Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/06e596cc-51ea-3732-9a0d-9ee7bb48af99.roa
File:                     06e596cc-51ea-3732-9a0d-9ee7bb48af99.roa (raw, json)
Hash identifier:          9+et7p23OaYe2G+N4RVYDvubvN4uNKmXVSIXDAOI4+0=
Subject key identifier:   4D:0B:BA:F1:0A:58:BD:96:8A:69:2B:92:E7:2F:37:E6:91:31:76:57
Certificate issuer:       /CN=e39cb960-2394-4b22-b9f1-3ac5566bc72a
Certificate serial:       010D0C9F432858447583A901456B92E19867DB00
Authority key identifier: C7:98:AE:93:EE:6D:6B:ED:A2:5D:9B:70:06:F1:DD:45:39:D7:1F:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/06e596cc-51ea-3732-9a0d-9ee7bb48af99.roa
Signing time:             Sat 06 Jan 2024 03:14:00 +0000
ROA not before:           Sat 06 Jan 2024 03:14:00 +0000
ROA not after:            Fri 05 Apr 2024 02:14:00 +0000
asID:                     18914
IP address blocks:        206.168.14.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Tue 23 Jan 2024 21:21:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:75:83:a9:01:45:6b:92:e1:98:67:db:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e39cb960-2394-4b22-b9f1-3ac5566bc72a
        Validity
            Not Before: Jan  6 03:14:00 2024 GMT
            Not After : Apr  5 02:14:00 2024 GMT
        Subject: CN=28ef34e5-b139-4219-bec4-32e92f4dbf8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:17:a8:16:42:44:0b:df:df:aa:4b:ff:50:82:
                    e6:77:19:ab:d5:e2:33:cf:8d:a8:e7:5e:28:7a:69:
                    e3:a6:3b:a4:6c:74:6b:b7:dc:2a:ef:53:a8:b3:5d:
                    57:f6:c7:35:cf:bf:ba:87:d2:65:9b:23:c5:3b:f0:
                    28:03:fc:ae:da:61:8a:cc:e3:d2:5c:3e:e9:c0:e1:
                    46:a0:42:98:bd:44:16:10:2e:e0:ca:74:3a:16:b4:
                    2f:4d:d1:cc:23:5d:ff:04:18:78:3e:de:97:dc:83:
                    fe:71:84:6c:a1:a2:50:a4:08:ad:be:c8:55:0f:3e:
                    87:81:be:3e:5e:50:d4:88:af:f8:22:7a:31:2a:23:
                    ac:05:11:f3:4d:40:8f:97:a5:f9:bc:34:28:36:fc:
                    98:c6:55:67:99:8a:e5:a0:19:0a:b5:f1:5b:d7:64:
                    8a:55:1b:24:42:a7:c8:a7:23:94:68:54:1b:9d:3f:
                    56:30:8d:77:39:b1:c4:fa:fb:3c:2b:f7:18:40:77:
                    32:9e:95:21:ef:71:d3:19:ca:f3:14:77:c1:7f:c0:
                    8b:19:16:27:01:79:6f:84:94:f2:fd:32:6a:91:c1:
                    63:90:fa:79:43:65:cd:b3:07:cf:9a:4d:03:b9:30:
                    53:ae:e8:99:c6:c4:81:d7:15:d8:5f:44:d6:b1:bd:
                    e3:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:0B:BA:F1:0A:58:BD:96:8A:69:2B:92:E7:2F:37:E6:91:31:76:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/06e596cc-51ea-3732-9a0d-9ee7bb48af99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.crl

            X509v3 Authority Key Identifier:
                keyid:C7:98:AE:93:EE:6D:6B:ED:A2:5D:9B:70:06:F1:DD:45:39:D7:1F:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.168.14.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:29:74:16:fc:83:d5:a0:6e:bf:0b:a6:4f:91:c2:97:ef:6d:
         5c:1a:12:03:00:e5:e1:8f:31:94:ff:5f:e4:37:35:5a:f1:16:
         4d:2d:15:9e:d9:ed:df:fd:14:21:cf:18:6a:0a:d3:cb:4f:7f:
         41:42:58:f4:6a:42:dc:8c:a6:cd:6a:f2:86:fa:1a:a5:c4:0f:
         45:09:d1:bf:45:53:e1:18:db:0c:0d:7e:44:9e:29:50:f3:03:
         9a:b4:1b:e9:a7:96:75:47:42:75:f8:c5:a2:45:1a:d8:29:01:
         21:2b:8a:d1:0f:53:c3:26:7a:e4:b9:87:c9:37:7c:5a:58:81:
         c9:d1:5c:4c:db:ee:7e:75:12:d8:b2:ce:22:34:a2:f4:e8:6e:
         58:27:9c:cd:09:07:08:c0:f5:cc:5a:60:79:9f:81:71:2b:33:
         ec:f3:8c:02:ec:55:10:d3:f4:45:5b:00:ba:a5:2c:6e:99:7c:
         b1:31:55:5b:c4:22:45:14:25:ea:e0:1c:cc:17:74:8c:42:50:
         98:46:33:e9:a9:31:ad:64:3a:d0:82:7f:f4:04:e2:d2:8f:e9:
         40:8d:50:36:94:f3:14:69:cf:b9:86:6f:71:42:47:9c:68:b7:
         67:40:14:67:dc:3c:81:7c:f9:74:b8:63:67:21:28:92:ec:0b:
         58:bd:38:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 24 00:12:46 2024 by rpki-client on console-fra.rpki-client.org