Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/376f9565-84cd-3c69-b051-434e6d243f70.roa
File:                     376f9565-84cd-3c69-b051-434e6d243f70.roa (raw, json)
Hash identifier:          sikfUDRjWMFCdMVzjCwQs5YPkXnzSN5DRhX6f7kWf0A=
Subject key identifier:   60:F3:DB:5B:59:CE:64:0C:24:AB:BD:4A:F5:01:C2:74:3F:F1:11:8D
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328576D51CC73C042CFC171E178C673
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/376f9565-84cd-3c69-b051-434e6d243f70.roa
Signing time:             Mon 04 May 2020 20:55:20 +0000
ROA not before:           Mon 04 May 2020 04:00:00 +0000
ROA not after:            Sun 04 May 2025 04:00:00 +0000
asID:                     6939
IP address blocks:        64.71.128.0/18 maxlen: 24

Validation:               Failed, certificate revoked on Sun 11 Feb 2024 22:33:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:71:e1:78:c6:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May  4 04:00:00 2020 GMT
            Not After : May  4 04:00:00 2025 GMT
        Subject: CN=d44b3287-259c-4ceb-a61f-a475d47be0e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a6:7a:49:31:e8:38:9d:c1:07:92:0b:07:47:
                    88:f6:38:06:89:c1:04:8e:60:ba:e4:60:d8:47:18:
                    3e:32:62:35:73:1b:5b:9f:ed:c7:5c:e1:01:70:02:
                    ee:7f:58:b4:05:30:1b:31:09:aa:1d:70:fc:83:74:
                    9a:37:4b:c2:25:84:5d:83:c6:24:f0:78:b9:16:0d:
                    d0:27:e5:00:0b:3e:72:0c:6f:db:01:1b:09:42:cc:
                    a6:27:59:b5:be:5d:b5:54:6c:80:65:7b:f7:76:ba:
                    8b:54:ab:a2:7f:7a:19:6e:d9:cd:4a:cd:8b:bc:4f:
                    fb:44:2a:62:82:fb:5a:c6:9f:71:d1:00:04:4b:d4:
                    40:e7:c1:ec:b8:cd:2c:90:a6:0e:11:f3:c3:2f:cf:
                    50:e8:5b:53:08:b8:ac:51:ed:10:ca:8b:d1:af:96:
                    3f:8e:45:6c:48:46:41:5c:78:fe:1a:54:bb:f0:66:
                    9c:5d:75:13:ae:74:a7:f6:69:c8:fe:04:35:61:2a:
                    dd:3b:25:96:50:12:b5:e2:40:40:e3:7e:d3:3b:d8:
                    4a:c7:db:30:c2:50:04:94:9a:2b:1d:6d:66:7a:74:
                    4d:2c:11:55:b5:eb:f8:6a:f7:af:3a:ce:99:b7:4c:
                    ad:48:8f:9f:4c:b3:f9:b6:a7:76:ae:f5:b1:76:5e:
                    5d:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:F3:DB:5B:59:CE:64:0C:24:AB:BD:4A:F5:01:C2:74:3F:F1:11:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/376f9565-84cd-3c69-b051-434e6d243f70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.71.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:bb:7a:32:b2:c3:4c:c6:2b:37:31:f5:32:d4:7e:3f:6a:6f:
         b0:53:a8:09:5f:23:a2:f4:f1:1b:64:c6:f1:4c:23:d6:59:62:
         0a:e1:7d:03:ba:54:65:5f:5f:7a:09:0d:c4:86:b9:4b:e3:88:
         ab:64:24:2c:5c:f2:a7:ed:81:86:97:23:ff:7e:79:ab:81:29:
         35:69:52:c5:48:f6:26:13:0b:fc:ef:29:96:ce:8f:a5:fa:49:
         9e:97:25:80:c3:b9:82:ca:05:14:6d:4c:18:04:38:74:f5:4e:
         48:bc:5b:a4:28:10:7a:b1:03:b9:a9:d7:32:af:63:68:b8:3a:
         a8:88:39:0c:9b:88:7c:a4:34:c9:ea:a4:19:97:3b:e8:08:8f:
         e0:ba:68:e6:b5:70:c5:21:3a:03:dc:ab:dc:71:e3:d9:fe:e4:
         00:a2:7e:97:08:fb:a9:ee:e6:76:80:ac:c9:84:7b:0d:de:cd:
         fe:65:a7:04:ba:d6:77:7b:b5:06:59:ad:2b:8b:3e:13:50:c1:
         a4:43:06:a3:f2:60:fe:ef:30:a4:fe:28:2e:68:57:ff:92:bf:
         8f:d2:2c:45:44:bb:25:0f:97:1f:3b:0a:0b:bf:60:af:34:48:
         45:cd:2b:d0:2d:91:b8:32:8b:ab:de:9f:bf:54:f2:c3:db:90:
         f7:76:0f:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 11 23:26:26 2024 by rpki-client on console-ams.rpki-client.org