Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/cc0b6504-a0d3-33a7-8580-f71d41d955dc.roa
File:                     cc0b6504-a0d3-33a7-8580-f71d41d955dc.roa (raw, json)
Hash identifier:          BGLF74pcwsleEsFqFn4riJ3/NBGu7RtwWfk3GIJ/baA=
Subject key identifier:   4C:98:09:88:4A:EC:98:2D:E0:6B:23:68:E9:5B:71:00:5B:9A:1C:3F
Certificate issuer:       /CN=871cb6ad-6cd6-4581-a5ac-5a6fd74495c9
Certificate serial:       010D0C9F43285841EA8CCE443199151198E4DB00
Authority key identifier: 9E:D0:65:47:67:74:B0:6B:83:3F:1C:FE:74:F5:0D:F4:4B:85:97:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/cc0b6504-a0d3-33a7-8580-f71d41d955dc.roa
Signing time:             Wed 17 May 2023 23:01:11 +0000
ROA not before:           Wed 17 May 2023 23:01:11 +0000
ROA not after:            Tue 15 Aug 2023 23:01:11 +0000
asID:                     14618
IP address blocks:        216.24.224.0/20 maxlen: 20

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:ea:8c:ce:44:31:99:15:11:98:e4:db:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871cb6ad-6cd6-4581-a5ac-5a6fd74495c9
        Validity
            Not Before: May 17 23:01:11 2023 GMT
            Not After : Aug 15 23:01:11 2023 GMT
        Subject: CN=914f3b45-c789-4549-a031-943a5d8d9a26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:7f:0e:4b:d3:13:97:54:06:53:19:d5:2c:37:
                    8a:35:58:a6:9b:93:2b:c3:d9:4f:5d:da:d3:cb:73:
                    68:2f:21:ce:b3:82:48:52:8b:3d:a9:ce:48:c0:60:
                    dd:a8:62:91:b8:76:66:f3:43:8e:7e:0d:2a:00:d3:
                    de:20:86:04:55:b0:fa:22:c3:96:05:58:06:ab:cc:
                    b0:a0:50:94:90:6c:86:28:30:bc:b3:cf:17:13:1a:
                    75:cd:a6:19:38:1f:b0:ef:dd:db:07:05:d0:47:44:
                    41:e6:07:29:3f:21:28:2a:d2:8d:d0:24:54:fd:d7:
                    c1:c4:4c:4c:4e:e1:97:88:94:8d:9e:f6:a5:d7:73:
                    0c:66:70:64:f8:1a:bf:f0:d0:41:33:d7:7c:f8:cd:
                    d0:64:bd:f1:0a:38:71:ce:b3:3b:8b:ea:41:18:02:
                    05:8b:d2:e9:06:24:00:94:0a:81:ad:19:bc:8f:9d:
                    e6:72:6b:a7:4d:c3:90:53:b5:93:de:ab:70:32:21:
                    2e:91:21:14:ef:6d:98:19:a6:7e:6d:41:37:67:33:
                    83:d5:9b:a9:1a:be:1b:cb:e0:8e:2a:e5:2d:47:d2:
                    e4:f0:8c:9c:44:b7:e1:cb:71:4e:f2:5e:e1:4a:da:
                    0a:cd:54:bd:db:92:1c:b4:40:db:16:16:89:f2:2c:
                    44:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:98:09:88:4A:EC:98:2D:E0:6B:23:68:E9:5B:71:00:5B:9A:1C:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/cc0b6504-a0d3-33a7-8580-f71d41d955dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.crl

            X509v3 Authority Key Identifier:
                keyid:9E:D0:65:47:67:74:B0:6B:83:3F:1C:FE:74:F5:0D:F4:4B:85:97:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/871cb6ad-6cd6-4581-a5ac-5a6fd74495c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.24.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c7:9c:98:ea:96:89:21:ad:78:36:f1:49:a2:35:90:59:e4:dd:
         41:72:50:73:be:6f:9f:0b:da:24:64:3a:08:d5:5e:27:dc:c2:
         59:e7:fb:92:ac:29:75:d6:27:49:03:af:4b:20:85:6c:3b:d7:
         0d:5c:36:cf:29:7f:4f:48:59:71:e2:0c:29:31:10:69:8a:35:
         65:42:f5:2d:79:97:95:84:96:5b:f8:b1:83:65:c7:6c:90:30:
         1f:ae:2b:ff:dd:d6:71:c4:a4:68:21:b1:7f:9f:40:c5:88:9b:
         1d:72:d5:4a:f0:ad:d3:17:57:2a:5a:e3:85:42:17:b2:ed:fb:
         e0:55:95:3a:ad:15:ab:f2:9b:45:b1:a2:61:d2:f9:8b:d9:5b:
         d0:06:85:84:16:81:76:b9:10:d1:10:8f:8a:e0:c0:1f:11:5e:
         74:22:2a:23:fd:0a:91:86:81:65:04:54:41:82:a2:be:22:dc:
         49:ad:3d:6a:bf:bb:6a:22:fe:93:05:f1:65:65:21:01:a8:0a:
         50:c4:c0:b2:b6:9d:86:9f:3a:1d:18:e4:93:a9:0e:1a:90:c6:
         74:83:8b:a1:2a:37:17:81:3f:86:bf:6a:82:9a:93:9f:cd:e6:
         21:ed:74:4b:cc:02:38:21:35:38:6a:98:5b:ff:1a:87:56:d2:
         da:c5:5e:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:50 2023 by rpki-client on console-fra.rpki-client.org