Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/11c2f3fb-9446-37ae-8551-790863da9d52.roa
File:                     11c2f3fb-9446-37ae-8551-790863da9d52.roa (raw, json)
Hash identifier:          x3zVjDXfmy5mVhEeN2WKYVgXuFb06ozUTjlOkdWya1M=
Subject key identifier:   A9:E1:3F:E4:9C:D9:01:29:40:86:3F:91:A8:FF:60:7C:38:E1:66:0D
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328583F07150393E1831E15633C4EE4
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/11c2f3fb-9446-37ae-8551-790863da9d52.roa
Signing time:             Thu 25 Aug 2022 12:00:00 +0000
ROA not before:           Thu 25 Aug 2022 12:00:00 +0000
ROA not after:            Sun 24 Aug 2025 04:00:00 +0000
asID:                     701
IP address blocks:        209.119.20.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 03 Nov 2023 18:23:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:07:15:03:93:e1:83:1e:15:63:3c:4e:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 25 12:00:00 2022 GMT
            Not After : Aug 24 04:00:00 2025 GMT
        Subject: CN=890baf64-946e-4cc2-aad4-38dcaf8c0909
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:3a:cd:f7:9f:68:3c:11:ba:9c:50:cf:26:18:
                    66:4a:73:86:c7:92:ac:41:fc:41:99:0a:90:b1:c3:
                    33:d7:eb:6e:1a:59:bb:83:44:d0:ed:81:8e:09:fd:
                    66:4a:28:81:73:74:90:9e:61:26:5b:69:20:00:60:
                    94:57:cf:38:0f:58:8d:d6:08:c3:e0:e4:45:59:7a:
                    7c:cb:64:f9:38:77:76:38:8a:50:ed:72:79:4d:2a:
                    62:61:83:d6:a0:2d:8d:eb:e8:6c:8c:a0:d0:6b:96:
                    d2:5f:66:7f:26:d8:68:90:c0:9c:b8:9e:ce:34:13:
                    34:63:02:e4:37:31:2c:5b:4d:cb:10:e6:e9:c8:78:
                    a0:63:ea:0d:93:98:61:65:90:36:6f:1a:ea:ed:6e:
                    56:dd:7a:ee:73:8c:4f:30:ff:70:c1:ce:06:65:e9:
                    f3:f0:e4:92:eb:c8:4f:c1:30:94:a6:0f:0b:d5:22:
                    ea:6d:56:68:9c:1b:06:a9:54:db:27:e8:d5:bb:df:
                    9a:87:f4:1a:e5:a8:54:9f:56:f7:17:05:51:d7:f6:
                    b0:ff:c1:7c:a2:2b:41:19:76:d2:cf:b9:b1:f6:9c:
                    6a:75:d4:5e:cb:78:59:ba:c0:e7:b2:ce:a3:22:27:
                    a9:ea:da:a1:8f:2d:dc:c8:dc:c7:c1:46:97:75:f3:
                    8c:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:E1:3F:E4:9C:D9:01:29:40:86:3F:91:A8:FF:60:7C:38:E1:66:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/11c2f3fb-9446-37ae-8551-790863da9d52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.119.20.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:fd:55:14:bf:31:78:f9:ad:17:c8:34:1a:27:ad:81:59:ba:
         19:bc:bf:27:6f:a7:1e:b3:a9:77:94:ba:22:3d:15:9a:43:c0:
         1f:33:28:cc:40:70:0d:7e:ad:48:88:bf:95:53:23:e4:d7:d0:
         7b:5c:2b:0c:92:82:f9:84:ad:fc:62:b4:19:75:ab:76:2e:7c:
         fd:85:90:8c:75:95:b1:f9:71:d6:84:88:42:28:3d:7d:8b:49:
         a6:15:fd:78:67:56:92:7d:30:d5:1f:ae:00:1a:48:93:b4:67:
         ee:52:82:40:ca:f0:15:da:ff:93:26:ea:1c:25:97:c7:1c:56:
         ac:45:c0:d4:56:10:12:a0:44:f1:d9:37:eb:56:64:72:3a:4c:
         5b:a8:9a:23:78:9d:7a:ed:bd:11:de:2e:71:c3:f3:a6:b8:41:
         6c:2f:f9:b1:38:41:b2:b8:47:92:a5:51:ab:ec:6a:8f:1c:57:
         84:e4:57:cc:97:dc:f7:91:5f:85:94:e5:b6:4e:dd:08:d3:63:
         77:aa:be:0e:6c:b7:b3:0b:80:a6:a8:0e:40:03:89:e9:a9:79:
         f9:1a:ac:6f:be:5d:7a:23:fe:36:d5:c9:62:d9:da:03:0e:59:
         1b:ca:d1:7b:63:f3:72:7d:a9:73:17:5c:4d:93:0e:84:6f:1c:
         f1:b3:e8:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:40 2024 by rpki-client on console-fra.rpki-client.org