Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/071948d1-c174-3a6b-b8cf-21e2659c77a6.roa
File:                     071948d1-c174-3a6b-b8cf-21e2659c77a6.roa (raw, json)
Hash identifier:          6DKNz582iN+lV2LCmFktuAz9eAxAyaG0+xrNC6u974I=
Subject key identifier:   1E:A7:21:63:81:37:9B:35:A5:F8:41:50:59:7E:C5:E4:BD:53:3C:94
Certificate issuer:       /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Certificate serial:       010D0C9F43285845CB3E48579793F691B1DE2680
Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/071948d1-c174-3a6b-b8cf-21e2659c77a6.roa
Signing time:             Tue 07 May 2024 13:00:35 +0000
ROA not before:           Tue 07 May 2024 13:00:35 +0000
ROA not after:            Mon 05 Aug 2024 13:00:35 +0000
asID:                     21859
IP address blocks:        69.165.71.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 06 Jun 2024 01:48:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:cb:3e:48:57:97:93:f6:91:b1:de:26:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
        Validity
            Not Before: May  7 13:00:35 2024 GMT
            Not After : Aug  5 13:00:35 2024 GMT
        Subject: CN=8c1477c6-0930-4155-a138-b06c4bb4d946
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:1b:cc:00:c1:16:97:a8:be:b0:7a:e3:7e:0d:
                    5d:b9:6f:d2:9b:57:26:52:6c:1f:d7:2d:4f:fb:b1:
                    8e:a4:44:e8:b5:d6:b8:45:0f:30:e7:ed:06:e1:c5:
                    86:87:94:0d:41:bc:21:b9:38:2e:f7:5b:0f:0e:1d:
                    a1:17:74:76:df:cd:70:42:7b:dd:e2:53:22:6d:0a:
                    b5:60:b9:29:da:ca:41:08:44:3f:c1:00:d4:66:60:
                    ca:65:55:d5:d5:92:5d:b4:d3:0a:82:eb:74:e2:87:
                    b6:03:b1:5b:16:31:81:92:53:b0:fa:5f:87:9f:b7:
                    8f:ce:ac:93:d0:13:6e:cc:67:dc:f4:af:c7:c1:9c:
                    31:80:10:2a:8c:7f:0b:2d:f1:72:82:9a:84:66:db:
                    be:49:b3:ba:2c:15:95:79:ca:66:ca:b4:ae:54:01:
                    82:18:b7:66:d4:55:de:4e:1d:f7:37:b4:bb:c7:7f:
                    ef:89:8f:71:64:7b:bf:37:16:d1:eb:d9:92:b7:c4:
                    8a:f3:fb:87:29:f0:23:c2:0f:b7:eb:69:b1:85:3d:
                    32:95:c4:2b:2b:21:23:e6:a4:58:9d:13:90:82:56:
                    d5:a2:6b:23:96:71:c9:3b:66:d8:bf:cc:fd:60:e9:
                    9b:6c:91:8c:49:50:4b:9f:0b:c0:ca:1e:43:40:8a:
                    70:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:A7:21:63:81:37:9B:35:A5:F8:41:50:59:7E:C5:E4:BD:53:3C:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/071948d1-c174-3a6b-b8cf-21e2659c77a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl

            X509v3 Authority Key Identifier:
                keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.165.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:f8:06:82:b4:f2:fe:d8:a6:1a:b2:a6:aa:98:fa:98:32:a8:
         a4:2f:9a:28:1b:38:5f:d3:3e:0a:5e:ae:5e:f3:4d:f9:06:ae:
         60:e8:7e:ba:64:c2:f5:5d:1a:50:33:e9:13:80:a5:77:2e:46:
         1c:65:35:44:67:9b:88:96:e7:d5:2b:5d:55:48:21:01:72:02:
         e8:a3:7a:70:a3:13:3f:dd:91:4a:9f:d1:6c:fa:57:a7:35:3c:
         58:73:43:86:c6:08:b5:f6:25:60:ff:0a:1a:c2:be:43:0d:7e:
         8b:a5:0d:b6:43:fc:9f:f4:75:72:15:fb:c0:36:5d:43:6c:c7:
         1c:78:8e:9d:60:ad:0b:42:b3:b9:5b:e9:93:a2:ef:95:ff:73:
         fb:6b:f8:81:eb:06:f9:9f:f0:9d:26:f5:3f:c5:69:d4:e6:1d:
         97:04:6a:fc:d2:db:f3:ec:03:92:71:bf:28:08:b8:28:a5:63:
         f0:61:f1:57:f5:32:c6:e1:58:57:84:fd:1e:da:de:75:66:bd:
         ff:f5:c6:96:cc:4b:fa:8d:2b:98:46:d4:ec:b6:7f:d1:6a:9b:
         3a:52:96:10:47:c4:76:d0:07:5d:f5:3e:99:34:02:36:10:b0:
         9a:f7:f0:50:c0:b6:b8:e7:dd:7e:ff:75:f5:cb:84:04:3d:a8:
         0f:7f:34:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:41:51 2024 by rpki-client on console-ams.rpki-client.org