Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/db932b12-0635-37f4-9e8d-b88a9ad64043.roa
File:                     db932b12-0635-37f4-9e8d-b88a9ad64043.roa (raw, json)
Hash identifier:          rKaqGY2N8i6aK7XV0FJSZ6eWNf5Vgo8EebL1TpjyIWQ=
Subject key identifier:   A2:9E:61:48:42:07:1B:98:37:7B:F8:41:DA:9F:70:2A:54:0F:8B:33
Certificate issuer:       /CN=b02dc6e7-fa1a-4acf-a036-5b4487100de9
Certificate serial:       010D0C9F4328584565F926270850062076C16880
Authority key identifier: CD:A8:CE:37:4F:36:4A:E1:38:F6:F0:7E:CF:6D:76:B1:CA:C4:E8:3E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/db932b12-0635-37f4-9e8d-b88a9ad64043.roa
Signing time:             Mon 01 Apr 2024 06:24:43 +0000
ROA not before:           Mon 01 Apr 2024 06:24:43 +0000
ROA not after:            Sun 30 Jun 2024 06:24:43 +0000
asID:                     834
IP address blocks:        216.105.165.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 03 Apr 2024 19:02:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:65:f9:26:27:08:50:06:20:76:c1:68:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b02dc6e7-fa1a-4acf-a036-5b4487100de9
        Validity
            Not Before: Apr  1 06:24:43 2024 GMT
            Not After : Jun 30 06:24:43 2024 GMT
        Subject: CN=3bdb6fcf-3264-41a1-8ac1-ee3d0c5f110a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:2a:d6:fd:57:bd:4f:63:0a:6c:ff:11:00:ae:
                    9b:39:a0:d1:71:ea:7d:aa:53:8f:2d:8b:8e:13:4d:
                    d9:40:00:29:c3:11:d3:0b:34:f7:d1:60:fe:ad:bb:
                    86:37:b5:e3:1d:07:b8:0e:f4:11:df:e7:cb:9e:ef:
                    c4:91:5e:b3:07:36:70:e7:05:38:29:b3:9e:9a:20:
                    18:9c:36:76:35:cf:eb:f2:ce:ec:86:0a:f3:5d:cd:
                    dc:e4:4b:e8:35:f6:57:00:cf:f2:bd:91:39:fa:a3:
                    fb:5f:d6:7b:0d:86:0e:1c:aa:b0:8b:5c:25:d6:b2:
                    af:c9:4a:90:70:ec:d7:8e:63:12:98:9d:7b:48:67:
                    5a:39:77:2b:09:05:ae:53:03:eb:fa:54:f6:c6:16:
                    00:2b:04:53:0b:83:e9:60:d6:9e:ae:05:54:0a:c4:
                    2a:b9:50:6d:0b:42:53:5b:9f:97:6f:9c:4c:69:09:
                    80:41:cd:ad:da:50:9d:e1:0a:13:60:61:92:34:28:
                    45:d5:74:b5:8b:a1:e3:d8:91:a9:3b:f6:9d:52:32:
                    a6:8c:5b:25:b7:3c:dc:89:aa:d9:23:10:22:88:ca:
                    32:4e:ad:4d:40:d3:96:cf:a9:53:03:98:b3:9b:80:
                    d3:b7:7f:87:82:b7:3d:03:0a:a2:93:e8:82:27:9d:
                    13:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:9E:61:48:42:07:1B:98:37:7B:F8:41:DA:9F:70:2A:54:0F:8B:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/db932b12-0635-37f4-9e8d-b88a9ad64043.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b02dc6e7-fa1a-4acf-a036-5b4487100de9.crl

            X509v3 Authority Key Identifier:
                keyid:CD:A8:CE:37:4F:36:4A:E1:38:F6:F0:7E:CF:6D:76:B1:CA:C4:E8:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.105.165.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:4e:66:73:d8:56:75:ed:9d:01:9d:51:cd:a9:c1:17:ed:2a:
         e1:1a:fc:9c:97:6a:77:3d:48:ff:12:29:b6:0b:eb:f1:ab:ca:
         19:22:d1:de:8c:21:bc:be:ff:b8:7e:ac:73:65:25:2e:4a:49:
         68:3a:13:21:d0:4a:11:2a:a3:26:0b:64:4d:e5:a1:66:ce:ab:
         8c:30:8e:e8:41:42:80:de:52:ad:17:56:83:24:3c:5c:8c:29:
         a9:55:28:dd:65:f7:f6:2f:44:7f:85:09:db:ab:dd:0f:c2:c9:
         ce:d7:14:a0:cd:32:ff:ef:d6:5e:1e:0c:1d:a0:bb:ba:86:2e:
         3c:c0:aa:0a:ae:ba:6a:bc:22:33:3e:77:18:35:3b:79:0e:1f:
         ab:0e:12:a5:f4:05:47:29:8f:ef:51:0f:0e:ef:f8:32:da:90:
         e0:f0:bc:08:e5:7d:24:67:7d:2b:f2:5b:6e:44:f0:4d:78:6c:
         0f:a3:ed:d1:b3:d3:60:80:15:5d:cf:03:9b:bb:e2:20:10:65:
         10:58:3c:d9:65:af:1b:7a:97:dc:3a:82:e1:73:b6:56:66:c9:
         17:e6:e5:88:f8:a5:84:83:17:10:1c:c8:2d:f5:df:9c:7b:92:
         8d:7c:f1:12:1b:09:1e:16:67:25:e8:5a:e8:5e:a3:be:04:a7:
         cb:9a:fc:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 3 23:09:28 2024 by rpki-client on console-fra.rpki-client.org