Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/85cb1f45-c822-4e3f-9234-71ff680b968d/e3d04bbe-f2e1-3fbe-b0d4-257ed97dbe6e.roa
File:                     e3d04bbe-f2e1-3fbe-b0d4-257ed97dbe6e.roa (raw, json)
Hash identifier:          XSNWpE0VeREkoWMs6NLAtIHVJePFEIcXS/I0Zqfwqsc=
Subject key identifier:   91:59:61:BB:9E:CB:32:FF:0A:D6:4F:BB:68:8A:C3:D1:B1:2C:7F:34
Certificate issuer:       /CN=85cb1f45-c822-4e3f-9234-71ff680b968d
Certificate serial:       010D0C9F4328576D51CC73C042CFC16F908C0A2E
Authority key identifier: 6B:0A:61:3E:EA:E0:C0:72:7A:74:54:48:34:07:44:82:56:DA:04:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/85cb1f45-c822-4e3f-9234-71ff680b968d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/85cb1f45-c822-4e3f-9234-71ff680b968d/e3d04bbe-f2e1-3fbe-b0d4-257ed97dbe6e.roa
Signing time:             Fri 10 Jan 2020 17:41:34 +0000
ROA not before:           Fri 10 Jan 2020 05:00:00 +0000
ROA not after:            Wed 10 Jan 2029 05:00:00 +0000
asID:                     18439
IP address blocks:        158.51.8.0/24 maxlen: 24
                          216.115.188.0/24 maxlen: 24
                          208.78.156.0/24 maxlen: 24
                          2604:69c0::/32 maxlen: 32

Validation:               Failed, certificate revoked on Fri 02 Sep 2022 17:55:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6f:90:8c:0a:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85cb1f45-c822-4e3f-9234-71ff680b968d
        Validity
            Not Before: Jan 10 05:00:00 2020 GMT
            Not After : Jan 10 05:00:00 2029 GMT
        Subject: CN=4d270663-870f-49d9-a766-60a9b5cb54e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:02:ca:3c:75:55:42:0d:fd:dc:02:42:15:d9:
                    56:20:64:bd:6c:ea:3c:e0:f4:21:e0:bb:5f:dd:15:
                    fc:d9:f4:39:04:be:27:c2:9b:7e:01:c8:82:23:52:
                    42:7d:25:eb:22:7b:c4:4b:3f:ba:05:84:d2:66:59:
                    15:ea:1e:20:0f:59:2a:40:6b:d6:0d:ee:ce:59:e6:
                    52:6e:c3:4b:0c:2a:d4:98:80:81:aa:af:47:3b:6d:
                    9b:d3:af:bc:96:52:43:73:33:91:af:c0:37:d0:b0:
                    3d:b2:1d:06:52:f5:00:d5:5a:33:83:a5:91:b9:1c:
                    12:60:d5:8c:d0:7a:28:fa:8e:2f:9c:ad:f3:45:18:
                    e3:04:34:a6:27:f9:b7:65:2b:95:c1:94:37:87:10:
                    0e:a5:d8:64:52:1b:9e:09:15:80:93:88:5e:13:57:
                    d4:67:93:b5:ba:b4:3c:f6:83:b6:21:74:ba:2d:20:
                    96:58:b2:0e:03:f0:99:8b:f0:73:63:2b:d8:a9:73:
                    e6:13:2f:5f:22:fd:ff:e7:ca:b3:ef:1b:44:8d:39:
                    f7:20:ff:7c:83:15:34:7b:99:a0:f6:a6:52:d5:70:
                    32:fc:fe:88:b6:f9:c8:60:6d:be:be:4b:be:bc:5f:
                    bf:0a:45:7c:bc:94:d8:48:06:1e:3b:2f:1f:2e:28:
                    f2:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:59:61:BB:9E:CB:32:FF:0A:D6:4F:BB:68:8A:C3:D1:B1:2C:7F:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/85cb1f45-c822-4e3f-9234-71ff680b968d/e3d04bbe-f2e1-3fbe-b0d4-257ed97dbe6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/85cb1f45-c822-4e3f-9234-71ff680b968d/85cb1f45-c822-4e3f-9234-71ff680b968d.crl

            X509v3 Authority Key Identifier:
                keyid:6B:0A:61:3E:EA:E0:C0:72:7A:74:54:48:34:07:44:82:56:DA:04:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/85cb1f45-c822-4e3f-9234-71ff680b968d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.51.8.0/24
                  208.78.156.0/24
                  216.115.188.0/24
                IPv6:
                  2604:69c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:20:f2:9d:00:74:60:e4:9b:8d:66:74:15:06:17:0f:1b:8f:
         4f:45:4f:39:1d:1d:fe:36:ef:ea:f1:0e:48:21:a6:1c:73:ad:
         14:69:3a:23:d0:44:8b:6d:2e:95:95:7e:e9:2f:6c:87:fb:bd:
         b2:38:72:a3:75:a0:45:42:56:18:08:55:5f:e4:fe:cf:25:5a:
         4a:3e:d6:f0:99:ac:1b:41:3a:33:3e:54:12:b3:f1:88:a3:89:
         8e:f4:8b:97:bf:e9:d8:75:06:8a:82:94:96:0d:26:aa:90:2e:
         26:54:54:ad:0a:9a:f3:6f:6c:be:2a:15:ad:62:3c:f2:02:98:
         5c:92:54:d5:f1:1c:9a:23:99:03:66:60:3c:41:12:2f:1b:bc:
         ca:0e:52:3b:e8:5f:e9:80:83:2b:d1:48:9b:cd:35:b4:b9:0d:
         98:6c:de:03:3b:e3:09:33:1a:d8:56:62:7f:bf:22:64:c0:23:
         b4:6b:51:ce:4f:99:7f:7a:a6:3f:b0:03:ff:7c:92:9f:22:06:
         38:c9:c6:f3:b0:9f:08:e9:7d:c9:63:e0:13:3f:00:3c:f5:11:
         08:95:b0:f5:3d:5a:ce:5b:5a:59:37:43:54:1c:10:34:4c:18:
         64:80:e3:da:2e:a5:23:b2:ee:c5:13:ea:09:e2:1a:f8:09:3a:
         ca:33:4d:a0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:46 2024 by rpki-client on console-fra.rpki-client.org