Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/177ea621-30df-3df3-b5c3-e891d7f64c7f.roa
File:                     177ea621-30df-3df3-b5c3-e891d7f64c7f.roa (raw, json)
Hash identifier:          XezlBsyAuNTXgFH49WPHpiH3gat+8gI3sphumXnLAL0=
Subject key identifier:   29:2E:0D:1F:1C:14:6D:16:51:DC:66:6C:89:B7:EA:58:1E:14:CF:E6
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285845F2BC5451E5BD14066B94A400
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/177ea621-30df-3df3-b5c3-e891d7f64c7f.roa
Signing time:             Tue 21 May 2024 16:31:09 +0000
ROA not before:           Tue 21 May 2024 16:31:09 +0000
ROA not after:            Mon 19 Aug 2024 16:31:09 +0000
asID:                     834
IP address blocks:        216.10.29.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 22 May 2024 15:14:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:f2:bc:54:51:e5:bd:14:06:6b:94:a4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: May 21 16:31:09 2024 GMT
            Not After : Aug 19 16:31:09 2024 GMT
        Subject: CN=bcbc440b-22f4-4295-b1d3-e1565bd48b4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:07:3e:89:5d:23:c6:ee:31:6e:c7:34:8f:68:
                    3c:46:95:bf:ea:42:c7:ba:be:15:35:d5:e3:90:35:
                    95:e1:d9:17:15:54:b4:90:c3:12:72:39:4d:4d:9f:
                    e5:81:82:f8:89:89:3b:ed:36:e7:74:fa:1c:76:ab:
                    c2:9b:e0:19:4d:8e:1b:1e:7d:ba:91:65:77:ef:08:
                    8c:91:dd:91:51:65:87:cf:f6:c6:6d:33:fc:b7:75:
                    eb:65:f1:77:12:59:65:2f:ea:69:ba:da:75:da:bb:
                    b4:61:6a:82:fc:e6:fc:98:89:45:b4:9d:c4:25:83:
                    18:96:26:dc:ae:67:79:83:bc:aa:1a:d4:08:38:1f:
                    eb:2e:c1:0d:1f:ed:41:62:50:61:8c:3e:32:ac:5f:
                    3d:a1:01:75:05:76:bd:66:ac:4f:65:94:75:69:da:
                    5b:30:d2:2c:e8:e6:4d:24:05:40:f6:e6:c9:b7:3e:
                    86:8e:75:f7:af:83:a4:bd:3d:fb:99:0b:fe:2d:28:
                    ed:4e:93:b2:11:5b:9a:24:ff:bf:40:78:31:a3:c4:
                    9f:25:30:82:c4:43:e4:ba:b0:c8:e6:4d:38:ea:19:
                    c4:23:99:6b:03:e6:0b:24:9a:f5:a3:26:b1:ee:aa:
                    8e:21:7b:c2:56:5b:01:f4:64:50:6c:f1:29:9a:3a:
                    09:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:2E:0D:1F:1C:14:6D:16:51:DC:66:6C:89:B7:EA:58:1E:14:CF:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/177ea621-30df-3df3-b5c3-e891d7f64c7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.10.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:f7:41:6c:aa:8d:14:90:19:a8:ca:75:c7:38:ed:cc:39:0e:
         5a:a7:df:f7:d9:db:1a:c2:47:bd:07:0a:58:df:35:ec:19:be:
         5f:a1:45:2f:68:50:af:39:23:c6:d9:59:1e:8b:86:2a:a8:f2:
         2f:ef:b2:7e:03:a8:38:f1:7a:79:65:ab:16:df:7c:aa:32:94:
         2d:3e:53:19:1e:fa:94:7c:c5:a1:4c:57:29:de:ab:c7:0b:36:
         43:65:21:3a:d8:6b:a5:f4:6e:fd:8b:f4:57:d1:c6:3a:eb:1f:
         78:65:3e:90:bf:d1:af:15:e2:36:0a:fa:af:76:b6:ff:a9:60:
         b3:e3:39:4a:6d:d2:65:a0:1e:59:f0:6f:df:60:3d:f2:88:6e:
         46:68:7f:1c:6d:94:54:e8:4d:7b:71:7b:e9:30:a1:6b:a0:b4:
         cb:c1:db:be:75:df:29:86:9a:c0:1e:ce:ea:92:dd:05:19:18:
         03:07:89:14:38:c0:d9:9c:35:40:bf:67:86:4d:8c:36:f7:1d:
         36:7b:3b:d9:67:1d:40:bd:ff:30:d7:67:46:2c:a7:f1:80:57:
         c4:0a:e3:58:35:00:c3:92:ba:94:e0:0e:d6:69:d3:0f:89:be:
         a6:a2:24:4a:f7:3d:70:32:ab:38:de:66:7d:53:37:dc:d2:56:
         53:0b:7a:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:00 2024 by rpki-client on console-fra.rpki-client.org