Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/d2741dc0-8111-356f-bc7d-39d63b480e00.roa
File:                     d2741dc0-8111-356f-bc7d-39d63b480e00.roa (raw, json)
Hash identifier:          mXHXm76SikIJBn1fl4lD6/rXsTOalPCYOL2ubNQ78XU=
Subject key identifier:   3E:68:FA:51:A7:95:F0:9B:4E:20:62:CB:77:AF:19:AF:A8:FA:C2:EB
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285840366DD5F41F6D607C86D93180
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/d2741dc0-8111-356f-bc7d-39d63b480e00.roa
Signing time:             Tue 02 Aug 2022 17:30:08 +0000
ROA not before:           Tue 02 Aug 2022 17:30:08 +0000
ROA not after:            Sun 16 Mar 2025 04:00:00 +0000
asID:                     60721
IP address blocks:        45.40.97.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:36:6d:d5:f4:1f:6d:60:7c:86:d9:31:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Aug  2 17:30:08 2022 GMT
            Not After : Mar 16 04:00:00 2025 GMT
        Subject: CN=0a00e47a-e386-486a-8232-f599127f6e56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:7b:80:c1:b0:f6:91:29:c2:a1:7a:10:59:18:
                    db:00:a8:82:91:3a:24:00:a3:ff:ae:a6:13:87:ea:
                    0f:de:84:80:c7:4b:e0:9f:a3:c9:02:1c:47:a6:a0:
                    48:fe:98:39:51:af:69:de:08:73:3d:28:50:57:f2:
                    e8:2e:ed:38:54:1a:3b:17:c5:b2:5e:2e:a3:bc:97:
                    99:3a:e4:dd:f4:84:68:2a:9d:3d:a0:54:e5:df:7c:
                    bb:57:97:29:f3:6f:d7:87:80:4d:f4:0a:bd:9a:9c:
                    fd:11:d8:f2:74:36:27:77:85:32:9f:f0:b0:c7:4a:
                    77:c3:0e:f8:9f:3d:94:16:55:71:d2:ff:d6:47:04:
                    51:af:ba:71:3b:3e:fc:a7:f5:b0:eb:26:e8:7f:bb:
                    4d:43:ea:4b:ec:ad:84:37:28:d9:ac:86:a9:8c:cb:
                    e9:4e:9d:6e:fb:ac:c2:89:d5:cf:b9:6f:4a:d4:c0:
                    fc:ef:01:6d:ba:b8:9d:e2:ff:2b:e7:3b:05:d7:c7:
                    ab:48:41:be:9a:fc:8a:89:1d:39:27:6e:c2:12:1f:
                    02:1a:dc:ad:16:79:74:21:2a:cb:55:5b:66:fe:11:
                    95:16:20:b5:c7:dc:7e:00:03:b6:63:9f:13:11:34:
                    db:06:41:af:72:bd:0c:fa:6d:ce:cc:a2:c0:fa:02:
                    68:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:68:FA:51:A7:95:F0:9B:4E:20:62:CB:77:AF:19:AF:A8:FA:C2:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/d2741dc0-8111-356f-bc7d-39d63b480e00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.40.97.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:c1:9b:79:c7:1c:2b:ac:65:30:79:6d:5e:5d:7d:86:b5:d7:
         fb:45:2e:ea:c6:78:c0:3e:5b:aa:11:3c:24:7b:30:08:95:18:
         0b:c9:bb:29:54:0c:88:92:71:9d:19:76:18:33:fa:7f:8e:f5:
         b9:5f:92:cf:9f:9e:1a:64:84:cd:bf:10:48:10:6e:cd:1a:f2:
         d2:f7:c9:e7:76:d0:5e:c7:ee:1e:c3:ab:c7:3d:11:a8:cd:68:
         95:1b:1c:4a:69:f4:88:6b:6c:39:af:0c:34:7c:be:52:45:67:
         30:5a:37:ae:5d:ce:bd:af:bc:4b:8d:ca:98:a8:4c:d1:4d:f5:
         8f:c5:2e:af:8d:f0:47:cc:28:24:da:4f:af:60:c8:06:a0:59:
         ca:17:39:ed:e1:9b:03:3b:17:12:ef:6b:6f:d7:4f:1c:55:8a:
         6e:61:e2:7c:eb:ac:ac:39:44:b5:f3:8e:0b:69:23:07:41:c3:
         45:a9:85:8c:43:93:46:f1:6a:37:15:15:b5:96:28:33:b5:79:
         f7:0b:47:ac:d3:65:58:24:aa:e6:32:7d:79:44:20:fb:31:3f:
         1d:b4:f0:b3:6b:87:1a:2e:2f:58:9e:5f:31:48:cf:a5:8f:22:
         69:be:a7:c0:1a:e7:bd:4a:fe:22:5b:a0:6d:91:f8:be:96:31:
         ea:d3:62:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:28 2023 by rpki-client on console-fra.rpki-client.org