Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/a3f2d06a-a9ad-3dac-84c3-f02e1a98044d.roa
File:                     a3f2d06a-a9ad-3dac-84c3-f02e1a98044d.roa (raw, json)
Hash identifier:          8pKO5s8cQrA+4d7CEBxDstn9smFCoEOfzwNV4Xrj3fw=
Subject key identifier:   D6:74:BE:73:37:88:D1:5A:78:64:C8:F2:F6:9F:78:1D:B7:C4:80:CE
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285846653DD7819D0270FCADFB5B00
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/a3f2d06a-a9ad-3dac-84c3-f02e1a98044d.roa
Signing time:             Mon 01 Jul 2024 16:54:16 +0000
ROA not before:           Mon 01 Jul 2024 16:54:16 +0000
ROA not after:            Sun 29 Sep 2024 16:54:16 +0000
asID:                     214616
IP address blocks:        174.140.198.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 09 Jul 2024 18:09:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:65:3d:d7:81:9d:02:70:fc:ad:fb:5b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jul  1 16:54:16 2024 GMT
            Not After : Sep 29 16:54:16 2024 GMT
        Subject: CN=32912890-01bd-4bfd-bb90-3efa40f221a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:35:44:84:3a:7f:cc:f4:c0:53:15:bc:09:43:
                    27:9f:60:a0:90:ea:25:24:3d:43:e6:b1:01:71:b7:
                    ab:21:ee:1a:71:7b:68:6e:4b:55:1e:15:33:fb:1b:
                    3a:6e:fa:54:5a:31:33:b8:13:db:cb:15:32:97:5b:
                    25:a1:74:60:78:81:c9:c5:bb:1f:98:0f:e7:19:86:
                    59:85:5a:a9:c1:16:88:49:65:0d:83:a5:df:28:ee:
                    d7:da:47:63:10:35:1c:0b:0f:54:86:a8:32:bf:de:
                    1d:44:5b:be:7b:e4:c6:d4:7f:a8:08:bd:87:ef:c4:
                    5d:d0:de:2c:07:ca:ca:22:e3:35:ef:62:db:c7:f0:
                    fe:91:f5:50:b6:7a:5c:0c:91:2e:c9:03:55:38:ad:
                    e1:be:81:ba:dc:75:ce:6a:52:c0:b1:66:5f:db:d7:
                    88:54:3c:16:3b:91:6b:da:fc:78:ec:a6:c8:08:22:
                    82:b3:0d:c9:f0:a7:dd:aa:5b:b8:0d:04:15:33:46:
                    bd:b6:5d:6b:23:a9:f4:38:a5:0c:5e:6e:de:7e:9b:
                    24:a0:2c:27:37:a5:e1:da:e0:8b:a4:c5:8f:77:6e:
                    2a:7c:5b:b3:1a:28:68:fd:8a:b0:71:33:73:c1:59:
                    fb:ba:7f:a7:d4:c7:2a:81:e0:fc:ce:a2:b9:91:fa:
                    e7:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:74:BE:73:37:88:D1:5A:78:64:C8:F2:F6:9F:78:1D:B7:C4:80:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/a3f2d06a-a9ad-3dac-84c3-f02e1a98044d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.140.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:41:d6:4d:7e:d6:ae:23:ef:d8:d0:1c:09:49:cc:bf:ad:af:
         97:fa:b3:46:56:c9:ee:6f:26:d6:13:43:cf:91:1a:7e:d8:82:
         39:17:55:7d:75:68:c3:2b:bc:9d:29:43:46:40:67:13:a2:7c:
         49:49:f9:26:9a:e2:12:30:13:30:3c:0e:6c:fc:e6:c4:fb:cb:
         e7:0e:39:ce:1d:43:ce:d2:d7:97:c4:0a:70:b1:7b:3d:94:dc:
         34:a9:74:e8:fc:96:f5:6d:38:dd:42:f5:e4:05:3c:9d:b1:16:
         2b:3d:22:04:d5:da:9e:68:d2:22:f1:0d:45:a3:6b:7b:2d:d0:
         97:b8:8b:d0:61:d3:bb:13:e9:75:55:f4:33:3d:13:e3:59:61:
         2a:37:b0:81:00:e3:0f:d2:64:0e:a1:f1:d5:fd:5f:b7:a4:3b:
         3b:31:a9:59:49:6e:95:4b:2e:c6:6f:b3:32:92:ef:50:ee:29:
         ae:93:3f:3e:1a:ef:63:bb:b7:22:0d:9d:a8:41:28:9f:0b:84:
         98:08:6c:73:a4:b6:e2:3e:71:df:8a:aa:33:4c:fa:b3:fe:c2:
         d5:4b:d8:9c:cb:8a:61:f9:5d:38:97:28:e6:3f:e8:4f:74:5d:
         80:01:34:7d:75:69:bf:0d:45:c6:55:4d:99:83:d4:a2:c0:a9:
         b0:06:43:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 9 21:07:17 2024 by rpki-client on console-ams.rpki-client.org