Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/eae1c204-38fa-34b7-b8ed-677d10ca348b.roa
File:                     eae1c204-38fa-34b7-b8ed-677d10ca348b.roa (raw, json)
Hash identifier:          qO/fvlRBzVhJAfsslAEvZfdfVR7AuBxFQcKJPW1Shqg=
Subject key identifier:   C6:33:BF:DE:69:2A:8F:85:47:27:12:00:D8:87:7D:84:05:00:B9:5E
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285843AE025CD9FF6B6025F7C82280
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/eae1c204-38fa-34b7-b8ed-677d10ca348b.roa
Signing time:             Thu 26 Oct 2023 16:07:37 +0000
ROA not before:           Thu 26 Oct 2023 16:07:37 +0000
ROA not after:            Wed 24 Jan 2024 17:07:37 +0000
asID:                     140902
IP address blocks:        216.107.138.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:ae:02:5c:d9:ff:6b:60:25:f7:c8:22:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Oct 26 16:07:37 2023 GMT
            Not After : Jan 24 17:07:37 2024 GMT
        Subject: CN=f82112cf-4364-4f66-b988-1cb3afd1bac6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:aa:15:42:9e:bd:2e:66:67:4e:42:2a:3d:3c:
                    e7:3b:1c:6f:87:14:c9:e8:88:e3:c0:f1:63:69:c3:
                    ec:52:b5:5d:e5:e8:7d:27:7f:8d:f6:55:a2:c9:1f:
                    0f:12:e7:b5:2d:fd:2d:30:a7:b3:62:7c:c6:18:4c:
                    55:e5:f8:15:9b:7c:ce:77:a3:e9:e7:c5:90:63:85:
                    78:fa:a0:5f:e6:ec:d0:1c:ff:c5:2d:0c:54:eb:d3:
                    6c:db:b1:fd:fe:c8:9e:16:26:db:b1:d0:ed:7e:dd:
                    4e:c3:c9:c2:8e:93:25:47:e1:54:55:7b:8a:ab:14:
                    b6:11:d7:72:bb:a2:1b:d2:ee:10:f8:9b:d5:31:24:
                    41:f3:0e:a2:8d:dd:16:54:2f:f2:b6:40:50:51:87:
                    4e:60:fe:aa:b7:c0:75:a9:1d:e4:ce:7b:0e:cb:5f:
                    8e:c8:41:fe:48:8a:6c:03:74:5d:2f:40:85:34:a3:
                    f6:61:e7:51:f6:36:b0:dc:76:ff:90:15:e6:93:45:
                    e8:e5:df:76:9b:fa:b2:d4:29:ca:a0:e3:f3:0d:96:
                    f7:07:7b:58:e9:ef:41:4c:79:2a:99:e5:60:a2:94:
                    6c:61:b5:54:dc:fa:5d:6d:47:79:89:e3:32:2b:06:
                    de:92:94:3e:16:88:22:24:3e:08:4b:8b:1e:53:77:
                    78:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:33:BF:DE:69:2A:8F:85:47:27:12:00:D8:87:7D:84:05:00:B9:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/eae1c204-38fa-34b7-b8ed-677d10ca348b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.107.138.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:a7:c4:c0:4a:c7:0f:5f:03:42:d8:1d:bf:31:e4:df:17:d8:
         f1:3b:85:67:45:8b:ef:91:73:36:a7:ed:18:08:a7:b6:b5:73:
         70:7e:89:60:22:d9:f0:f4:90:59:71:db:09:82:06:50:85:56:
         f7:33:9c:1f:d4:1e:c4:81:08:9f:ec:b4:27:dd:aa:99:a0:1c:
         94:b5:eb:ef:29:c0:ce:c1:55:d7:88:bc:dd:d1:f1:b3:4d:96:
         58:1a:e3:87:dd:5f:cf:0c:ca:15:ac:ed:93:2d:4e:52:03:fb:
         12:74:0c:fd:47:d0:86:67:0a:5c:15:2e:16:15:1c:8e:25:db:
         3b:a7:2f:a3:38:27:07:62:4e:0a:ee:08:08:d4:d5:35:bb:90:
         de:93:b9:58:e3:fa:18:94:d9:58:a7:db:62:5c:9f:07:27:6b:
         44:87:c6:e4:99:d5:38:b6:19:7c:0e:35:cc:04:6e:0b:06:8a:
         b2:2b:8d:f9:ec:d0:94:57:f1:07:77:21:62:5d:73:ea:eb:5f:
         fc:aa:6f:00:3b:3c:73:b3:f6:20:e1:b9:74:26:53:b5:ff:32:
         b2:57:24:af:22:64:b3:b6:57:e8:18:78:95:c6:7a:e6:c0:0f:
         e3:dd:24:01:be:d2:10:ba:e7:ae:65:ff:2d:4e:4f:6c:f8:91:
         69:53:ef:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 25 19:49:29 2023 by rpki-client on console-fra.rpki-client.org