Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/a6388325-5ec2-3575-a9be-0e7c5f8e9b22.roa
File:                     a6388325-5ec2-3575-a9be-0e7c5f8e9b22.roa (raw, json)
Hash identifier:          u0nTYCbn/KVa3nNBgHbcjZ8nZoDWop+pmTqpw8VNokk=
Subject key identifier:   BB:8C:E9:75:B8:D1:BC:37:E7:EC:18:0E:75:FB:F3:36:FA:54:90:73
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328576D51CC73C042CFC16D7F7EE39E
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/a6388325-5ec2-3575-a9be-0e7c5f8e9b22.roa
Signing time:             Mon 30 Sep 2019 00:08:05 +0000
ROA not before:           Tue 10 Apr 2018 04:00:00 +0000
ROA not after:            Mon 10 Apr 2028 04:00:00 +0000
asID:                     198018
IP address blocks:        165.254.31.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 28 Feb 2023 16:19:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6d:7f:7e:e3:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 04:00:00 2018 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=9f1b9897-b7d3-41e8-8b2a-dcee863cea91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a8:a5:46:eb:b9:31:4d:58:7b:a4:51:c4:35:
                    0e:55:e9:70:5f:7e:cd:b4:85:99:11:1f:cf:76:1c:
                    ee:58:12:f1:81:29:fc:55:5e:0f:46:14:d9:3c:f5:
                    1d:17:f6:7a:9b:08:f5:95:56:29:25:fb:99:2e:3e:
                    f4:9a:be:a3:74:b5:ed:a7:72:72:e4:63:2d:bd:75:
                    94:a4:ae:1f:7c:80:bb:d2:5e:6c:75:7b:fb:fa:f6:
                    c4:06:3d:54:08:d7:bf:cc:1e:35:24:62:14:9c:e8:
                    76:f4:69:f0:c4:b0:c3:0c:d7:31:1b:dc:81:89:61:
                    78:ab:50:5b:e8:bb:f8:4d:71:f0:db:fc:2d:dd:aa:
                    80:77:67:e6:4c:36:98:84:9f:87:96:86:54:a6:8c:
                    82:e6:e2:28:c8:b0:0b:0f:fb:ce:be:47:6f:45:57:
                    a0:94:e5:55:08:73:a8:0d:39:a8:54:ca:ce:29:e8:
                    12:80:c9:1f:c1:33:dd:20:a4:5c:73:35:e1:3d:11:
                    4f:ba:3d:d7:e9:f3:fd:20:2f:39:ec:a2:49:b8:ef:
                    96:94:bc:0a:94:50:d5:95:64:86:d3:3d:c8:16:f4:
                    1e:8c:c6:52:ce:27:3f:4b:7d:3a:fa:48:8c:95:38:
                    76:30:ac:d4:8e:b6:3b:2c:21:ea:23:39:1e:57:67:
                    2d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:8C:E9:75:B8:D1:BC:37:E7:EC:18:0E:75:FB:F3:36:FA:54:90:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/a6388325-5ec2-3575-a9be-0e7c5f8e9b22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.254.31.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:fb:af:80:63:29:f7:46:bb:6c:6e:2f:a5:6e:ef:a0:a0:02:
         67:36:33:6a:68:ef:dc:89:0f:b3:6d:fb:4c:1e:b9:2c:71:b8:
         44:fc:81:e9:5e:66:a9:cb:d3:20:83:bd:f6:8e:0c:22:36:e7:
         37:ff:4d:4f:96:2f:ef:c8:94:b5:40:d3:60:5f:07:e9:18:3a:
         19:e7:dd:d3:b8:01:82:b9:5d:25:c7:30:1e:15:13:4f:7b:05:
         5c:8f:69:fc:04:2c:33:7d:08:92:7c:97:94:38:cf:0f:83:45:
         30:70:be:a8:98:83:29:18:d4:0b:9e:77:4f:ac:1b:76:d9:8c:
         4d:31:b6:90:0a:e7:f2:3f:72:45:a4:c1:8f:dd:30:24:5b:7f:
         bb:96:ae:b6:a4:73:b5:56:0b:3f:9b:24:75:43:10:51:a5:45:
         5d:ce:3a:b2:44:74:02:ee:05:64:8b:1c:31:2b:51:80:88:e5:
         b7:b5:84:68:8b:2a:b7:ad:cf:78:67:c3:2a:1e:7b:e4:22:11:
         e4:f3:3c:91:12:20:ec:2b:71:15:31:00:5b:66:36:37:a8:77:
         03:de:cd:e6:d9:ba:3b:f4:27:57:9e:35:d6:f0:d7:0d:5d:c0:
         e2:1b:53:f8:fd:ad:d9:f7:74:fb:eb:3a:3b:eb:0c:ec:80:e0:
         96:a5:59:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:08:17 2024 by rpki-client on console-fra.rpki-client.org