Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801/1c87e1ce-2d20-3e31-b134-1bbc4596222e.roa
File:                     1c87e1ce-2d20-3e31-b134-1bbc4596222e.roa (raw, json)
Hash identifier:          e8xKAW364QqVm0kXUI/SyAXBijvVczQP6JVpk7fTaHQ=
Subject key identifier:   01:FF:F0:7A:FB:C3:E0:68:C4:9D:1A:AD:53:3E:1C:41:74:5A:3E:6E
Certificate issuer:       /CN=604a49f2-58d6-4709-bdaf-e7181b613801
Certificate serial:       010D0C9F432858465145370198FCDBDDE0363A80
Authority key identifier: 85:78:22:95:76:5B:FF:E6:81:20:3B:83:B0:3F:AC:B1:74:74:47:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801/1c87e1ce-2d20-3e31-b134-1bbc4596222e.roa
Signing time:             Mon 24 Jun 2024 13:12:57 +0000
ROA not before:           Mon 24 Jun 2024 13:12:57 +0000
ROA not after:            Sun 22 Sep 2024 13:12:57 +0000
asID:                     13886
IP address blocks:        65.75.204.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Wed 14 Aug 2024 09:35:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:51:45:37:01:98:fc:db:dd:e0:36:3a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=604a49f2-58d6-4709-bdaf-e7181b613801
        Validity
            Not Before: Jun 24 13:12:57 2024 GMT
            Not After : Sep 22 13:12:57 2024 GMT
        Subject: CN=6dbc78db-5267-4eac-9269-ec60c5ca0aa3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:68:54:14:90:b6:43:0b:d9:f2:48:7c:f9:3f:
                    85:fb:af:41:f6:99:58:92:90:d1:8f:71:39:68:ac:
                    fc:7a:47:93:40:0a:dd:3b:17:5b:22:9b:f7:11:8f:
                    6b:3f:f7:78:58:e0:d2:98:09:db:fd:11:72:c2:85:
                    6b:e9:f1:3b:c2:00:66:e1:93:96:55:9d:1a:ad:51:
                    96:24:92:22:3d:92:72:67:e4:83:af:6e:59:c2:5d:
                    dc:63:0a:46:cf:0f:ce:93:7d:74:8a:29:fe:26:86:
                    5f:ef:46:2f:c8:2f:c4:3f:63:46:1f:f3:76:dd:c0:
                    14:12:46:ca:03:a7:24:a5:86:94:be:c6:7e:90:68:
                    2c:01:cc:23:d3:9d:58:28:c4:c3:64:93:9a:b7:a3:
                    e3:67:cf:aa:ed:28:1e:1a:8c:16:7e:36:1d:a8:6f:
                    b9:0f:39:b4:2c:42:03:df:79:1b:36:5d:51:1e:d9:
                    5d:1e:ce:3a:44:3b:13:6e:4c:bf:f9:75:36:c7:5a:
                    ff:eb:db:49:22:69:94:ef:8f:c8:db:a4:fc:f4:18:
                    d5:5d:4e:82:fc:54:f3:ec:99:84:a2:91:b9:c4:c7:
                    9e:e7:12:22:b6:4d:b6:59:58:72:33:8f:1b:22:e9:
                    b0:21:69:c9:13:18:a4:10:d3:94:f6:c2:3f:6c:8c:
                    7e:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:FF:F0:7A:FB:C3:E0:68:C4:9D:1A:AD:53:3E:1C:41:74:5A:3E:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801/1c87e1ce-2d20-3e31-b134-1bbc4596222e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801/604a49f2-58d6-4709-bdaf-e7181b613801.crl

            X509v3 Authority Key Identifier:
                keyid:85:78:22:95:76:5B:FF:E6:81:20:3B:83:B0:3F:AC:B1:74:74:47:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.75.204.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:6b:70:a3:9c:40:3b:11:5d:88:48:a3:86:47:66:e4:20:89:
         7f:2a:81:26:e4:b5:6c:aa:61:cb:62:d8:98:af:59:b4:b6:85:
         24:81:5f:b9:6a:cd:b7:66:59:78:12:f3:28:a7:65:60:58:a2:
         28:84:ec:96:7e:65:de:fd:04:0f:c1:4b:21:f2:ad:f6:bd:fa:
         3f:59:24:db:63:9b:75:b9:74:e4:03:19:f4:14:85:bc:46:ea:
         22:4a:1b:55:d2:bb:85:b1:9e:c5:92:c6:4e:b9:1b:45:17:a8:
         e5:f7:ee:67:d6:70:44:ee:59:5b:31:a5:e3:b8:90:5b:53:ee:
         ba:11:5e:98:d6:14:3b:6f:f7:41:cf:d0:37:e7:94:1c:cc:b7:
         5e:db:3b:e7:5c:9d:a4:95:9c:70:e6:6e:48:93:1c:5e:d3:76:
         a8:2d:a6:e9:e2:d4:03:b5:10:9e:48:c5:16:69:74:35:7c:48:
         a4:ce:a4:17:59:18:c7:7d:83:ce:f6:92:ee:1a:35:03:ff:8c:
         8b:3b:f1:2d:75:a0:bc:7a:70:52:f3:db:ab:52:fc:89:e1:d3:
         7c:e8:24:79:92:0f:74:1d:28:2e:8f:5e:ec:4c:9f:83:37:2a:
         16:d6:63:5d:a3:79:99:f7:23:eb:d1:de:25:f6:9c:52:c7:7d:
         d1:d5:a8:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 14 12:20:47 2024 by rpki-client on console-ams.rpki-client.org