Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/2bcc517c-896c-330a-8034-5451219063c3.roa
File:                     2bcc517c-896c-330a-8034-5451219063c3.roa (raw, json)
Hash identifier:          gbz94+e/BT4U1YDOJc3NlnslXmdUVIZcEjEQhrfvVJE=
Subject key identifier:   B3:FE:C2:CC:C7:99:F9:AE:D0:BA:C2:D0:8A:BD:AC:F2:74:53:B2:AA
Certificate issuer:       /CN=a4e3e72e-32cb-4e83-8d44-862466bb0c8b
Certificate serial:       010D0C9F43285844CE477EA783995D7E44630EC4
Authority key identifier: DF:A6:A8:E0:C3:72:E6:C7:0F:84:85:C6:B1:18:A0:CB:5C:3E:BD:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/2bcc517c-896c-330a-8034-5451219063c3.roa
Signing time:             Tue 06 Feb 2024 22:19:43 +0000
ROA not before:           Tue 06 Feb 2024 22:19:43 +0000
ROA not after:            Mon 06 May 2024 21:19:43 +0000
asID:                     14016
IP address blocks:        208.72.208.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 09 Feb 2024 04:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:ce:47:7e:a7:83:99:5d:7e:44:63:0e:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4e3e72e-32cb-4e83-8d44-862466bb0c8b
        Validity
            Not Before: Feb  6 22:19:43 2024 GMT
            Not After : May  6 21:19:43 2024 GMT
        Subject: CN=a1a40a83-8949-47e9-9182-22c831999272
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:4c:58:4d:82:45:14:68:e9:3a:69:4a:7d:51:
                    4d:c5:7c:fc:0a:b3:85:ef:fe:eb:b7:d6:27:75:a1:
                    3d:f1:54:e1:c6:22:70:5c:ac:7b:69:0e:3a:ca:df:
                    a0:88:89:ff:aa:20:e7:fb:a1:f2:2a:06:8a:17:a1:
                    87:99:e8:0f:bf:97:f1:d1:a1:54:b3:a9:11:90:76:
                    ad:b8:1e:00:57:d1:44:35:7b:ff:78:c1:0b:47:5e:
                    69:99:0b:21:79:3c:1e:5f:8a:cd:89:bb:9d:56:ac:
                    f9:6e:45:32:f1:b2:d3:bf:a2:f7:39:ea:a6:99:7a:
                    5f:e1:15:82:95:d6:36:b4:5f:8d:4d:a9:15:db:61:
                    77:f0:e1:3b:d3:a2:69:97:21:d3:2c:92:55:51:84:
                    50:f8:b5:64:24:f4:be:1f:ad:a1:fb:7c:7a:1f:c3:
                    c2:ac:9c:d9:1c:c8:18:3c:d9:61:04:e0:7d:af:0c:
                    19:2e:7a:75:7b:63:a6:b8:8e:fc:22:33:a0:47:e5:
                    e2:66:eb:2c:ba:db:ab:1e:86:d1:25:d2:62:66:c7:
                    02:e6:27:5c:72:9d:33:72:2c:c5:10:bd:82:95:e7:
                    16:61:f8:84:92:a5:5a:ea:50:f8:06:a9:9b:cf:32:
                    28:6c:be:76:88:9e:8e:ed:5a:60:5a:b6:2f:5c:a7:
                    23:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:FE:C2:CC:C7:99:F9:AE:D0:BA:C2:D0:8A:BD:AC:F2:74:53:B2:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/2bcc517c-896c-330a-8034-5451219063c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.crl

            X509v3 Authority Key Identifier:
                keyid:DF:A6:A8:E0:C3:72:E6:C7:0F:84:85:C6:B1:18:A0:CB:5C:3E:BD:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.72.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:1a:e1:f2:2e:e3:ea:a8:79:e5:11:3e:f2:a0:7e:6f:fb:03:
         3b:b5:c3:2f:f9:9d:e7:eb:8e:d2:c2:d8:ad:97:44:3f:c1:86:
         19:63:29:ca:6d:ee:66:4f:36:7f:4b:5a:68:ed:8f:d9:fe:91:
         38:19:b9:a6:58:83:22:c0:dd:96:01:8b:f2:59:47:04:ee:dc:
         2e:72:7a:ae:fe:5a:fb:81:ec:db:4d:7b:01:c5:fa:ae:0c:9c:
         03:b6:49:bd:dc:32:64:73:94:dc:45:9b:b4:d5:1b:4f:e4:3e:
         73:af:2f:5e:43:ad:4a:63:5b:ac:6d:64:bc:eb:3f:7f:d9:01:
         c5:d7:6d:3b:3c:9c:a2:83:25:32:33:d7:59:37:29:e6:0f:98:
         1b:c6:49:ff:e0:4f:79:06:b4:75:fb:fa:de:6e:ac:dc:c4:39:
         17:ab:64:e8:23:f5:25:d3:e6:dc:24:83:ca:b8:23:a4:ad:9a:
         b0:08:54:23:91:31:e9:58:fe:71:e2:3b:09:03:61:aa:bf:ec:
         2c:42:28:22:08:b5:5e:3e:98:5d:da:18:6c:de:d8:2e:1d:c7:
         e2:58:37:e3:0a:4d:8d:26:12:dc:35:e5:da:3f:6c:28:27:cc:
         97:23:d4:7e:98:76:cf:51:33:c5:1e:13:68:03:b0:4f:a1:0f:
         f1:21:19:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 9 05:33:27 2024 by rpki-client on console-fra.rpki-client.org