Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835/b7d079b7-65f6-36fb-8f93-4fc3495a5991.roa
File:                     b7d079b7-65f6-36fb-8f93-4fc3495a5991.roa (raw, json)
Hash identifier:          xZ4LE9erkHFHVG93lbdF3m+gfTVptIXAw8VW7aq06Ks=
Subject key identifier:   AD:A4:7D:7F:67:4E:D6:53:D8:AC:DC:3B:FB:77:52:DD:4C:BF:CC:D0
Certificate issuer:       /CN=cc9bfce1-5e74-4c92-954d-8728969d8835
Certificate serial:       010D0C9F43285844F465540843F2331C6CCD6B80
Authority key identifier: 59:23:95:63:7F:0E:0D:1A:9C:A8:9C:18:80:E1:38:3B:CA:AD:73:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835/b7d079b7-65f6-36fb-8f93-4fc3495a5991.roa
Signing time:             Tue 20 Feb 2024 14:00:31 +0000
ROA not before:           Tue 20 Feb 2024 14:00:31 +0000
ROA not after:            Mon 20 May 2024 13:00:31 +0000
asID:                     61317
IP address blocks:        165.140.8.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 31 Mar 2024 00:07:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f4:65:54:08:43:f2:33:1c:6c:cd:6b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9bfce1-5e74-4c92-954d-8728969d8835
        Validity
            Not Before: Feb 20 14:00:31 2024 GMT
            Not After : May 20 13:00:31 2024 GMT
        Subject: CN=3d880d84-0b5f-4bcc-b09c-c9ee4216b546
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:1a:98:70:2e:90:a5:6a:e8:f5:f8:66:95:c9:
                    63:fd:88:45:08:bb:a5:45:14:e3:7e:46:73:98:96:
                    7c:19:fd:0c:23:1e:f4:71:c5:8d:c5:f8:fa:25:2a:
                    80:02:06:f5:cb:5c:15:1f:3d:1f:65:20:20:06:93:
                    3a:49:7e:7e:82:18:15:b8:1f:ef:d1:49:4a:3e:1b:
                    af:26:35:8b:9e:54:85:4a:e7:a4:24:e1:8a:89:22:
                    5d:8a:63:71:fd:cd:d3:95:b5:9e:76:21:af:31:f1:
                    00:0a:d7:85:3e:fb:c3:a3:67:71:d0:01:c9:c5:2c:
                    1a:1d:50:bf:de:2d:e2:c2:e2:46:ee:fb:ca:a4:21:
                    19:b1:73:d8:44:88:b0:e9:39:03:18:81:10:d8:64:
                    3a:c4:cf:0b:11:c1:39:35:a8:85:7d:f6:ea:a3:e9:
                    54:c3:f9:0a:2f:89:b5:05:a5:dc:41:2c:61:96:85:
                    9c:4b:05:d6:96:3e:28:55:6b:64:96:38:79:55:fd:
                    16:53:83:e3:0d:76:29:e4:e2:d4:32:77:ee:fb:bb:
                    a1:52:aa:9c:62:28:13:67:3d:5c:45:0b:fd:06:15:
                    22:c0:40:52:7e:27:b1:6f:5f:f2:a2:4c:c6:db:66:
                    98:50:3d:58:3a:c2:e6:90:c7:ff:23:ef:6a:75:f5:
                    5a:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:A4:7D:7F:67:4E:D6:53:D8:AC:DC:3B:FB:77:52:DD:4C:BF:CC:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835/b7d079b7-65f6-36fb-8f93-4fc3495a5991.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835/cc9bfce1-5e74-4c92-954d-8728969d8835.crl

            X509v3 Authority Key Identifier:
                keyid:59:23:95:63:7F:0E:0D:1A:9C:A8:9C:18:80:E1:38:3B:CA:AD:73:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.140.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:8b:eb:fd:a7:fb:fb:6b:b2:62:21:6a:db:a1:04:a6:ad:8c:
         f4:0e:e7:74:26:ac:3d:59:f9:22:c6:6a:22:41:ee:0a:af:6c:
         54:b6:5c:22:4e:aa:d1:c0:32:49:b1:db:56:f5:19:ce:c4:72:
         c9:68:cd:e2:33:e6:c5:3d:79:b5:65:83:0d:19:b0:d8:84:8a:
         7b:3d:e9:c3:b9:4b:ee:77:9e:82:95:46:b9:9e:6a:d7:98:d0:
         c5:94:66:5c:76:d6:3c:59:07:eb:1a:75:82:82:77:45:69:b1:
         f1:d3:ac:a6:cf:61:76:3c:05:73:34:ca:58:40:7c:7c:82:b8:
         d6:8f:05:9a:97:59:ca:13:6c:db:04:f5:4c:69:1f:9e:31:7a:
         ba:62:01:b7:af:51:81:98:d0:a1:3e:e9:91:2c:f2:3a:f4:dd:
         f4:0b:a4:69:8e:02:ef:53:34:77:2b:59:93:70:01:69:6e:01:
         99:ac:58:7c:0c:5a:f0:1c:8a:3b:a2:91:f8:d0:c8:48:17:73:
         6b:41:44:b5:2d:64:d8:aa:15:61:f5:d3:30:49:76:57:34:4d:
         54:4f:cc:22:37:53:a8:3b:00:c7:a5:41:c7:cd:b1:d3:70:f4:
         ce:f8:a7:63:01:3d:af:5b:ab:79:53:3a:e0:8b:81:5b:4a:f7:
         2c:a0:b0:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 31 01:04:06 2024 by rpki-client on console-fra.rpki-client.org