Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/cf0386f7-085e-32e9-bdb9-6e6108867af8.roa
File:                     cf0386f7-085e-32e9-bdb9-6e6108867af8.roa (raw, json)
Hash identifier:          jgKta3Yt4oMvf1chwqozL0gg7kdccpWXdKsxmKOlP3k=
Subject key identifier:   1B:17:ED:C7:FF:9F:67:00:61:6D:65:63:D3:FB:48:AA:A2:52:5B:07
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328576D51CC73C042CFC172AF0ECEA6
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/cf0386f7-085e-32e9-bdb9-6e6108867af8.roa
Signing time:             Sat 13 Jun 2020 19:01:22 +0000
ROA not before:           Sat 13 Jun 2020 04:00:00 +0000
ROA not after:            Thu 07 Mar 2030 05:00:00 +0000
asID:                     8069
IP address blocks:        20.37.202.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Sun 16 Oct 2022 15:27:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:af:0e:ce:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Jun 13 04:00:00 2020 GMT
            Not After : Mar  7 05:00:00 2030 GMT
        Subject: CN=b0965aaa-5594-460e-bce1-5ac3be565d66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:5d:b1:a5:9a:d5:ab:1d:d4:d0:88:47:9d:6c:
                    e7:6b:91:7b:6d:16:cf:e2:81:13:03:af:56:0f:13:
                    51:c7:01:f8:48:03:f1:92:24:b9:99:af:97:6a:57:
                    d9:c7:2d:4e:84:7b:01:cc:54:b5:30:4f:36:54:b9:
                    3b:4e:54:e4:d0:e2:a3:5c:99:79:d9:74:bb:f8:d7:
                    59:33:77:32:a8:a6:bb:40:23:ef:ba:17:e6:fb:12:
                    d7:70:37:ba:d7:90:be:8e:de:2d:c3:3b:18:a9:6d:
                    f7:36:c5:8a:fc:c4:6c:bf:9a:5e:79:0b:cf:77:7f:
                    1a:a2:9d:2b:01:0c:f9:63:8c:4a:ec:26:55:a8:41:
                    64:aa:f0:f9:45:40:d6:af:8a:8e:12:8e:47:66:9b:
                    8c:6b:fe:80:02:cb:5c:0b:31:5f:b1:0c:05:c3:1d:
                    50:16:79:c2:1e:65:7f:b6:c6:bf:2f:7d:73:5b:55:
                    83:1c:e1:1d:75:f0:40:0c:a4:f3:fe:54:cf:95:bc:
                    c8:b1:37:a3:2b:63:6a:75:a4:b2:f8:76:b3:82:79:
                    8e:40:c6:cc:01:ed:78:d5:61:7a:86:8d:58:fb:e7:
                    4e:03:41:3f:f3:01:91:30:ce:a9:cb:7c:05:12:43:
                    e8:d2:1d:86:82:0b:81:8d:39:75:35:14:fe:5d:39:
                    a1:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:17:ED:C7:FF:9F:67:00:61:6D:65:63:D3:FB:48:AA:A2:52:5B:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/cf0386f7-085e-32e9-bdb9-6e6108867af8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.37.202.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:87:b0:9d:d3:fa:37:bb:da:9b:5f:55:fc:4f:d6:b6:f0:19:
         a6:a3:7d:d2:ce:96:55:75:d7:df:53:8c:5d:45:e3:40:9e:cd:
         4b:c8:6f:79:16:35:89:dd:22:55:e3:1d:9a:f0:d6:dd:dd:79:
         d9:01:0b:fe:70:76:ff:4b:7f:17:4b:0f:d4:10:03:ef:6a:c2:
         f9:bd:f8:a5:a9:af:09:e1:3f:c3:41:40:eb:0f:19:2d:d8:d0:
         80:ab:64:99:05:0f:c2:f2:62:73:78:33:ee:af:70:d7:02:52:
         5e:a2:a1:2a:cc:ed:02:9f:2b:4b:44:e3:97:76:9d:8a:68:31:
         ad:96:12:e4:f0:9f:43:a3:f6:f8:ca:0c:94:f6:b3:7f:02:d6:
         ae:b8:38:ec:9f:f5:da:f6:70:6e:47:57:57:50:e7:94:30:9e:
         0b:f9:98:55:14:27:f8:12:64:8c:fc:88:3a:14:19:e3:18:87:
         7b:8f:73:ff:34:8e:90:61:1e:fa:44:d0:4a:cc:1a:c1:fd:bb:
         e8:23:fd:b7:78:b8:23:22:ca:77:bd:2f:15:a6:38:3d:4f:ba:
         8e:fb:04:0f:d9:40:62:6e:e5:1c:bc:09:be:88:20:0c:68:41:
         bb:83:93:ed:2a:2d:6e:28:23:4c:52:1d:80:ad:ab:99:53:c1:
         bb:07:1a:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:40 2024 by rpki-client on console-fra.rpki-client.org