Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279/785ea299-27b1-366c-baec-a1897eccc14c.roa
File:                     785ea299-27b1-366c-baec-a1897eccc14c.roa (raw, json)
Hash identifier:          toinVWQlD23ZE6S0tBlfRk2vVAY90qdZ/5AM/wVEchs=
Subject key identifier:   97:04:ED:74:70:5F:5A:7C:E4:F9:0C:F7:43:C0:10:3C:AF:FB:FB:69
Certificate issuer:       /CN=a38a1dde-b7fb-4bfc-9f3c-cd84003b0279
Certificate serial:       010D0C9F4328584445E9766E2F5388CC1266E980
Authority key identifier: 0D:F1:37:EA:66:82:94:C3:D7:BE:A6:80:5B:BD:1D:86:DD:14:E1:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279/785ea299-27b1-366c-baec-a1897eccc14c.roa
Signing time:             Wed 20 Dec 2023 02:00:15 +0000
ROA not before:           Wed 20 Dec 2023 02:00:15 +0000
ROA not after:            Tue 19 Mar 2024 01:00:15 +0000
asID:                     1239
IP address blocks:        206.251.16.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Tue 13 Feb 2024 00:21:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:45:e9:76:6e:2f:53:88:cc:12:66:e9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a38a1dde-b7fb-4bfc-9f3c-cd84003b0279
        Validity
            Not Before: Dec 20 02:00:15 2023 GMT
            Not After : Mar 19 01:00:15 2024 GMT
        Subject: CN=a27b5ea5-8911-4ab8-bf59-2665bedb32a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:f4:f5:a9:4b:f2:97:94:bc:91:19:49:af:16:
                    68:e4:6b:a0:7c:58:d1:8c:b0:82:2d:8a:88:6d:a6:
                    b5:8a:2c:e0:c0:f6:d0:2b:01:5a:d8:46:0d:b6:17:
                    db:b2:df:f2:b9:c2:1f:48:2d:60:0e:a5:ed:16:fb:
                    7a:cd:fd:ab:ee:f7:b3:d7:89:9e:12:13:aa:38:f1:
                    3d:b6:50:0f:af:06:7b:ad:b1:3f:51:b5:70:fe:15:
                    ae:3f:d1:2a:9f:21:a6:c3:58:8f:6a:fc:87:49:24:
                    05:fe:a1:7a:b7:2f:bb:c3:03:05:0a:c8:75:86:5b:
                    05:ef:10:9c:33:06:fb:63:0f:d6:64:4a:66:2e:80:
                    28:88:65:46:be:b5:92:3c:38:48:28:2f:4c:33:1e:
                    79:a2:69:67:89:93:38:5f:99:64:25:db:54:a3:a1:
                    02:fb:2d:3e:70:98:20:6d:12:a9:86:48:4b:83:05:
                    e0:87:4c:29:08:9a:75:13:6e:fc:09:7f:6a:ac:9b:
                    9f:a6:7f:fe:99:a5:98:ce:ca:36:32:b8:df:88:c2:
                    1e:79:d3:49:83:dc:b0:d9:b0:04:cc:dc:c6:a8:d0:
                    3c:2d:26:c2:1f:10:cb:83:5c:e1:5a:49:7b:66:7d:
                    b8:3f:da:fa:e2:26:e1:4e:a2:54:4c:80:d2:1e:d3:
                    75:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:04:ED:74:70:5F:5A:7C:E4:F9:0C:F7:43:C0:10:3C:AF:FB:FB:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279/785ea299-27b1-366c-baec-a1897eccc14c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279.crl

            X509v3 Authority Key Identifier:
                keyid:0D:F1:37:EA:66:82:94:C3:D7:BE:A6:80:5B:BD:1D:86:DD:14:E1:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.251.16.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:51:9c:3c:3f:39:83:95:6c:b5:e1:f0:ff:51:9f:1f:ae:d0:
         37:3e:50:cb:36:88:fa:0a:c5:d2:f7:b9:97:d6:53:d4:78:40:
         db:9d:90:60:d8:5b:fa:48:4d:32:25:97:20:09:05:51:c6:6a:
         8e:29:ea:35:f4:f2:9f:60:a1:09:b7:a2:9a:90:9e:26:bf:51:
         07:18:1c:4f:ad:6e:2a:ba:a3:4b:2b:ff:d7:d5:95:3b:a3:23:
         45:a1:fd:a4:84:c3:e1:e3:3a:be:9e:e0:cd:d7:0a:0c:eb:df:
         69:46:e3:ac:68:42:f1:f3:1f:cd:1e:ef:5d:b2:5e:a9:21:dc:
         c2:a6:23:a3:68:e0:4f:db:cc:6b:66:09:2b:72:84:83:35:ba:
         34:c6:2e:e3:77:ca:4e:0b:1d:e7:2b:63:0e:16:e7:1e:de:e3:
         10:d3:8b:6f:c1:05:78:37:97:04:44:60:5b:d3:19:16:f7:40:
         ab:e9:5a:8f:b4:02:5a:5e:ab:36:ec:38:a3:71:3a:a6:05:b5:
         96:3e:53:70:fc:c1:8f:7b:83:0d:bb:aa:f5:7f:6e:65:95:e3:
         d7:88:c1:a0:ac:a1:06:2f:ca:25:48:95:13:87:dc:5c:19:d8:
         c5:af:d4:f5:73:4c:40:0b:04:03:cd:f5:b6:af:db:65:23:35:
         df:28:4e:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 13 03:10:19 2024 by rpki-client on console-ams.rpki-client.org