Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/00f131b5-ba56-3e3d-893b-70c005c8f481.roa
File:                     00f131b5-ba56-3e3d-893b-70c005c8f481.roa (raw, json)
Hash identifier:          TrE0jeyCBrNijVwJ9Q2ddrWFxy/or+ApbDpiFuuPDoc=
Subject key identifier:   BB:2B:A5:C6:15:C5:5D:FB:B1:3A:CE:04:15:D5:7C:D8:EC:EB:6F:B0
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F432858461ACEA7DBF517FA7736A42B80
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/00f131b5-ba56-3e3d-893b-70c005c8f481.roa
Signing time:             Wed 05 Jun 2024 01:00:24 +0000
ROA not before:           Wed 05 Jun 2024 01:00:24 +0000
ROA not after:            Tue 03 Sep 2024 01:00:24 +0000
asID:                     21859
IP address blocks:        216.74.98.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 15 Jul 2024 16:47:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:1a:ce:a7:db:f5:17:fa:77:36:a4:2b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jun  5 01:00:24 2024 GMT
            Not After : Sep  3 01:00:24 2024 GMT
        Subject: CN=a5ff25de-7df8-4485-a742-b4dc5ec9cc0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:06:cb:5c:60:91:14:3d:53:21:71:cc:20:c7:
                    b8:08:12:61:cc:80:30:b7:1f:8d:7e:c2:bd:a1:2c:
                    93:57:71:88:be:16:41:5b:64:78:6a:37:b9:00:2c:
                    17:32:12:6d:4d:70:7c:f6:31:39:d3:b4:5d:16:d8:
                    42:cd:84:05:79:26:3d:8f:e4:b4:c0:93:c7:42:c6:
                    32:78:52:35:76:9d:22:54:0a:33:a3:f8:26:56:93:
                    f4:77:53:50:92:56:29:c4:b2:79:3d:e7:0e:24:41:
                    f4:b8:1f:71:c4:97:56:af:74:8f:f2:59:d1:55:6d:
                    12:17:7a:fc:8d:93:7e:a0:3b:83:ea:31:d5:99:b9:
                    73:e5:70:34:96:fb:ad:23:00:49:f2:eb:46:3d:de:
                    aa:4f:66:ae:a4:95:87:42:87:98:32:15:06:04:5e:
                    a3:d7:ac:b3:33:c8:d9:34:3b:d8:57:76:73:96:20:
                    32:b1:b7:39:35:05:95:2c:b8:8b:47:da:5d:bb:37:
                    96:68:6d:f9:ba:04:34:47:78:ab:1d:e1:43:5a:12:
                    ea:c0:1a:ba:75:cc:60:4a:02:5f:7c:03:e5:45:19:
                    0f:fd:f9:0e:05:08:9d:3c:bc:9f:dd:c4:ea:b0:89:
                    0d:22:7e:c7:d6:58:44:a0:fd:07:42:fd:80:69:d9:
                    59:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:2B:A5:C6:15:C5:5D:FB:B1:3A:CE:04:15:D5:7C:D8:EC:EB:6F:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/00f131b5-ba56-3e3d-893b-70c005c8f481.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.74.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:dc:49:f3:9e:d5:82:b1:f6:8a:72:01:f0:98:f0:9a:13:80:
         8f:2b:92:f5:ca:f2:03:4b:52:24:3c:f2:b4:d7:62:94:d0:30:
         f2:f2:32:9d:26:2e:31:c2:0a:9e:78:a8:83:7d:d6:ea:d1:6d:
         18:a0:24:18:0a:c0:94:ae:9c:e7:a0:14:6f:01:c0:ef:31:3f:
         29:ec:48:42:ba:f5:65:52:33:65:25:18:07:f1:56:79:01:86:
         26:b4:96:fb:15:25:97:73:46:e7:57:3b:aa:5d:b6:45:de:dc:
         f9:ab:b4:bd:b5:49:26:06:76:7a:5a:b6:d1:37:6f:68:46:4f:
         f1:30:79:34:2d:c0:46:8f:52:7b:bf:ff:f4:08:fb:d0:4f:49:
         10:ef:0f:0d:c4:2c:fd:43:c8:06:6e:b4:65:75:95:7a:c1:b7:
         b2:b9:22:40:71:2e:ef:48:9d:63:51:25:b7:1d:85:f9:c8:38:
         d4:93:7d:76:1b:78:a8:e3:99:0f:8f:ed:4f:c1:04:62:56:74:
         26:ce:90:64:30:9c:14:9b:82:55:0d:0f:6f:f0:1d:4a:e4:71:
         ba:95:f0:d0:26:bb:80:91:af:71:26:00:4b:29:93:4b:fb:f6:
         af:47:eb:19:db:26:15:e0:f5:2c:1a:c1:e2:f6:d7:c4:cf:09:
         6d:ed:f0:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 15 18:57:41 2024 by rpki-client on console-fra.rpki-client.org