Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/c6e8bcc4-0ad6-3fe0-9bb8-0b357abca2f0.roa
File:                     c6e8bcc4-0ad6-3fe0-9bb8-0b357abca2f0.roa (raw, json)
Hash identifier:          XydHY6JHArn/rs6OHWgaj03G9DGckobfFl1rcga5vrE=
Subject key identifier:   EB:DE:F8:FD:EA:C3:73:49:52:24:81:C2:27:FA:1D:BA:E0:8F:B4:89
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285844C2AA817107DFD12B33A61580
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/c6e8bcc4-0ad6-3fe0-9bb8-0b357abca2f0.roa
Signing time:             Fri 02 Feb 2024 18:29:30 +0000
ROA not before:           Fri 02 Feb 2024 18:29:30 +0000
ROA not after:            Thu 02 May 2024 17:29:30 +0000
asID:                     36639
IP address blocks:        206.206.100.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Mon 01 Apr 2024 06:25:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:c2:aa:81:71:07:df:d1:2b:33:a6:15:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Feb  2 18:29:30 2024 GMT
            Not After : May  2 17:29:30 2024 GMT
        Subject: CN=ea9d4e05-6e95-490a-9576-b65efb6b54f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:9f:78:c1:1a:37:0b:6c:35:9d:c8:83:3c:f4:
                    87:e3:e9:45:96:31:18:41:d3:f6:da:c4:58:2d:cb:
                    1c:fc:91:d9:0d:62:ad:79:35:17:92:65:27:f7:b7:
                    c1:f0:8d:3b:e4:e3:62:24:26:76:e1:80:e1:fa:03:
                    11:89:ac:d6:65:73:a1:ca:04:bc:db:97:ac:10:d2:
                    4b:95:33:4c:d1:b9:22:cb:03:12:5e:86:f6:98:f2:
                    7a:40:37:58:d8:26:61:d8:19:cd:f7:4c:d7:2b:50:
                    ea:8a:a3:78:a2:64:93:28:e9:45:d0:0d:6a:8a:1b:
                    e7:13:b3:a5:1f:c3:a6:f5:b8:35:b5:01:8f:8a:ee:
                    8d:ee:34:77:30:00:2f:f1:15:ed:bd:f3:31:eb:f2:
                    49:d5:c7:9c:7f:1a:29:05:2f:c9:d2:b4:7c:11:70:
                    8e:77:5c:58:cf:84:cb:64:54:b6:5f:20:db:3c:fa:
                    ba:cf:78:7d:4d:f3:38:05:c8:2c:14:d8:4a:d3:87:
                    f8:62:63:b2:30:ab:40:a1:62:ed:c5:70:de:a0:36:
                    4e:69:e6:b8:69:2a:77:81:48:90:74:e3:36:34:87:
                    08:8e:27:eb:2a:fb:48:cb:65:41:30:42:fb:89:5e:
                    70:49:1c:92:43:00:c5:72:3a:64:c4:c4:b8:78:ff:
                    f0:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:DE:F8:FD:EA:C3:73:49:52:24:81:C2:27:FA:1D:BA:E0:8F:B4:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/c6e8bcc4-0ad6-3fe0-9bb8-0b357abca2f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.100.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:cf:6e:16:b0:2e:56:77:30:8e:1e:21:48:15:e0:eb:5b:65:
         de:34:7f:ce:64:59:38:23:b5:06:9b:d8:a3:7d:31:0b:c8:2f:
         31:e3:bc:87:ae:b3:a2:07:e6:c2:a0:ef:da:5a:0a:48:b8:84:
         bc:3d:aa:78:ad:05:1c:35:c4:de:99:85:4e:0e:bd:5c:fe:db:
         29:0a:5f:79:26:a2:f9:c1:db:ff:e6:0f:4e:8a:6d:37:16:12:
         a8:d8:c1:76:ea:0e:02:25:28:0e:8c:71:d8:45:86:55:d6:34:
         f5:19:a1:65:e1:9f:c2:1f:41:2a:90:e1:b7:01:ff:0a:0f:57:
         43:86:c7:c3:8f:a3:28:94:82:47:d8:20:51:6d:25:1a:01:4e:
         fc:41:03:36:81:ab:1e:92:78:76:bb:f9:d4:a1:17:65:0d:9c:
         64:f4:79:9f:6d:43:90:fd:ee:31:b0:82:8b:21:64:ae:a4:d3:
         77:29:02:c4:9f:0d:01:f3:37:94:52:44:58:0f:90:60:05:0b:
         be:ba:98:7d:74:a8:2a:9f:29:42:20:82:6d:56:de:52:01:a4:
         91:20:61:e9:0e:2c:16:05:a6:53:bc:7f:0d:2c:18:ac:e8:c2:
         27:de:f9:28:77:1d:54:3b:8b:c9:d5:85:01:5a:6f:cc:33:5a:
         bf:7a:7c:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 1 07:35:33 2024 by rpki-client on console-fra.rpki-client.org