Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2f2042f8-45e7-3d38-b72a-06e3a2e2b5ea.roa
File:                     2f2042f8-45e7-3d38-b72a-06e3a2e2b5ea.roa (raw, json)
Hash identifier:          s6sK80/dEsj0t6P+dk6LO58essldaG9oKcrFXZ9Jv9Y=
Subject key identifier:   F1:F8:B6:52:33:E4:F1:12:AE:6B:D5:67:2F:F8:6A:47:02:62:E9:5C
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328576D51CC73C042CFC171E178CC16
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2f2042f8-45e7-3d38-b72a-06e3a2e2b5ea.roa
Signing time:             Mon 04 May 2020 20:55:22 +0000
ROA not before:           Mon 04 May 2020 04:00:00 +0000
ROA not after:            Sun 04 May 2025 04:00:00 +0000
asID:                     6939
IP address blocks:        66.160.128.0/18 maxlen: 24

Validation:               Failed, certificate revoked on Sun 11 Feb 2024 22:42:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:71:e1:78:cc:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May  4 04:00:00 2020 GMT
            Not After : May  4 04:00:00 2025 GMT
        Subject: CN=0ed6148d-c72c-4c75-ad9c-7fa6d1aaabe9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:8c:93:cf:99:fc:dc:90:e7:08:e8:d5:73:8c:
                    2b:bf:02:2c:00:ee:01:93:77:b3:66:04:eb:40:41:
                    35:09:72:85:40:95:d1:e0:95:32:d4:ec:27:36:02:
                    c3:c4:9a:cb:56:f1:4d:45:7c:bd:42:6c:07:93:de:
                    fc:7d:c6:35:e1:19:bd:6b:7d:66:f5:2c:6b:49:dc:
                    21:cf:bd:95:0e:7d:dc:94:ee:37:f8:b1:4d:d6:95:
                    8b:06:15:c8:fa:fd:55:a5:da:1f:4f:6a:97:c5:6f:
                    ef:03:69:d2:c5:d3:88:4a:1a:08:ac:74:eb:0d:af:
                    0a:74:af:f8:ac:88:0b:18:cf:8f:23:7e:ba:6c:10:
                    95:31:93:ee:84:3f:f5:ff:67:4e:da:b8:62:3a:28:
                    b5:ec:a9:b9:95:86:db:e8:84:2f:ea:79:9e:e0:a5:
                    f0:78:fb:c6:5a:30:97:24:c5:c5:34:c9:7a:da:e6:
                    76:63:98:99:28:49:d5:eb:63:38:ec:2d:7a:a3:e9:
                    f2:71:4e:f1:a6:32:69:42:07:bb:c0:d4:6a:81:1b:
                    e4:a1:5b:e8:01:fb:f8:5e:8f:0f:ce:dc:21:ed:a9:
                    56:54:a0:ad:c7:bc:4a:0c:b6:8b:b5:d1:b9:34:83:
                    b0:ca:ed:0b:98:eb:52:5a:fe:77:94:f3:4d:0e:d4:
                    5b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:F8:B6:52:33:E4:F1:12:AE:6B:D5:67:2F:F8:6A:47:02:62:E9:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2f2042f8-45e7-3d38-b72a-06e3a2e2b5ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.160.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:38:0d:bc:31:98:dc:b1:b3:28:b9:9d:18:dc:a0:f5:0c:cf:
         dd:0a:e3:e6:2e:2f:96:28:40:06:d7:d4:79:66:15:7e:8f:44:
