Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/96151e66-e2a5-3135-b35e-6b5f26290249.roa
File:                     96151e66-e2a5-3135-b35e-6b5f26290249.roa (raw, json)
Hash identifier:          31HjQOUMQjZcsPEtWNGqLNAjOoA8emRdJKf/NSr2fv0=
Subject key identifier:   24:B1:B2:05:D8:C4:FA:8B:1C:79:75:F4:40:3A:24:B3:7F:5B:34:DF
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584225685F186DB4BDBC8145A000
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/96151e66-e2a5-3135-b35e-6b5f26290249.roa
Signing time:             Thu 08 Jun 2023 01:00:28 +0000
ROA not before:           Thu 08 Jun 2023 01:00:28 +0000
ROA not after:            Wed 06 Sep 2023 01:00:28 +0000
asID:                     834
IP address blocks:        206.206.89.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:25:68:5f:18:6d:b4:bd:bc:81:45:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jun  8 01:00:28 2023 GMT
            Not After : Sep  6 01:00:28 2023 GMT
        Subject: CN=d38fda38-045b-4764-a8a6-3467d07f1787
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:1f:e2:17:77:07:6f:7d:97:b7:69:6e:c8:23:
                    09:b8:65:b5:a4:b0:df:da:3d:c8:43:62:0d:c2:ac:
                    8f:ec:1b:98:72:ba:f1:2c:c5:dc:95:22:7f:c0:05:
                    e4:19:8a:7d:d4:7f:15:00:f8:fe:2c:7d:bf:59:8f:
                    a7:58:fb:e3:29:be:cc:c2:a4:29:b1:fa:20:20:a3:
                    ab:6b:3e:88:fd:62:25:8b:30:7d:28:a9:51:f2:ae:
                    f4:37:b3:0a:59:58:af:2c:0a:4e:92:7b:fa:88:17:
                    ef:1e:94:d8:17:37:0b:57:a2:59:5d:94:70:0b:18:
                    10:fc:21:c5:db:a1:b0:b4:15:4f:95:13:38:4b:db:
                    d9:cb:30:a2:de:96:56:cc:be:65:29:54:63:db:b4:
                    54:34:c3:b8:47:fb:84:bb:4f:bb:d6:c7:8a:de:8a:
                    cb:2a:3b:96:29:98:80:ce:f5:eb:50:ab:a9:22:3b:
                    87:af:57:1c:ac:c3:77:2c:9d:b7:c2:26:00:6e:88:
                    dc:15:b1:97:29:08:9c:de:06:56:6e:6e:f6:08:31:
                    fc:f0:9e:fd:d9:10:2d:42:86:b0:bc:06:1b:4f:42:
                    29:2c:70:9f:1c:98:d5:18:2a:5f:95:84:53:32:e9:
                    cd:c6:15:76:79:de:1c:0f:af:d9:2c:15:29:d9:71:
                    62:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:B1:B2:05:D8:C4:FA:8B:1C:79:75:F4:40:3A:24:B3:7F:5B:34:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/96151e66-e2a5-3135-b35e-6b5f26290249.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d8:8b:7f:8e:a8:22:d9:e1:ea:d5:78:2a:68:6e:de:93:41:53:
         8c:c2:e7:0d:7f:13:4e:23:09:58:1d:5f:b6:e4:95:ed:68:d4:
         8c:2f:41:63:6a:1e:84:f7:83:c9:a2:34:82:1e:bd:c1:cf:89:
         69:65:0c:34:84:b7:f5:bc:98:8a:e3:bd:9d:7f:21:05:38:b5:
         83:c4:45:c9:63:8b:47:dd:dd:08:e3:8d:d3:9f:53:38:92:26:
         d5:43:98:8e:ab:de:f2:10:bb:84:aa:5b:04:ca:ed:c1:e6:e5:
         a5:b3:f4:5c:50:38:4f:a9:15:b5:d9:2f:24:f8:e0:32:a2:34:
         a4:aa:3a:d3:1e:6f:17:a1:6d:ef:b9:fb:96:e2:f4:eb:36:72:
         0d:1a:d2:38:9f:3d:04:96:c7:9d:8a:c5:c3:c3:45:90:46:80:
         b9:4a:b0:d0:64:f8:ce:0a:1e:80:43:28:ae:ca:84:10:7e:e5:
         f6:aa:6d:df:b2:21:01:78:1f:31:07:dc:d6:b8:81:f1:6d:3e:
         c7:d0:db:35:37:18:34:91:51:c4:ee:a2:67:01:78:18:60:4b:
         66:d4:a4:0c:a2:a0:09:b0:ce:8e:be:d0:23:e6:0e:65:7d:a3:
         2b:a9:6d:f6:2f:d1:05:a4:06:20:85:be:6d:0f:3c:5a:de:92:
         39:de:5a:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:27 2023 by rpki-client on console-fra.rpki-client.org