Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1c680bf8-5a8c-4dd5-865a-c38a50946494/8f5411d5-5055-3179-87fb-873cc4664a6f.roa
File:                     8f5411d5-5055-3179-87fb-873cc4664a6f.roa (raw, json)
Hash identifier:          aGE/Xl+UV6zXx9cx/V5i2stp64kGGTCrUPM0TVl9f6g=
Subject key identifier:   33:E2:C5:28:3C:71:23:E9:84:BF:21:1F:10:C9:5B:FC:4E:25:63:E8
Certificate issuer:       /CN=1c680bf8-5a8c-4dd5-865a-c38a50946494
Certificate serial:       010D0C9F432858456E9228BB581946CDE52FFBC0
Authority key identifier: 4C:0A:2A:8B:E7:3E:A4:60:D7:F0:66:7C:77:65:34:5A:CA:95:4E:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1c680bf8-5a8c-4dd5-865a-c38a50946494.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1c680bf8-5a8c-4dd5-865a-c38a50946494/8f5411d5-5055-3179-87fb-873cc4664a6f.roa
Signing time:             Thu 04 Apr 2024 08:19:29 +0000
ROA not before:           Thu 04 Apr 2024 08:19:29 +0000
ROA not after:            Wed 03 Jul 2024 08:19:29 +0000
asID:                     400794
IP address blocks:        206.183.128.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Thu 04 Apr 2024 22:59:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:6e:92:28:bb:58:19:46:cd:e5:2f:fb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c680bf8-5a8c-4dd5-865a-c38a50946494
        Validity
            Not Before: Apr  4 08:19:29 2024 GMT
            Not After : Jul  3 08:19:29 2024 GMT
        Subject: CN=f08f0491-5dd5-4973-8eb0-a5f484aaea5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:a2:0c:cb:47:2e:52:d1:59:1d:9e:d7:0a:df:
                    c4:c6:59:f0:f7:8a:a1:b8:b4:72:83:12:5e:88:e1:
                    bf:a1:e5:53:f6:ca:48:de:36:10:cc:b0:ad:73:df:
                    f8:74:85:9e:f3:3f:2e:9f:5d:8d:1b:e3:06:08:33:
                    25:b1:67:da:6e:d3:19:6b:73:f1:25:f3:91:61:18:
                    76:54:32:f9:21:17:ca:9f:5e:bf:b7:34:4c:6d:78:
                    a1:e6:15:0a:b3:91:28:c1:1d:58:9e:fd:46:96:7d:
                    8d:d5:0f:cf:88:2c:7f:52:13:83:88:17:ac:92:66:
                    48:f9:38:f2:45:2e:3d:6a:4e:a5:df:82:93:a9:bf:
                    6d:e9:0c:35:e7:a9:f4:4a:78:16:62:5c:d8:99:e6:
                    d1:7c:ef:f8:20:7b:c9:45:b8:d0:53:32:ec:67:6d:
                    ed:b0:e3:cc:a3:ab:44:72:fb:c4:2f:4f:4c:a2:8e:
                    2e:f0:77:06:2d:69:b3:a9:fc:89:3f:e6:28:39:4d:
                    47:04:d7:36:81:3c:57:0e:2c:ad:1e:c3:30:4c:54:
                    a5:f8:ad:ee:ac:bc:ce:76:78:b2:a3:c7:bb:88:c1:
                    1b:bd:03:d9:ff:9c:c0:f3:5e:35:ce:46:1d:8e:61:
                    ef:7e:3c:b3:cf:98:e3:bd:7f:50:fd:a3:55:8b:71:
                    6e:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:E2:C5:28:3C:71:23:E9:84:BF:21:1F:10:C9:5B:FC:4E:25:63:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1c680bf8-5a8c-4dd5-865a-c38a50946494/8f5411d5-5055-3179-87fb-873cc4664a6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1c680bf8-5a8c-4dd5-865a-c38a50946494/1c680bf8-5a8c-4dd5-865a-c38a50946494.crl

            X509v3 Authority Key Identifier:
                keyid:4C:0A:2A:8B:E7:3E:A4:60:D7:F0:66:7C:77:65:34:5A:CA:95:4E:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1c680bf8-5a8c-4dd5-865a-c38a50946494.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.183.128.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:e2:2e:05:f2:bd:b6:c0:5c:ec:65:c0:2d:a6:a7:fb:56:50:
         b4:3e:93:ea:12:0e:ed:e8:a4:67:57:65:65:32:44:d3:38:ef:
         60:ab:c4:45:bc:f0:91:cb:9e:f7:08:35:86:f9:8b:ff:20:9b:
         4a:7f:de:cd:25:23:27:59:6c:59:37:48:c6:60:cf:60:35:10:
         09:b3:94:25:64:d5:5a:9d:eb:af:de:45:9f:59:cf:f3:8a:87:
         10:49:b5:a8:82:1c:d6:74:23:15:73:a4:45:ec:9d:3f:fe:14:
         cb:45:7f:e5:e4:52:a0:83:1c:41:00:35:48:06:44:61:e1:e8:
         57:47:47:8e:82:4c:a6:a3:38:6a:cd:e0:1e:65:9f:6d:65:66:
         44:25:05:3b:e7:8d:74:7e:3b:41:9e:b5:ee:34:02:b3:49:9e:
         21:c0:35:1b:bf:5d:72:49:01:bd:63:0c:0e:cd:c6:97:20:18:
         64:62:e6:96:5e:d9:6a:de:f3:8a:de:37:eb:d7:25:e3:09:25:
         8b:fd:91:97:5f:de:6f:d6:f3:fe:74:1c:fd:38:59:04:de:0f:
         43:d9:c3:c5:ca:9d:cb:1e:c8:28:a2:1a:6e:30:c2:5a:ad:dc:
         62:a7:0b:86:cd:6d:95:bd:61:10:80:87:9c:b4:e6:25:92:34:
         e2:76:81:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 5 00:21:40 2024 by rpki-client on console-fra.rpki-client.org