Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3e9530d5-9744-3afa-bd1d-3279428416f8.roa
File:                     3e9530d5-9744-3afa-bd1d-3279428416f8.roa (raw, json)
Hash identifier:          2LBNHrB8gT0LkO+6fMqyAlhF/OwdLuKZLKtbfcvUJK4=
Subject key identifier:   E7:FE:57:E4:B2:1B:04:BF:6F:63:E8:F4:6E:56:6F:8B:1F:13:24:89
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328576D51CC73C042CFC171E178C839
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3e9530d5-9744-3afa-bd1d-3279428416f8.roa
Signing time:             Mon 04 May 2020 20:55:21 +0000
ROA not before:           Mon 04 May 2020 04:00:00 +0000
ROA not after:            Sun 04 May 2025 04:00:00 +0000
asID:                     6939
IP address blocks:        66.160.192.0/20 maxlen: 24

Validation:               Failed, certificate revoked on Sun 11 Feb 2024 22:44:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:71:e1:78:c8:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May  4 04:00:00 2020 GMT
            Not After : May  4 04:00:00 2025 GMT
        Subject: CN=9c427caa-5150-436c-b18f-f12152fb64fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:0a:58:45:47:b4:7f:55:c5:ce:0d:38:4b:c1:
                    62:be:15:d2:57:a5:c5:b4:3e:f2:40:49:f8:f2:28:
                    b0:ed:fe:91:1d:05:4b:94:4c:a7:64:93:2d:9a:90:
                    e3:6d:a6:8b:95:25:a1:c0:1d:49:f0:0f:54:b8:c7:
                    92:18:b7:dd:61:65:35:58:60:35:68:dc:c0:bd:34:
                    86:40:fc:b0:b4:7f:49:ec:2e:7a:1b:14:80:63:17:
                    13:7b:09:26:7b:40:24:55:f0:98:99:55:83:a3:93:
                    ff:67:76:64:fc:07:2b:68:6d:ec:e6:cd:90:d6:ad:
                    f3:45:57:f4:f8:bb:d2:08:5a:db:e1:68:dc:3e:14:
                    1a:c2:8b:6a:be:d2:20:4f:ab:e8:3f:04:bd:be:15:
                    f8:8a:dd:78:98:41:33:33:5d:e4:59:c1:06:47:8e:
                    18:c1:42:bf:ee:59:59:ae:7a:86:02:1a:89:91:87:
                    06:a7:a2:2e:8a:a0:38:44:8f:b0:29:c0:7e:5a:eb:
                    e6:67:b3:01:df:89:4b:bb:cf:38:6d:71:a4:26:a3:
                    ec:18:9c:6c:6c:87:b4:b0:64:b8:ab:e9:3c:f5:a5:
                    06:48:fc:09:54:8a:31:00:5e:f0:c1:7f:77:c2:5b:
                    0f:46:12:d0:22:c9:d6:ee:69:ad:bf:ad:59:d5:3b:
                    ba:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:FE:57:E4:B2:1B:04:BF:6F:63:E8:F4:6E:56:6F:8B:1F:13:24:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/3e9530d5-9744-3afa-bd1d-3279428416f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.160.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:eb:33:1c:36:5c:b7:8a:2d:60:e2:04:d6:c2:74:e4:bc:20:
         ab:8e:44:95:65:b5:a3:87:70:44:e2:d3:14:13:cf:76:9d:8f:
         ce:6c:43:95:26:30:56:75:d0:ce:3d:a6:a7:67:6e:61:0e:3b:
         0f:21:3f:8c:29:ce:a5:8d:1b:67:aa:a6:7a:44:eb:c6:58:b1:
         de:ce:15:12:2f:64:d7:ba:d3:8b:81:74:f3:e7:83:52:f8:3a:
         21:5a:4e:ed:45:c4:05:93:52:90:6d:c9:48:c4:30:8b:ba:e5:
         a6:27:9c:0b:d8:d3:18:69:69:f7:68:7c:00:93:3e:81:1b:5e:
         2d:6f:54:2e:2a:d3:6b:1d:37:14:1b:87:41:7d:75:67:18:7e:
         e7:9d:2d:49:a3:d7:36:76:0a:9b:5c:73:19:53:f5:c7:1c:3b:
         23:b1:3b:4f:10:e1:69:9e:8c:31:26:f4:07:97:32:d3:55:3d:
         3c:29:53:2b:45:95:39:71:48:13:4d:c0:d4:f3:5a:3e:a1:39:
         89:46:ac:2f:bf:b7:81:eb:5f:60:69:c3:20:62:34:71:4f:e8:
         1d:43:ad:bc:00:94:b0:07:c2:e3:75:e7:d7:ed:a2:4f:49:13:
         44:f5:99:f8:06:66:76:fb:09:5a:c9:9b:66:78:3f:81:ca:9d:
         b3:d8:3b:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 12 01:52:03 2024 by rpki-client on console-fra.rpki-client.org