Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ed201a7b-d98b-3e35-ac8b-5c11cd157fb7.roa
File:                     ed201a7b-d98b-3e35-ac8b-5c11cd157fb7.roa (raw, json)
Hash identifier:          6iw4ZSB90O/nJ/bqEjonN/8jQgaESMIY4nMtZrnIBX4=
Subject key identifier:   DE:8A:84:CF:1D:2E:21:F2:76:02:F9:3C:CD:6A:39:D6:DF:84:E0:3F
Certificate issuer:       /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Certificate serial:       010D0C9F4328584309F7CF977009AEF4A0A51B00
Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ed201a7b-d98b-3e35-ac8b-5c11cd157fb7.roa
Signing time:             Sun 27 Aug 2023 12:00:00 +0000
ROA not before:           Sun 27 Aug 2023 12:00:00 +0000
ROA not after:            Thu 31 Oct 2024 04:00:00 +0000
asID:                     36492
IP address blocks:        209.107.180.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Fri 22 Mar 2024 01:11:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:09:f7:cf:97:70:09:ae:f4:a0:a5:1b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
        Validity
            Not Before: Aug 27 12:00:00 2023 GMT
            Not After : Oct 31 04:00:00 2024 GMT
        Subject: CN=8d8cff42-b104-4f27-9685-b7da3d5bc921
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:06:85:0b:42:2a:22:91:e2:69:c6:c0:c8:c7:
                    33:42:7f:bb:09:87:19:64:f4:2d:be:d0:76:65:14:
                    fc:0e:7e:17:57:21:fb:8b:40:f6:08:d3:cb:ed:61:
                    55:80:f2:b6:9b:20:fa:2e:ae:15:68:74:01:96:b4:
                    37:3a:9f:93:ac:a2:93:b1:51:13:ee:25:30:e0:dc:
                    41:7a:90:78:12:fb:87:80:b7:de:34:d4:24:0e:1d:
                    c0:25:b1:e7:5e:e6:f5:35:01:da:9d:04:08:02:dc:
                    55:39:cb:5c:34:3f:73:f6:f8:f9:cb:ee:26:c1:a0:
                    c1:4a:48:e2:c0:c4:b0:3b:60:0a:2b:cd:67:54:18:
                    59:cc:e6:8a:cf:b3:8e:3e:5a:f9:a9:dc:c6:bd:8a:
                    35:cc:1d:27:79:ae:e8:24:d2:50:74:b7:13:bf:ee:
                    c4:cd:16:55:cd:80:d2:95:5c:fc:a8:94:bb:7d:8d:
                    af:1c:1e:0c:6c:12:92:f6:29:9e:3c:c9:d1:79:b6:
                    c1:48:8a:bd:23:b8:5f:e5:47:12:64:73:6f:3c:43:
                    c5:d0:bf:55:d7:b0:38:d3:74:83:d2:de:87:a7:70:
                    f4:2b:d4:cc:cb:35:81:e6:70:a1:75:87:1d:a9:87:
                    b8:2c:5a:82:a8:18:a8:e4:e0:c1:1a:96:57:62:77:
                    a0:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:8A:84:CF:1D:2E:21:F2:76:02:F9:3C:CD:6A:39:D6:DF:84:E0:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ed201a7b-d98b-3e35-ac8b-5c11cd157fb7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl

            X509v3 Authority Key Identifier:
                keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.107.180.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ca:67:1e:91:62:41:2b:54:5d:5e:f0:d0:7f:30:13:67:28:83:
         7e:1b:4c:d6:1b:bf:7f:03:d5:c9:ca:37:10:af:81:65:4c:de:
         db:cf:9d:f7:24:c0:87:98:10:b8:e5:9e:fe:3d:c9:7a:07:2c:
         f3:13:9c:0d:5a:e2:19:b2:ba:3b:57:40:37:1f:b6:95:31:91:
         7a:1d:06:5f:57:25:f6:ed:ff:a2:13:ac:b5:52:a0:13:a3:6f:
         75:cc:fd:aa:f2:c9:30:ce:f6:5b:e3:9c:c3:ea:dc:fb:28:33:
         37:04:27:e4:93:0e:b3:a7:ec:3f:b8:8a:4c:70:4e:4c:8f:0f:
         9e:d2:7c:89:32:de:53:bd:57:78:f4:28:1a:fd:bc:57:b9:6b:
         d3:07:8e:be:66:1a:25:d7:1f:4a:87:e0:bb:2a:30:a9:1f:dc:
         c3:df:ce:ae:d8:ea:ab:28:3f:56:84:ba:59:30:6b:15:a7:1d:
         c2:9e:4a:0d:09:c6:40:93:80:f4:97:6a:29:27:f5:61:35:e7:
         17:51:d7:3c:6f:d7:a0:d2:2c:34:2b:ab:79:9d:4b:d8:89:7e:
         11:d8:e4:a9:ec:66:c1:ec:57:3e:9f:19:64:16:ef:e4:2d:ff:
         b2:61:90:9c:50:13:6d:9e:89:a7:05:c8:df:c9:79:78:23:b9:
         49:27:92:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 05:22:22 2024 by rpki-client on console-fra.rpki-client.org