Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/181902a3-0588-34da-b774-584e701b18e3.roa
File:                     181902a3-0588-34da-b774-584e701b18e3.roa (raw, json)
Hash identifier:          UrV+RfKcuVSIuWSaw8UmD6P1ZZyWn8bVXm4U5fsCX3I=
Subject key identifier:   BF:D7:0F:1F:A4:DF:19:EE:39:9B:6A:A6:C1:40:32:67:39:C7:3A:71
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328576D51CC73C042CFC171E178C2A7
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/181902a3-0588-34da-b774-584e701b18e3.roa
Signing time:             Mon 04 May 2020 20:55:19 +0000
ROA not before:           Mon 04 May 2020 04:00:00 +0000
ROA not after:            Sun 04 May 2025 04:00:00 +0000
asID:                     6939
IP address blocks:        64.62.128.0/17 maxlen: 24

Validation:               Failed, certificate revoked on Sun 11 Feb 2024 22:32:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:71:e1:78:c2:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May  4 04:00:00 2020 GMT
            Not After : May  4 04:00:00 2025 GMT
        Subject: CN=0aec4399-4635-4df3-8ed9-2688c1015631
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:90:db:ca:69:2d:5c:78:9f:31:e8:07:b4:dd:
                    6f:1d:5b:e5:9e:75:ef:98:03:a4:54:1c:56:90:dd:
                    78:81:4c:61:80:52:0e:e2:9c:03:e1:fd:d0:3f:28:
                    08:9e:b0:2e:28:fb:49:08:92:37:f9:c5:4f:e0:b2:
                    b9:2f:79:07:d6:dd:87:e3:2a:df:8c:f1:f7:22:ff:
                    d9:db:2b:91:46:c0:c7:3c:12:a7:ce:7b:c9:e8:af:
                    99:1e:4c:01:e4:13:da:a4:0b:5b:8d:6a:dc:de:c6:
                    5c:75:bc:a2:ed:7d:f5:ab:cf:3d:91:49:0d:50:43:
                    1a:fe:c4:ca:d1:5b:64:89:85:0f:7f:67:f2:81:db:
                    14:eb:dc:77:3c:3f:35:df:c9:5b:5f:1c:3a:f0:7d:
                    42:2b:dd:8b:71:f0:74:11:97:80:c5:18:cd:2f:cc:
                    64:68:f4:59:18:bb:40:89:95:33:6a:38:b9:90:fb:
                    8d:52:03:e1:10:85:55:64:cd:a2:5c:57:cd:29:42:
                    18:be:a2:86:a8:42:2a:e2:07:43:55:c5:8d:cb:e6:
                    33:f8:ff:44:97:13:91:7b:c6:54:01:a9:63:01:5b:
                    1b:13:72:90:ed:4f:fc:d2:45:dc:d4:8c:86:d9:04:
                    9f:15:31:33:02:20:ac:30:1d:b1:6e:02:b0:ff:4c:
                    68:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:D7:0F:1F:A4:DF:19:EE:39:9B:6A:A6:C1:40:32:67:39:C7:3A:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/181902a3-0588-34da-b774-584e701b18e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.62.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:8b:48:60:5a:6d:d1:72:2f:20:5b:eb:b4:f0:7c:1a:7b:53:
         29:aa:cb:80:4c:1d:f8:96:09:6f:a5:03:9e:7d:37:0e:52:d8:
         99:a0:1e:65:7f:27:00:41:48:64:ce:6d:c2:df:33:fd:16:21:
         0e:fa:fe:aa:62:a9:f3:51:78:f1:50:39:60:29:04:e5:b5:6c:
         ab:13:0d:c2:d6:9e:b8:c2:6f:ff:5e:ea:6a:57:6f:b8:f2:a5:
         88:9c:7f:c9:8d:28:ba:b6:99:e8:6d:5d:96:de:9c:4d:ac:c8:
         b9:5f:20:45:2f:39:c0:13:0a:00:96:0d:88:56:26:2a:9d:92:
         1f:12:46:14:ed:0f:2e:0a:f5:c7:e0:49:29:6c:ec:10:ca:e7:
         27:a4:e6:37:e7:b5:0b:2d:5f:fd:ba:31:e7:65:70:c4:9e:57:
         1f:56:3f:16:da:d1:c1:7a:f5:b7:73:b4:01:04:b7:71:5c:c3:
         9e:97:df:89:78:c3:0b:d2:c1:68:43:5e:72:99:be:1b:3f:d5:
         7e:71:06:ba:22:c1:2c:7f:1c:6b:7f:15:c5:a3:1c:0d:88:ae:
         55:fe:6b:be:0c:27:25:ff:74:88:20:de:1b:b0:66:0e:a5:4d:
         33:e7:80:a2:ba:14:f4:13:32:90:7f:76:d0:ee:d6:a6:55:15:
         3e:91:4a:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 11 23:26:26 2024 by rpki-client on console-ams.rpki-client.org