Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/8b730c5c-8535-3add-b457-730f1ee19f98.roa
File:                     8b730c5c-8535-3add-b457-730f1ee19f98.roa (raw, json)
Hash identifier:          bcHp4+ETNDqCoIdSgbICzhW+7IMJOLzfEFu0rH5dL1s=
Subject key identifier:   09:D8:1F:C8:A1:6F:73:A1:B3:46:4D:BC:2A:62:F6:1B:21:91:9A:74
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285843974FF335C45FB87ECB4EFE80
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/8b730c5c-8535-3add-b457-730f1ee19f98.roa
Signing time:             Wed 18 Oct 2023 13:00:19 +0000
ROA not before:           Wed 18 Oct 2023 13:00:19 +0000
ROA not after:            Tue 16 Jan 2024 14:00:19 +0000
asID:                     212448
IP address blocks:        216.122.190.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:97:4f:f3:35:c4:5f:b8:7e:cb:4e:fe:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Oct 18 13:00:19 2023 GMT
            Not After : Jan 16 14:00:19 2024 GMT
        Subject: CN=31363f41-1273-4065-af3e-c137938da039
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:95:81:fb:59:f3:c8:43:ae:1e:6d:28:f5:05:
                    47:5a:32:e4:1e:6a:62:af:6a:f8:2c:93:28:f2:31:
                    98:0d:b9:87:31:13:20:70:40:c3:2b:8d:63:f2:9d:
                    86:31:bc:f4:8b:dd:42:19:94:0f:13:0b:71:13:39:
                    25:97:86:c2:f0:34:a3:31:b6:77:cf:d8:2b:a4:b7:
                    f1:12:4b:08:22:6a:06:6e:70:9e:30:48:a4:0c:2a:
                    9c:c2:2a:ca:e5:47:38:3f:9f:f5:13:b0:aa:92:b8:
                    9d:d5:16:4a:eb:92:35:b1:3f:5c:66:b9:4c:29:14:
                    ad:86:30:9f:d4:01:74:c8:96:8f:a9:42:07:6a:98:
                    df:80:2e:65:12:3b:c4:fa:a0:82:50:e5:29:09:c3:
                    9c:df:47:5c:d5:48:06:ad:ba:b8:dd:7a:7e:3f:de:
                    ee:0f:02:71:1f:b0:bb:7a:be:81:27:64:36:57:a1:
                    1f:f2:b8:fd:28:fd:03:48:f3:e4:b0:e9:73:70:d9:
                    8e:42:9e:2c:8e:c0:6f:ad:65:9c:0d:a8:4b:c6:28:
                    d3:2d:dd:84:c5:7f:af:04:45:cd:e0:21:db:f1:f9:
                    dd:d0:c5:df:e9:b6:3c:b3:7f:f3:91:b5:52:fb:09:
                    d7:e5:49:37:88:76:22:35:c0:93:4d:1c:c1:2a:35:
                    57:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:D8:1F:C8:A1:6F:73:A1:B3:46:4D:BC:2A:62:F6:1B:21:91:9A:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/8b730c5c-8535-3add-b457-730f1ee19f98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.190.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:7a:9e:47:8f:d6:70:38:a0:c2:8d:82:cc:e0:6b:c4:58:c8:
         e2:4a:ec:e6:fb:d1:42:7c:6e:ab:8e:d1:b6:81:d0:a1:d9:80:
         44:88:4d:1e:ca:74:16:e3:84:16:6d:ed:8e:61:36:8f:bb:6e:
         aa:d1:92:5f:67:e3:68:09:d4:93:55:55:d5:f4:d6:ff:0f:78:
         0a:ae:97:b5:77:86:de:1b:3a:d9:e1:8c:75:19:27:30:08:43:
         f9:69:34:1c:4c:02:dc:a8:b6:7f:b6:26:91:69:14:ec:11:06:
         15:b0:d0:e3:7e:d3:83:5f:73:55:92:d5:74:63:5d:bf:93:c9:
         0d:51:68:26:68:e7:d8:07:07:53:ca:62:94:bf:55:0e:d2:01:
         82:5a:20:fd:ae:c7:00:e5:37:a2:5a:3a:eb:4e:62:24:f6:c7:
         c7:14:0f:de:3a:f6:ec:8b:0e:dd:e5:22:45:49:9b:f0:a9:45:
         5b:3a:7b:66:8a:c1:b2:42:18:ed:95:98:0f:14:94:2a:c4:66:
         25:00:ea:40:c2:5c:8b:8c:8d:21:18:65:08:c9:0a:34:4c:f7:
         67:87:31:4b:5e:92:05:2b:43:be:9e:c2:ea:5b:2b:04:b6:d5:
         f7:cd:e2:6c:8e:b7:39:34:30:1f:7e:a0:d8:70:52:16:c1:76:
         57:45:d9:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 06:30:46 2024 by rpki-client on console-fra.rpki-client.org