         e8:f4:ec:dc:29:fc:ec:48:50:d9:52:be:ad:be:28:0e:85:dc:
         77:79:3a:a3:39:36:06:4c:c9:25:9d:49:19:62:85:98:3f:70:
         2a:39:23:41:fc:a6:02:a4:1e:cd:f5:50:80:5e:51:83:4d:eb:
         54:cb:5e:12:8b:86:56:ee:d2:44:1f:e4:66:99:0a:d6:8f:ec:
         4a:47:58:25:9a:38:e1:0d:a8:5c:b3:b5:8b:15:c0:a5:cd:0e:
         5a:98:ac:cf:b9:89:3f:b0:27:39:23:26:82:3d:17:bb:23:58:
         26:81:ec:e3:3b:42:1c:c4:1a:70:06:7d:70:30:69:3d:95:1c:
         bc:b7:60:8e:bc:f7:be:69:7e:a4:02:f3:f7:53:c8:07:f5:3d:
         7f:15:71:59:d8:31:be:58:bb:89:31:d1:e9:d4:dc:0d:1a:3c:
         d0:45:7a:b0:b4:0f:25:ff:4d:26:1f:e9:5f:7e:f6:49:07:a9:
         15:d8:7b:e7:e1:73:69:a6:bb:b9:b4:52:e8:59:94:b4:66:4b:
         44:3f:44:f4:d9:b6:a6:28:11:9c:51:be:4c:03:75:32:bc:0f:
         a3:e2:bc:eb
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BceF4zBYwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJGIyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJkOWNh
YTAeFw0yMDA1MDQwNDAwMDBaFw0yNTA1MDQwNDAwMDBaMC8xLTArBgNVBAMTJDBl
ZDYxNDhkLWM3MmMtNGM3NS1hZDljLTdmYTZkMWFhYWJlOTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAL+Mk8+Z/NyQ5wjo1XOMK78CLADuAZN3s2YE60BB
NQlyhUCV0eCVMtTsJzYCw8Say1bxTUV8vUJsB5Pe/H3GNeEZvWt9ZvUsa0ncIc+9
lQ593JTuN/ixTdaViwYVyPr9VaXaH09ql8Vv7wNp0sXTiEoaCKx06w2vCnSv+KyI
CxjPjyN+umwQlTGT7oQ/9f9nTtq4YjooteypuZWG2+iEL+p5nuCl8Hj7xlowlyTF
xTTJetrmdmOYmShJ1etjOOwteqPp8nFO8aYyaUIHu8DUaoEb5KFb6AH7+F6PD87c
Ie2pVlSgrce8Sgy2i7XRuTSDsMrtC5jrUlr+d5TzTQ7UW7sCAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBTx+LZSM+TxEq5r1Wcv+GpHAmLpXDCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy9mNjBjOWYzMi1hODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEw
NjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5Y2FhLzJmMjA0MmY4LTQ1ZTctM2Qz
OC1iNzJhLTA2ZTNhMmUyYjVlYS5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3
Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhh
LTI2NmIxOTJkOWNhYS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDlj
YWEuY3JsMB8GA1UdIwQYMBaAFGWnQoaur+LJ4+m5BivGRgWcmG/PMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1hODdjLTQzMzkt
YTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5
MmQ5Y2FhLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBkKggDBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAszgNvDGY3LGzKLmdGNyg9QzP3Qrj5i4vlihABtfUeWYVfo9E6PTs3Cn87EhQ
2VK+rb4oDoXcd3k6ozk2BkzJJZ1JGWKFmD9wKjkjQfymAqQezfVQgF5Rg03rVMte
EouGVu7SRB/kZpkK1o/sSkdYJZo44Q2oXLO1ixXApc0OWpisz7mJP7AnOSMmgj0X
uyNYJoHs4ztCHMQacAZ9cDBpPZUcvLdgjrz3vml+pALz91PIB/U9fxVxWdgxvli7
iTHR6dTcDRo80EV6sLQPJf9NJh/pX372SQepFdh75+Fzaaa7ubRS6FmUtGZLRD9E
9Nm2pigRnFG+TAN1MrwPo+K86w==
-----END CERTIFICATE-----
Generated at Mon Feb 12 01:52:03 2024 by rpki-client on console-fra.rpki-client.org