Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/e2026c0f-82e9-3f68-8c42-720e34fe674a.roa
File:                     e2026c0f-82e9-3f68-8c42-720e34fe674a.roa (raw, json)
Hash identifier:          KoX+wqeZQHQrecr3BeMMybAd5hjsFa4XDaeosBOLQMo=
Subject key identifier:   32:64:2C:34:27:22:02:18:34:61:31:DA:A9:83:94:9E:BB:1D:09:E4
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F4328583E1BC9F45AFADCE944FB95CFC0
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/e2026c0f-82e9-3f68-8c42-720e34fe674a.roa
Signing time:             Wed 01 Jun 2022 12:00:00 +0000
ROA not before:           Wed 01 Jun 2022 12:00:00 +0000
ROA not after:            Thu 25 May 2028 04:00:00 +0000
asID:                     11404
IP address blocks:        204.195.0.0/17 maxlen: 24

Validation:               Failed, certificate revoked on Fri 23 Jun 2023 12:59:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:1b:c9:f4:5a:fa:dc:e9:44:fb:95:cf:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Jun  1 12:00:00 2022 GMT
            Not After : May 25 04:00:00 2028 GMT
        Subject: CN=292506e4-50be-4826-bb1d-890133474ff3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:20:b8:c5:c9:51:0a:2e:d1:78:07:1f:5f:af:
                    7c:bb:d1:3e:17:9f:f7:c4:d3:53:3e:bf:74:85:b3:
                    00:ea:9a:51:8b:bd:48:23:1e:64:9e:6c:0b:db:13:
                    c4:6f:dc:84:3f:d4:ce:6a:4c:52:be:3b:52:4b:20:
                    e1:a9:6d:2b:3e:5e:80:04:7f:05:2a:5c:f0:7f:ee:
                    fa:0a:30:18:64:a0:9c:a7:05:15:38:7c:a6:90:8d:
                    c5:e8:d9:22:70:dc:48:60:56:b0:0c:39:79:2a:7e:
                    09:ce:ae:47:49:0d:fe:0a:3b:4f:e0:4b:86:6b:94:
                    69:28:37:8f:4b:f2:7f:0f:f1:a5:f3:0b:40:0e:e1:
                    20:84:ec:0e:7a:1b:27:c3:76:0a:9e:63:23:4f:bf:
                    2f:98:5a:fe:5b:77:2e:b1:d7:49:a2:f9:b8:c0:65:
                    03:68:62:e9:91:4f:47:12:04:17:40:eb:dc:ee:85:
                    93:5d:4c:26:5f:6c:23:79:9a:8f:23:8f:73:93:d7:
                    01:77:77:47:b4:86:63:b0:37:7f:2e:a8:2d:f7:79:
                    81:76:34:99:0f:1c:01:fb:b6:28:05:92:a1:00:77:
                    88:28:36:50:02:27:be:74:da:d6:15:f0:cf:46:e7:
                    f8:c0:0f:66:57:c2:1e:0b:50:53:56:9f:16:fe:8c:
                    7f:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:64:2C:34:27:22:02:18:34:61:31:DA:A9:83:94:9E:BB:1D:09:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/e2026c0f-82e9-3f68-8c42-720e34fe674a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.195.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:ea:93:bc:85:7d:70:31:e5:44:9b:90:59:1b:18:37:38:67:
         be:e7:19:8f:1b:99:01:6c:e5:9a:c9:c6:38:6e:36:27:34:be:
         81:1c:61:a4:41:55:1e:44:45:63:0a:77:36:e9:85:af:09:a8:
         4e:32:d1:d7:ea:80:a4:6e:29:b3:0e:4d:0a:6d:72:1d:ec:cc:
         51:2d:87:00:56:f4:ee:f7:e6:28:58:97:de:79:57:2f:06:e3:
         7f:25:1a:f7:de:cc:d9:2b:c1:b2:4c:ad:d3:ca:24:eb:55:1d:
         d8:dd:f5:b2:2c:36:a5:36:f5:39:7b:48:48:50:97:03:e6:ad:
         28:60:75:e7:1b:4e:30:e0:ee:27:f0:a1:1c:e7:fb:1e:08:68:
         1b:45:26:07:8f:58:2b:a5:6b:93:d2:68:c7:52:eb:e0:06:ea:
         a4:1f:5e:45:c0:a8:a9:1a:c8:7d:0b:83:4d:88:f0:ff:86:12:
         4e:18:a0:d8:0f:77:0e:92:60:fd:a8:c7:50:70:46:3f:3c:60:
         0e:b2:aa:36:d9:32:45:45:56:e8:7d:63:36:ee:c8:b2:43:94:
         af:ca:e2:06:98:41:c0:41:ec:83:65:95:83:20:89:06:5f:e5:
         44:d9:ed:80:c3:44:70:7f:05:74:de:c1:62:c8:ef:52:32:77:
         01:8e:8e:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:10 2024 by rpki-client on console-fra.rpki-client.org