Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/93a51dd2-10fa-3cb2-9ad8-f9cdf8e9afc2.roa
File:                     93a51dd2-10fa-3cb2-9ad8-f9cdf8e9afc2.roa (raw, json)
Hash identifier:          AtVZeAHs9LxS9lJF3vjR9iE7tuP1wDDjnnPR7wFn76Q=
Subject key identifier:   4C:1B:AC:E3:E3:E2:41:B4:AB:0F:B9:4E:90:D2:F9:C8:57:B2:EB:D9
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584529F5D4DA7E28216459E83B20
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/93a51dd2-10fa-3cb2-9ad8-f9cdf8e9afc2.roa
Signing time:             Sun 10 Mar 2024 18:29:32 +0000
ROA not before:           Sun 10 Mar 2024 18:29:32 +0000
ROA not after:            Sat 08 Jun 2024 18:29:32 +0000
asID:                     272367
IP address blocks:        173.211.125.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 19 Mar 2024 15:57:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:29:f5:d4:da:7e:28:21:64:59:e8:3b:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Mar 10 18:29:32 2024 GMT
            Not After : Jun  8 18:29:32 2024 GMT
        Subject: CN=1b8b65c4-9ec1-4b69-8c68-6fb2e041597b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:25:7e:98:54:ff:bc:4d:14:b4:d8:01:15:ad:
                    36:69:0d:ac:73:42:be:90:1c:7c:57:2e:79:39:1b:
                    f7:45:ad:21:61:97:3e:e5:25:1a:c3:62:21:56:e9:
                    ff:91:4e:b0:0b:b1:d8:47:5c:d5:41:38:63:6f:36:
                    86:59:23:28:cb:83:0b:18:a9:bc:30:7e:bc:89:90:
                    85:c2:4a:d2:bd:20:f6:de:34:73:92:74:9d:93:17:
                    e9:9d:5c:0f:40:2d:df:a2:34:36:5b:bf:3a:ed:1f:
                    7a:b2:d2:81:08:78:ed:0d:8d:20:9d:69:b5:95:55:
                    c5:b2:ba:65:b1:22:12:bd:41:6a:4f:90:ee:ad:30:
                    da:f6:a5:d1:65:c7:11:ed:10:60:1b:0b:2a:02:a0:
                    9d:d7:8d:c0:47:6d:26:c6:a7:06:2c:3c:dc:4d:79:
                    96:f3:33:c8:d1:eb:80:dc:51:81:1c:69:6d:04:e0:
                    72:97:d1:58:8b:4e:35:a2:9e:9b:bf:1b:67:79:64:
                    e5:49:f5:82:41:35:8b:dd:ca:4a:85:26:c4:76:97:
                    bb:ee:4e:22:ea:ab:d1:a6:be:2b:ad:f0:77:2f:29:
                    63:10:dc:e0:ee:58:92:9c:f8:22:91:72:39:30:d9:
                    8a:c7:db:23:76:d2:f9:55:49:97:b9:48:c9:03:e1:
                    0b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:1B:AC:E3:E3:E2:41:B4:AB:0F:B9:4E:90:D2:F9:C8:57:B2:EB:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/93a51dd2-10fa-3cb2-9ad8-f9cdf8e9afc2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.211.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ce:97:4f:cb:90:12:ac:ee:a9:63:27:be:e7:ed:41:01:9c:e2:
         f7:d3:31:cd:16:1e:44:6d:52:bd:cc:6f:21:c6:ba:45:92:a7:
         a5:27:c3:db:17:af:64:19:e3:90:ba:44:f2:34:6d:e2:a4:9e:
         ad:08:18:ec:4b:4d:a5:aa:1c:bd:02:25:37:3d:0c:b8:89:75:
         38:03:37:37:a1:b2:b7:6b:73:d8:3d:aa:38:90:22:83:3f:fc:
         bf:71:c4:e5:ec:81:3e:34:25:ff:7d:68:0c:1d:60:19:39:8d:
         af:fc:77:3a:46:5c:90:42:13:db:fb:45:a4:c3:3c:04:e1:e7:
         89:5f:7e:f2:06:41:b0:c9:c2:76:87:bf:81:20:b9:a9:fc:22:
         58:13:84:ff:87:a4:d7:42:dc:3a:16:c9:a4:3a:43:30:d5:ca:
         6b:a3:6e:0a:18:c1:0c:24:11:3b:1a:0a:c4:f9:87:3f:8b:3a:
         34:ea:f9:5e:4e:cd:6e:d2:5b:9a:dd:af:56:3e:cc:11:36:a9:
         2e:1c:3b:39:bd:17:f0:c9:6e:fc:89:46:df:56:82:78:99:1d:
         a7:42:2c:96:f2:12:f3:22:62:27:2f:f6:fd:21:cf:5b:eb:6c:
         3e:73:24:38:5d:a9:c4:bb:14:31:f8:e1:b7:c2:89:00:1f:96:
         af:77:6a:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:01 2024 by rpki-client on console-fra.rpki-client.org