Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/37f9d10d-7c54-31ec-ac55-19270493670e.roa
File:                     37f9d10d-7c54-31ec-ac55-19270493670e.roa (raw, json)
Hash identifier:          iWiLKWcdJC05Qv7Pt0KAos4qMlXNytd6IOdlcxKQzyM=
Subject key identifier:   CA:38:D8:EF:72:63:19:97:BB:BB:8E:97:CB:20:83:6B:9A:E4:54:51
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F432858455A2D85810F08208C76143E00
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/37f9d10d-7c54-31ec-ac55-19270493670e.roa
Signing time:             Thu 28 Mar 2024 01:00:27 +0000
ROA not before:           Thu 28 Mar 2024 01:00:27 +0000
ROA not after:            Wed 26 Jun 2024 01:00:27 +0000
asID:                     834
IP address blocks:        216.122.164.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 08 May 2024 16:29:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:5a:2d:85:81:0f:08:20:8c:76:14:3e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Mar 28 01:00:27 2024 GMT
            Not After : Jun 26 01:00:27 2024 GMT
        Subject: CN=071f1c1e-b6d2-4c5c-9821-fb61e774079c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:e2:37:e6:7b:95:45:f4:75:37:11:cc:34:65:
                    d1:cd:36:bf:e5:a0:e3:41:62:bd:06:34:91:d0:64:
                    e6:18:fc:02:4a:cd:38:85:4b:1d:5a:29:63:20:8c:
                    b5:f2:d0:ed:d2:35:70:5e:57:d9:f8:80:63:99:fa:
                    0b:f0:3a:e0:3d:9f:e9:7c:4f:be:3b:1e:fd:cd:1b:
                    eb:23:6a:49:77:7e:54:bf:59:49:42:ef:61:c5:e8:
                    9e:88:16:23:b1:5e:77:c5:19:58:cd:98:01:c4:e8:
                    68:f1:b5:20:d4:b5:26:59:fa:15:7a:ad:2a:94:6a:
                    82:b3:00:5d:66:82:13:b6:f5:e3:84:f3:12:da:7b:
                    94:b0:9b:8c:18:7b:16:f2:f1:e0:38:19:8b:b4:82:
                    51:69:21:41:1c:90:f9:24:cd:bb:f7:6b:7a:7a:24:
                    a2:04:75:5c:4e:4f:c8:eb:4b:9b:c2:ef:3c:21:ec:
                    11:e8:3d:fb:c2:6f:4e:6d:df:cc:ed:03:c1:7d:72:
                    2e:b3:fe:c1:fb:73:d1:98:68:0f:ce:ad:a0:0e:b6:
                    96:a5:3b:a0:88:31:80:cf:2b:de:da:47:4a:de:43:
                    3f:20:a8:01:2a:8d:0b:bd:52:6f:0e:e2:21:b4:51:
                    3e:3a:95:c3:e9:77:7e:8b:8f:5b:d1:90:ad:c4:04:
                    89:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:38:D8:EF:72:63:19:97:BB:BB:8E:97:CB:20:83:6B:9A:E4:54:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/37f9d10d-7c54-31ec-ac55-19270493670e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.164.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:3b:c2:9d:48:00:1b:39:fe:df:c1:04:20:99:2f:9a:a2:06:
         45:68:16:3a:3d:9b:2e:3e:4f:7e:25:1f:2e:6f:d6:b6:6d:5a:
         f7:2b:22:12:78:65:97:ce:09:03:c5:00:56:aa:87:01:4b:bb:
         b2:1d:a2:8f:0d:cf:4a:59:1f:5b:7a:78:57:05:1a:47:6d:c3:
         db:93:ce:24:ac:b1:8c:79:7c:37:6f:78:5c:c6:b4:91:aa:f2:
         d9:d5:b3:b2:3e:c9:23:74:af:73:74:37:cc:e9:af:0a:ac:99:
         5a:00:89:34:9f:6d:79:4d:9a:ae:1c:77:ab:34:49:3f:ce:3c:
         fa:76:ac:0c:2d:7f:7b:60:d4:4b:ef:b0:8a:d0:41:88:09:36:
         81:85:86:75:bc:98:49:87:62:82:60:a6:02:d6:80:1c:90:69:
         f5:26:55:e7:d9:48:de:2a:0a:9c:52:68:8a:57:44:2b:67:a7:
         ea:0e:02:6c:47:59:c2:17:d3:9f:e4:f7:ad:10:5f:36:43:71:
         7b:04:45:05:08:1e:1b:cf:24:66:75:30:86:0e:26:97:ca:5c:
         56:a5:7c:2f:f9:6d:0c:18:c1:46:4c:f9:e9:4f:28:a1:28:d7:
         9b:f7:99:ed:a8:55:b9:11:3b:56:c6:bb:29:98:8f:85:2f:99:
         c9:e4:bf:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:16 2024 by rpki-client on console-ams.rpki-client.org