Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/56361bbf-5464-3de9-8b30-23ddfa9e0f50.roa
File:                     56361bbf-5464-3de9-8b30-23ddfa9e0f50.roa (raw, json)
Hash identifier:          5NK+tH5NNPNSPNEpSoJYu1Twndx2C6+m2DtRc09sUks=
Subject key identifier:   D2:25:F4:D6:78:62:F9:17:71:AB:1C:C7:D2:CD:39:24:F4:83:29:D2
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F432858467BB901A215AE51D8E7960400
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/56361bbf-5464-3de9-8b30-23ddfa9e0f50.roa
Signing time:             Tue 09 Jul 2024 18:10:12 +0000
ROA not before:           Tue 09 Jul 2024 18:10:12 +0000
ROA not after:            Mon 07 Oct 2024 18:10:12 +0000
asID:                     834
IP address blocks:        174.140.198.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 12 Jul 2024 19:37:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:7b:b9:01:a2:15:ae:51:d8:e7:96:04:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jul  9 18:10:12 2024 GMT
            Not After : Oct  7 18:10:12 2024 GMT
        Subject: CN=3ede5011-fe8f-48ee-b6c5-08c463423f18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:69:fd:81:3a:e0:47:95:d2:cc:93:b4:e3:08:
                    95:34:58:ed:da:ae:90:b2:ed:3a:62:ca:a2:c2:81:
                    40:c2:f9:03:01:4e:e5:a6:46:8d:50:e9:65:45:d4:
                    fc:09:10:39:c7:72:01:ed:62:12:d0:57:4e:40:41:
                    c5:55:a9:e0:64:06:4b:2f:55:41:98:06:d6:17:c3:
                    17:e9:ac:30:74:8e:13:c5:a4:fb:76:5d:51:0c:ab:
                    b7:2a:74:ba:ad:d2:26:a7:20:62:6a:f5:2b:67:83:
                    98:a6:75:05:72:6c:15:85:ea:ab:87:04:ff:2e:97:
                    dd:9c:6f:f1:de:2c:37:52:e0:49:47:8f:a7:02:50:
                    24:f2:3b:45:be:00:f1:91:62:27:27:ef:40:d3:73:
                    e9:36:8d:65:84:db:2d:bf:a2:a8:4c:8a:a1:1f:d5:
                    dd:75:0b:ce:ef:09:d8:3a:12:ff:44:1c:ac:8b:83:
                    b7:c0:0d:99:bd:ce:cb:57:6b:4f:10:56:47:1c:a4:
                    05:af:c7:dc:c0:e7:f3:b3:8a:36:94:a4:44:9d:24:
                    ee:d4:af:c9:f9:db:45:8c:54:5b:32:ea:42:43:ad:
                    5f:57:11:67:ec:5a:21:13:ed:68:18:61:d0:f6:4b:
                    ff:e8:1e:c7:9f:e4:09:e2:1d:57:06:f2:c3:b9:76:
                    1d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:25:F4:D6:78:62:F9:17:71:AB:1C:C7:D2:CD:39:24:F4:83:29:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/56361bbf-5464-3de9-8b30-23ddfa9e0f50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.140.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:70:33:74:05:fc:c7:f8:5a:12:7e:16:30:c7:96:e0:7b:93:
         82:db:74:3a:0a:d1:b3:aa:3d:4f:13:35:38:13:2f:40:d8:24:
         65:a4:d0:aa:43:76:f8:45:c2:9e:fa:d9:63:65:cd:dc:76:de:
         66:f5:bf:fc:73:75:09:36:6a:df:34:99:bd:05:99:4d:47:66:
         17:a0:e1:c2:36:71:1e:c4:ac:45:ca:20:39:4f:ca:23:75:3b:
         ee:24:07:18:fc:d3:24:6e:da:35:a9:ae:ca:c5:72:13:4b:e7:
         ea:7c:0d:8f:69:18:a6:b0:03:6d:07:e1:8a:dd:b3:4b:7d:7f:
         97:c1:19:08:67:68:cd:63:67:1e:be:60:75:ff:8a:35:6e:24:
         12:77:a7:ad:2e:02:2c:c4:0e:dc:ed:6f:6c:5c:d7:aa:1e:3f:
         c1:b4:e8:c1:52:94:35:bd:d3:70:13:88:3a:ea:c0:50:c8:b9:
         6e:28:41:cd:47:dc:88:94:7d:78:db:39:90:b1:6a:e5:97:ec:
         0e:64:5c:e6:c0:ca:ff:f0:01:64:08:c9:89:9f:67:ed:46:e9:
         0c:8c:22:4e:ca:24:17:aa:3c:52:fc:a3:49:21:af:c1:5d:38:
         d4:80:a5:8b:d5:23:f6:84:eb:b0:0c:f5:9a:96:d1:8e:a9:6d:
         1f:3f:71:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 12 21:15:30 2024 by rpki-client on console-fra.rpki-client.org