Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b78db6b0-b828-3d4a-b273-b7a5ecf8888b.roa
File:                     b78db6b0-b828-3d4a-b273-b7a5ecf8888b.roa (raw, json)
Hash identifier:          mr7dwVBBLAHya68CzZhACAdFQefNVLhLRwQqVWIfYoQ=
Subject key identifier:   BD:AA:4B:8B:2E:0D:DE:60:D5:9A:AA:9C:6D:7B:1D:BC:83:C7:EB:A2
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584433C409A2BE7A72A03ED1E0C0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b78db6b0-b828-3d4a-b273-b7a5ecf8888b.roa
Signing time:             Wed 13 Dec 2023 14:00:20 +0000
ROA not before:           Wed 13 Dec 2023 14:00:20 +0000
ROA not after:            Tue 12 Mar 2024 13:00:20 +0000
asID:                     61317
IP address blocks:        166.0.171.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 01 Mar 2024 18:31:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:33:c4:09:a2:be:7a:72:a0:3e:d1:e0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Dec 13 14:00:20 2023 GMT
            Not After : Mar 12 13:00:20 2024 GMT
        Subject: CN=9e524622-147b-45a9-bd7f-5b9710e87ca8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:82:05:5f:a5:30:b6:d9:2a:b7:c5:c2:9b:49:
                    af:19:09:2c:0b:b2:d5:bd:ff:6d:75:06:41:1b:4a:
                    f5:56:8d:b0:6c:04:95:67:42:0a:af:0b:ca:e1:b7:
                    8d:4d:39:b9:96:67:5a:46:60:b9:07:82:fb:68:47:
                    61:bc:4e:3a:3d:a5:52:0f:5f:aa:af:ea:d5:42:58:
                    6e:ac:f7:6e:da:9d:dd:dc:5d:ce:ea:df:a0:5f:ea:
                    f3:77:c4:1b:83:1d:17:35:6d:c6:be:ef:7e:48:3e:
                    46:65:c1:2e:e0:c4:05:70:8e:6e:ef:fd:1e:5e:c0:
                    45:97:c4:22:d3:cf:ae:76:98:b3:52:4f:16:96:4e:
                    47:46:d9:fe:62:bd:4a:51:0d:80:f6:92:02:bd:df:
                    ad:39:b3:c9:a5:bd:4b:b3:3c:f4:60:c5:3d:1c:5d:
                    3c:ee:10:3d:e5:1f:e8:95:a2:70:6e:ba:7f:ab:9a:
                    80:54:49:81:42:24:a5:3f:dc:53:ed:18:70:41:81:
                    39:4b:80:cb:f4:96:d2:c5:b0:01:50:c4:aa:f7:4c:
                    16:78:8d:43:35:b0:2b:e3:a5:82:70:bc:17:dc:3a:
                    02:5b:d2:ae:44:d2:b5:6a:eb:d1:b6:63:54:17:57:
                    cc:e6:91:e5:ce:02:61:b1:25:f3:8d:f1:9f:be:0e:
                    74:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:AA:4B:8B:2E:0D:DE:60:D5:9A:AA:9C:6D:7B:1D:BC:83:C7:EB:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/b78db6b0-b828-3d4a-b273-b7a5ecf8888b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.171.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:83:69:0f:b7:9f:89:36:25:dc:79:c1:e8:07:7b:8a:f7:dd:
         06:50:ac:5f:a9:73:c4:57:95:51:58:ce:43:58:1c:2e:72:d1:
         38:2a:6e:12:b4:37:2e:84:8e:71:b2:7d:cb:aa:45:95:96:30:
         45:39:57:93:50:5c:e2:77:7e:1b:dc:ed:e1:5a:0a:5f:ce:de:
         36:f4:19:0a:c4:91:dd:7f:61:48:1e:bc:e5:1c:ae:42:82:a8:
         31:76:5a:64:ad:d8:73:8e:22:18:53:0c:17:a7:41:72:e2:ff:
         74:0c:b7:87:9d:8b:b5:76:c5:bd:56:47:d3:01:36:c8:7a:ed:
         7a:39:45:4e:7d:e1:76:d4:ab:16:43:51:b3:f1:ba:ca:bf:30:
         42:40:20:87:2a:c2:c3:2c:89:34:df:e2:9a:3e:8c:07:6b:64:
         b5:1f:04:c0:8e:34:e2:52:94:f9:af:1d:81:b1:3e:8e:52:1f:
         c3:df:8e:c6:eb:b4:e3:24:56:d0:89:8c:35:30:c9:7e:9d:c6:
         f2:01:6c:c5:70:3a:76:cd:85:1a:71:d0:44:ec:97:5b:00:6d:
         7b:5a:da:45:e5:8c:38:6a:c6:f8:6f:db:53:07:36:b6:2d:75:
         63:aa:c9:7f:fb:58:fb:28:0b:33:18:3d:b4:32:04:4f:27:a6:
         2d:bb:55:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 1 19:23:48 2024 by rpki-client on console-fra.rpki-client.org