Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/b9e0f664-a440-3f39-8609-3678d040c8b9.roa
File:                     b9e0f664-a440-3f39-8609-3678d040c8b9.roa (raw, json)
Hash identifier:          ix69ouWSIREZ+CN8xODAC/pNHf3HbXBd5JcE4Pt2fhM=
Subject key identifier:   9A:24:1A:D6:13:B3:0D:EE:05:F7:DB:A1:3C:EF:4F:21:3F:AB:86:6A
Certificate issuer:       /CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
Certificate serial:       010D0C9F432858403D0F91AE21BA77AB12D338A2
Authority key identifier: F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/b9e0f664-a440-3f39-8609-3678d040c8b9.roa
Signing time:             Tue 09 Feb 2021 14:22:45 +0000
ROA not before:           Tue 09 Feb 2021 14:22:45 +0000
ROA not after:            Wed 19 Mar 2025 04:00:00 +0000
asID:                     207459
IP address blocks:        65.110.42.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:3d:0f:91:ae:21:ba:77:ab:12:d3:38:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
        Validity
            Not Before: Feb  9 14:22:45 2021 GMT
            Not After : Mar 19 04:00:00 2025 GMT
        Subject: CN=141a9c4a-7fab-4d1c-a194-d315c1b7b5b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:1a:55:74:cb:f5:3a:4e:c0:c6:d1:07:48:51:
                    43:3b:cc:2d:69:10:84:9a:79:bf:35:b7:07:8e:55:
                    c4:5c:6c:14:98:54:8a:fe:84:1e:38:b6:34:c7:87:
                    57:79:32:e1:8f:92:55:3c:9e:57:64:2b:49:bd:1d:
                    f6:7b:b4:65:65:55:cf:63:5e:2b:b0:42:94:45:d3:
                    db:45:48:4e:82:0a:bf:27:ed:a7:3f:a5:ce:cd:cd:
                    21:54:97:81:f5:ad:8c:83:97:be:b7:31:33:49:08:
                    5c:31:73:63:c6:ec:b0:37:8f:e3:ea:5c:05:52:3d:
                    f8:18:3a:3b:69:ee:3a:b5:9b:aa:a4:f2:b3:4b:ad:
                    0d:1f:be:d2:14:a7:0a:c0:b2:8f:0b:db:16:d7:94:
                    c8:3e:23:2a:87:e3:c3:ad:4a:37:fd:7f:41:a7:00:
                    df:2a:05:75:17:03:a2:83:43:6f:54:65:ae:bf:94:
                    dc:99:2b:c8:dc:73:29:3c:d6:f7:27:f0:3e:80:81:
                    20:ce:d5:88:1c:dc:a1:fd:92:3e:2c:ae:4e:64:89:
                    c6:db:9c:47:39:3b:77:4e:d1:e0:7e:0e:37:34:bb:
                    84:e6:ec:7b:13:49:59:ef:33:ad:98:70:92:de:60:
                    77:52:6a:f7:81:f1:70:7f:3a:ea:1a:1d:d2:ec:fc:
                    7f:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:24:1A:D6:13:B3:0D:EE:05:F7:DB:A1:3C:EF:4F:21:3F:AB:86:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/b9e0f664-a440-3f39-8609-3678d040c8b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl

            X509v3 Authority Key Identifier:
                keyid:F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.110.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:02:a5:c5:c0:c8:c5:3a:39:77:9c:a7:9b:61:d3:b7:25:fd:
         e5:3f:9b:4a:4f:5b:24:87:05:9d:0d:59:e9:c9:12:9f:57:69:
         59:91:94:5b:b5:70:6e:a3:73:d4:36:0a:c1:09:8f:de:47:42:
         d3:9f:ec:93:71:ce:30:9d:46:06:0c:40:67:87:a8:15:10:cb:
         6e:9f:70:fb:ef:3b:3f:4c:07:74:c9:96:dd:1d:86:8f:4f:19:
         b7:2c:0b:bf:f5:82:4c:c5:1b:d3:7b:a1:4f:47:98:51:33:a9:
         0c:2b:83:08:87:8f:78:67:e7:81:c8:0d:a8:6e:33:a2:a2:35:
         11:fb:cc:8d:06:99:03:88:44:1f:55:02:2f:c6:40:ea:d5:2f:
         04:8b:e1:ab:43:0c:9d:f9:22:28:56:17:de:0e:ca:70:89:37:
         1f:f5:c2:4f:16:c5:07:85:98:de:a7:51:77:5f:23:12:48:9d:
         e9:f2:56:3d:ad:aa:dc:85:dc:65:63:65:6b:6e:39:21:85:ee:
         0a:b0:d7:7d:a4:19:7a:01:9c:28:91:0d:3a:43:6c:79:69:9b:
         82:65:6f:34:c9:99:65:7c:16:f7:9d:c1:71:1f:67:bf:f5:44:
         e8:a2:cd:ce:90:0d:a3:37:81:1b:67:59:15:06:bf:b6:f3:70:
         a2:a4:f6:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:32 2023 by rpki-client on console-fra.rpki-client.org