Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/1aa1853b-051b-3227-8558-158cc39ee641.roa
File:                     1aa1853b-051b-3227-8558-158cc39ee641.roa (raw, json)
Hash identifier:          NF8TbBfjzh2tjcBkmhSavjPpxt2CdcPwoRCoK9tqnw8=
Subject key identifier:   9C:66:2F:20:6C:E9:04:0A:96:BA:69:B8:59:34:B9:FE:21:B7:1B:B0
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584565FBD9C5928FE821575EFF80
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/1aa1853b-051b-3227-8558-158cc39ee641.roa
Signing time:             Mon 01 Apr 2024 06:30:10 +0000
ROA not before:           Mon 01 Apr 2024 06:30:10 +0000
ROA not after:            Sun 30 Jun 2024 06:30:10 +0000
asID:                     834
IP address blocks:        104.224.78.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 07 May 2024 20:56:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:65:fb:d9:c5:92:8f:e8:21:57:5e:ff:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Apr  1 06:30:10 2024 GMT
            Not After : Jun 30 06:30:10 2024 GMT
        Subject: CN=86fe0625-7e72-46e5-a894-417c6eda39b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:51:8c:47:c9:5a:b4:ea:be:c0:da:1b:42:97:
                    30:c0:e8:cb:cc:97:60:28:4e:41:63:41:eb:fd:9e:
                    92:42:55:4a:aa:07:22:1f:74:fe:0b:48:3e:77:50:
                    5b:1f:c4:5c:51:30:e6:6a:46:2a:61:35:c9:30:7c:
                    6e:a7:75:78:b3:5c:e5:67:16:92:6c:a8:90:c7:9c:
                    1b:54:26:f3:88:4d:7d:c0:b5:47:84:7c:b4:a7:e0:
                    1a:35:13:1f:d7:fe:a4:92:b1:e0:89:f1:aa:b3:e6:
                    1f:0d:5e:e3:56:74:29:95:00:3b:52:d4:90:e1:43:
                    85:2b:2e:72:84:83:01:7a:d4:fe:9e:8b:6f:9d:5c:
                    6b:a1:18:7f:cb:65:84:c6:52:90:00:06:ea:3b:12:
                    63:d6:86:cc:d4:22:76:f7:80:40:54:13:36:2d:4a:
                    00:10:07:8e:4c:7a:74:a3:bf:11:f7:82:b0:e8:76:
                    15:7a:e1:0d:24:22:c2:19:83:26:54:0e:34:f7:28:
                    95:73:aa:74:7a:97:7f:1b:d5:35:60:08:74:87:d0:
                    72:1f:74:18:d5:d1:bd:eb:ba:50:bf:b7:e3:28:86:
                    df:4d:49:12:cd:ed:c2:aa:47:83:96:3a:38:e6:3f:
                    df:27:9e:f1:97:6c:88:97:8f:b3:02:61:fb:60:cc:
                    c5:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:66:2F:20:6C:E9:04:0A:96:BA:69:B8:59:34:B9:FE:21:B7:1B:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/1aa1853b-051b-3227-8558-158cc39ee641.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.224.78.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:26:57:e1:ad:8d:29:da:08:f9:05:ae:a2:fb:bc:e3:2d:08:
         14:11:9e:1a:06:dc:73:d0:85:8c:23:39:a6:4e:81:78:e4:54:
         cc:99:b4:6c:03:fa:ad:99:3c:ce:a3:86:ee:c3:45:8f:66:c8:
         eb:1e:40:aa:1a:07:07:a3:43:59:5b:a1:67:7f:e8:19:6d:09:
         30:a8:ac:00:2b:5d:1c:55:17:81:73:af:d6:b0:c6:34:8b:a6:
         9f:d4:70:8e:d2:2e:02:88:f6:83:31:2e:5e:f0:7e:a2:bc:c6:
         e0:37:78:b3:e1:a4:53:fb:a1:c6:22:d1:8d:a1:21:d6:e4:e6:
         8a:07:b7:f3:95:24:ee:d9:16:42:e1:73:fd:26:81:43:05:e0:
         e0:e8:0a:3f:ed:6b:fc:f6:7c:0b:bf:96:48:34:42:a0:83:4f:
         ac:39:e9:86:48:7e:6f:e0:61:60:1d:e4:d5:e2:c3:d4:c8:ee:
         d2:44:83:47:d8:2e:fd:17:99:d1:44:80:f1:c6:14:70:f6:0f:
         a1:20:cc:96:ad:e7:d4:09:6d:14:ca:d3:f0:35:e6:d1:d7:c4:
         5e:0d:c3:03:3b:e7:54:65:da:52:5b:47:e9:95:6f:18:3c:77:
         91:6b:24:74:55:0b:c9:a5:28:ba:77:15:de:ec:ab:e3:4a:d5:
         6c:e9:ce:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:00 2024 by rpki-client on console-fra.rpki-client.org