Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/76103b58-0161-43ca-b4aa-6d03656c905c/9b433a6c-e1e6-3cc5-a19a-c1e9972f44f9.roa
File:                     9b433a6c-e1e6-3cc5-a19a-c1e9972f44f9.roa (raw, json)
Hash identifier:          wb7IG2Jg+20a7xP08uTOH0yGn/+4yJ3hr1tdKqOxX5g=
Subject key identifier:   3D:BE:0B:50:DB:CA:1B:42:E6:92:12:67:72:F3:CF:99:1B:EB:AE:6E
Certificate issuer:       /CN=76103b58-0161-43ca-b4aa-6d03656c905c
Certificate serial:       010D0C9F432858440D4AEADC47FBE607C58CCD80
Authority key identifier: 91:6A:6B:36:DB:3C:03:48:F9:E4:9B:6F:CF:4B:2B:D7:F9:B3:E6:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/76103b58-0161-43ca-b4aa-6d03656c905c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/76103b58-0161-43ca-b4aa-6d03656c905c/9b433a6c-e1e6-3cc5-a19a-c1e9972f44f9.roa
Signing time:             Wed 29 Nov 2023 19:15:36 +0000
ROA not before:           Wed 29 Nov 2023 19:15:36 +0000
ROA not after:            Tue 27 Feb 2024 19:15:36 +0000
asID:                     33618
IP address blocks:        206.55.208.0/24 maxlen: 24
                          206.55.209.0/24 maxlen: 24
                          206.55.210.0/24 maxlen: 24
                          206.55.214.0/24 maxlen: 24
                          206.55.215.0/24 maxlen: 24
                          206.55.216.0/24 maxlen: 24
                          206.55.218.0/24 maxlen: 24
                          206.55.220.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:0d:4a:ea:dc:47:fb:e6:07:c5:8c:cd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76103b58-0161-43ca-b4aa-6d03656c905c
        Validity
            Not Before: Nov 29 19:15:36 2023 GMT
            Not After : Feb 27 19:15:36 2024 GMT
        Subject: CN=5c2800b0-a564-4725-b20c-9070adb2e66b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:8a:1e:3f:5d:20:72:41:20:39:2f:bb:5f:06:
                    02:cc:58:7d:ee:36:97:d9:bc:69:88:e1:07:f8:8c:
                    31:8a:54:2d:69:39:25:84:bb:b0:71:a7:9c:5e:54:
                    ee:36:23:da:5b:8f:20:c0:a7:06:e4:48:b9:2f:16:
                    10:6a:c5:15:84:f7:9b:e2:79:10:65:1b:0d:51:7e:
                    ee:ca:b1:76:42:9a:cc:2f:2c:eb:bc:29:9f:ab:b7:
                    42:61:28:23:d3:a4:4b:44:f0:a0:9b:26:c9:b0:f7:
                    e5:44:45:26:49:2b:ff:5b:1d:55:59:d8:0e:01:41:
                    1c:70:13:11:d5:59:d6:37:05:6e:ba:7b:92:0e:9b:
                    e3:a5:fb:38:4d:92:c0:a5:af:60:56:a1:b8:93:16:
                    2c:32:2d:36:6e:7a:46:58:6f:7d:89:b9:c1:a8:88:
                    b9:3f:85:bb:67:89:ee:7a:98:60:43:88:72:c2:5a:
                    00:18:61:8b:d7:51:63:3d:ef:fb:e3:0e:c1:1e:84:
                    2c:08:92:07:a8:fa:df:59:e1:f0:44:27:20:c9:40:
                    6e:da:ca:7f:89:e5:9c:78:63:c7:2d:43:22:c6:5d:
                    4f:f6:0d:13:2f:07:56:c7:e2:4b:a9:d9:50:f7:18:
                    00:60:20:20:e0:cb:74:ac:64:5c:4d:ad:2c:cc:56:
                    2e:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:BE:0B:50:DB:CA:1B:42:E6:92:12:67:72:F3:CF:99:1B:EB:AE:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/76103b58-0161-43ca-b4aa-6d03656c905c/9b433a6c-e1e6-3cc5-a19a-c1e9972f44f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/76103b58-0161-43ca-b4aa-6d03656c905c/76103b58-0161-43ca-b4aa-6d03656c905c.crl

            X509v3 Authority Key Identifier:
                keyid:91:6A:6B:36:DB:3C:03:48:F9:E4:9B:6F:CF:4B:2B:D7:F9:B3:E6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/76103b58-0161-43ca-b4aa-6d03656c905c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.55.208.0-206.55.210.255
                  206.55.214.0-206.55.216.255
                  206.55.218.0/24
                  206.55.220.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:f1:b2:11:36:9b:5b:fe:46:34:32:af:de:58:98:6e:9b:84:
         96:31:d1:a0:54:e3:30:ed:b3:ff:ee:e2:19:0c:99:b7:ac:ae:
         03:dc:98:df:bf:8c:60:c3:04:76:52:d0:49:21:bf:5e:75:99:
         b6:cf:14:be:14:c5:c7:58:04:91:95:fe:c3:11:37:56:2a:57:
         43:2c:87:10:b1:53:86:8c:23:71:61:ab:2b:f9:49:8d:5d:c0:
         0d:97:96:bd:69:bc:c8:64:9f:75:0d:da:cd:80:27:fb:27:94:
         01:4c:8c:6a:a0:66:2b:40:2d:53:ab:2d:7f:46:33:9d:53:6a:
         5c:11:eb:fc:70:65:a2:d4:ce:0d:e8:08:c5:71:c2:e0:45:19:
         a0:cb:3b:d4:9d:63:c3:19:cb:14:e4:e9:1f:dd:13:c6:96:f2:
         85:2a:97:ff:da:32:2b:19:cc:30:a4:2a:19:0e:96:89:3b:eb:
         fd:b8:82:74:89:e6:6d:0f:45:d0:00:1d:85:15:a5:06:59:85:
         43:1d:7f:89:41:72:1a:ac:a7:cd:6f:ac:20:d6:66:36:d4:e7:
         d4:c5:71:45:f5:79:d6:f7:66:e1:b3:71:a8:77:33:fa:77:23:
         b2:f3:4a:d5:1d:20:66:85:bf:f7:74:46:1d:ce:59:77:33:56:
         e6:bd:7a:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 29 20:28:21 2023 by rpki-client on console-ams.rpki-client.org