Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/196f1566-7adb-3d1e-9b25-cc0d5ef53b20.roa
File:                     196f1566-7adb-3d1e-9b25-cc0d5ef53b20.roa (raw, json)
Hash identifier:          nw8dKMv6+JH7QMC6KhBuV//oQCaMc8oROA7NZi9Febo=
Subject key identifier:   64:A3:04:B5:20:B6:45:CD:84:4C:B2:D0:C3:02:17:9D:F1:D1:1B:3A
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584289482551F777DEF650519F00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/196f1566-7adb-3d1e-9b25-cc0d5ef53b20.roa
Signing time:             Wed 12 Jul 2023 12:00:00 +0000
ROA not before:           Wed 12 Jul 2023 12:00:00 +0000
ROA not after:            Fri 16 Aug 2024 04:00:00 +0000
asID:                     701
IP address blocks:        65.216.208.0/21 maxlen: 21

Validation:               Failed, certificate revoked on Tue 05 Dec 2023 19:23:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:89:48:25:51:f7:77:de:f6:50:51:9f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 12 12:00:00 2023 GMT
            Not After : Aug 16 04:00:00 2024 GMT
        Subject: CN=e68868ba-5003-4b18-a773-1fe8a405adde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:e2:f3:7f:b3:58:b6:84:71:0b:27:ce:4f:83:
                    11:eb:7d:72:df:d4:3d:20:31:ba:59:4b:69:b2:62:
                    d1:0d:0e:92:f0:a0:99:bf:95:fa:b3:db:81:91:24:
                    f3:cb:ef:f3:22:58:05:aa:60:fa:0e:74:d6:99:cf:
                    82:ff:4c:db:9a:9a:85:c1:f9:16:ea:85:f3:28:42:
                    b7:81:a5:ba:0f:eb:c5:f4:85:c2:c4:88:ad:0b:0a:
                    38:96:23:88:c8:86:1b:bc:77:75:4c:ba:d0:64:d3:
                    34:87:7b:4b:ba:2f:28:58:2e:18:30:94:1f:3c:84:
                    c9:bb:fd:58:51:ac:e4:18:6a:43:a0:85:d1:30:0b:
                    98:61:c3:d6:be:d2:9c:6f:b5:a6:c3:20:8e:e8:4c:
                    ef:ee:6f:13:44:4d:7d:bd:1d:56:fa:d7:db:5f:07:
                    fe:31:60:e6:a3:db:1f:21:07:cb:8d:1a:ec:b0:ac:
                    c2:73:34:a9:0b:f2:66:1d:6c:90:d1:1a:03:36:2e:
                    85:15:9b:fe:e9:9b:ea:cc:71:44:62:5f:2c:05:c8:
                    7b:7f:8d:c7:a5:26:23:3b:c1:82:58:51:46:37:cc:
                    f6:83:2a:d6:d7:e9:28:ab:86:36:be:9f:39:99:bc:
                    6e:1e:21:b2:1e:5c:ae:0f:5b:67:43:b3:1b:5d:c9:
                    bd:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:A3:04:B5:20:B6:45:CD:84:4C:B2:D0:C3:02:17:9D:F1:D1:1B:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/196f1566-7adb-3d1e-9b25-cc0d5ef53b20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.216.208.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:92:b3:99:69:d7:2c:6e:13:03:a3:28:3a:d7:21:f3:c8:bc:
         ff:c9:fc:bd:b7:77:e7:8e:a6:b0:af:13:f3:07:9a:ba:c1:ee:
         20:de:bb:75:b8:b7:41:45:02:64:68:0b:16:89:25:08:80:c5:
         e1:0a:d3:21:ab:19:3e:d6:c5:c5:49:e7:e8:c7:ab:b2:bb:b5:
         6a:46:4b:cd:1b:5b:f4:40:56:c5:be:db:39:66:6a:08:52:8e:
         5e:43:15:21:ac:32:04:34:a5:47:ee:d2:df:4c:a5:40:61:d8:
         cf:d1:63:8c:42:59:13:0b:68:3b:78:2e:2c:26:52:23:d5:95:
         ea:02:72:7f:c1:02:07:3e:db:e3:2d:eb:20:0a:e3:04:39:00:
         54:20:84:6d:40:2d:2f:df:7e:60:82:e1:e1:4a:d1:a7:9c:a7:
         ca:72:bd:66:5f:e4:b0:cb:57:5c:a8:8c:af:d7:1c:cd:ae:40:
         61:36:48:e3:52:dc:24:7c:14:ef:fb:5a:03:22:07:6f:b7:42:
         40:fe:42:10:a7:4f:2b:a3:94:9d:b6:2c:0d:11:11:5e:71:25:
         69:22:3a:37:10:45:cf:04:8d:62:69:88:15:65:20:3f:f5:4c:
         2e:38:ee:f7:9f:aa:1b:79:2d:61:c6:dd:b8:49:d7:29:1a:73:
         cb:27:f5:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:40 2024 by rpki-client on console-fra.rpki-client.org