e:e4:43:6d:09:a6:6d:
         bd:25:23:6a:9c:08:91:a7:50:9c:9d:26:5d:1e:90:52:d4:b0:
         5f:0b:6e:83:5f:94:48:80:00:79:7d:9f:ed:ae:48:73:2c:c8:
         d7:a4:9d:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 10 08:31:09 2024 by rpki-client on console-ams.rpki-client.org