Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/64ebadae-406d-4c62-9955-3a90e9f675d9/c2f8dbef-0788-3863-aee6-c291da3330b5.roa
File:                     c2f8dbef-0788-3863-aee6-c291da3330b5.roa (raw, json)
Hash identifier:          vRWhC4PWxg9B2kFEtZVPnjhtcE3xLnxTrQFQmaDwK2g=
Subject key identifier:   32:C6:31:F7:00:FE:6F:93:65:F2:E3:CF:B2:A1:5F:BF:9E:17:0B:D4
Certificate issuer:       /CN=64ebadae-406d-4c62-9955-3a90e9f675d9
Certificate serial:       010D0C9F43285847EEFCD60C95C921B80F470980
Authority key identifier: 34:3F:84:F3:E9:22:74:AF:9C:DF:6B:13:B5:80:A6:7C:C9:8B:83:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/64ebadae-406d-4c62-9955-3a90e9f675d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/64ebadae-406d-4c62-9955-3a90e9f675d9/c2f8dbef-0788-3863-aee6-c291da3330b5.roa
Signing time:             Tue 19 Nov 2024 17:51:46 +0000
ROA not before:           Tue 19 Nov 2024 17:51:46 +0000
ROA not after:            Mon 17 Feb 2025 17:51:46 +0000
asID:                     399086
IP address blocks:        206.253.80.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Tue 19 Nov 2024 18:24:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ee:fc:d6:0c:95:c9:21:b8:0f:47:09:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64ebadae-406d-4c62-9955-3a90e9f675d9
        Validity
            Not Before: Nov 19 17:51:46 2024 GMT
            Not After : Feb 17 17:51:46 2025 GMT
        Subject: CN=d5e001b1-8f64-4bc2-a638-11703be59eed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:e5:31:f1:28:5b:0c:41:34:5f:d0:50:8f:9d:
                    14:48:cd:7b:94:d2:49:38:13:41:74:e7:0b:5f:42:
                    44:e2:c9:36:10:55:54:54:0f:53:5e:80:01:f0:67:
                    b9:56:9c:5f:9b:36:9f:33:b6:e1:56:22:09:6a:6e:
                    db:72:86:b2:56:80:87:71:a0:0f:f6:d4:77:09:99:
                    51:c8:33:66:07:66:f8:3e:ed:12:c0:14:29:9f:41:
                    1c:bf:e2:12:be:50:08:e1:d6:f3:e1:45:00:31:3c:
                    fe:70:98:d0:e3:53:36:47:e8:b1:db:02:9a:0f:15:
                    8f:be:5c:ae:2d:12:e2:7f:99:d2:42:80:a5:5d:17:
                    dd:d4:c7:f8:b6:22:af:fb:f8:5f:5c:50:6d:b5:bd:
                    99:9b:24:d7:18:5c:99:98:c7:0e:f9:bc:ff:14:10:
                    a6:99:04:bc:9a:cb:29:fd:8b:d0:eb:17:d6:4d:a4:
                    2a:01:75:eb:14:a7:d1:d0:c7:10:7a:8f:ce:e1:82:
                    b2:ea:4c:aa:20:b6:ce:2f:f3:77:55:8b:53:26:59:
                    d1:f5:83:10:d9:be:ca:6b:93:40:c3:69:fa:38:48:
                    0a:86:e5:f2:73:64:5b:b6:57:79:b7:50:bb:eb:55:
                    17:87:08:e8:49:fa:52:2e:2f:34:e5:33:23:7c:6f:
                    55:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:C6:31:F7:00:FE:6F:93:65:F2:E3:CF:B2:A1:5F:BF:9E:17:0B:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/64ebadae-406d-4c62-9955-3a90e9f675d9/c2f8dbef-0788-3863-aee6-c291da3330b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/64ebadae-406d-4c62-9955-3a90e9f675d9/64ebadae-406d-4c62-9955-3a90e9f675d9.crl

            X509v3 Authority Key Identifier:
                keyid:34:3F:84:F3:E9:22:74:AF:9C:DF:6B:13:B5:80:A6:7C:C9:8B:83:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/64ebadae-406d-4c62-9955-3a90e9f675d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.253.80.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:e0:9f:bd:ef:88:03:3f:35:39:6b:a7:1b:80:cc:47:1d:4e:
         fe:41:43:65:70:77:b1:41:f0:73:f0:67:73:8f:f2:2b:1d:2e:
         42:fb:f2:6c:c8:3a:e3:1c:8c:d1:80:bc:4c:5f:c4:ea:0f:52:
         f5:fc:84:b9:bc:d8:a2:6c:c5:82:3b:e7:63:b6:23:75:88:d7:
         0a:03:e5:cd:6c:7c:35:33:57:4d:47:2a:ce:83:05:fe:92:99:
         81:12:f7:64:93:9b:29:78:21:3a:5f:99:9a:f6:b2:d7:50:5e:
         7c:8d:8b:cc:5b:e7:23:a6:52:5c:e8:d2:ec:48:e8:25:c0:aa:
         1d:42:49:ad:b5:5f:c8:14:d2:6d:39:c1:5f:5a:39:69:8e:c2:
         ee:65:66:c4:d0:0e:60:6f:3c:53:f9:e8:81:75:ef:2f:1a:a2:
         34:22:d0:29:e8:c6:62:7b:aa:27:0d:ac:35:0c:e7:b3:00:d2:
         67:4e:bc:c0:0e:cb:22:c7:d7:b2:ed:47:d0:a4:fb:00:2a:19:
         0f:d5:77:de:ba:a2:3b:0d:82:6e:19:3c:1f:65:b3:fd:71:8d:
         7a:3a:0c:11:96:09:6d:0a:28:0a:a1:ba:ac:3e:a5:e6:81:30:
         0f:0f:2b:6f:05:d6:be:28:c7:48:8a:2d:30:cd:fb:47:f0:5f:
         fe:c3:f0:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 21:22:06 2024 by rpki-client on console-fra.rpki-client.org