Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e3760d5f-f17f-3347-bd58-af6e9386f9c8.roa
File:                     e3760d5f-f17f-3347-bd58-af6e9386f9c8.roa (raw, json)
Hash identifier:          qiKu/tl9AsOGegFuGzqygJrp8m1aZXVcwTm8Po6Sa8A=
Subject key identifier:   D5:0C:AE:F6:86:4F:84:03:7B:56:67:46:4E:2C:BD:74:3E:B8:36:81
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858446E73788A50D73668A4B5BB80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e3760d5f-f17f-3347-bd58-af6e9386f9c8.roa
Signing time:             Wed 03 Jan 2024 14:30:43 +0000
ROA not before:           Wed 03 Jan 2024 14:30:43 +0000
ROA not after:            Tue 02 Apr 2024 13:30:43 +0000
asID:                     14978
IP address blocks:        216.66.25.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 25 Feb 2024 20:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:6e:73:78:8a:50:d7:36:68:a4:b5:bb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Jan  3 14:30:43 2024 GMT
            Not After : Apr  2 13:30:43 2024 GMT
        Subject: CN=e9485679-df74-48d7-a7a2-916871234431
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:94:7c:9e:18:74:53:bb:6d:af:ea:fb:6d:dd:
                    d5:b1:94:53:21:82:da:3b:1f:fc:0e:77:e1:76:4d:
                    30:e5:13:e7:f4:39:87:64:41:f1:81:18:ec:a4:0e:
                    47:ea:57:e8:ec:c6:0e:60:d9:14:eb:e4:ab:99:78:
                    61:45:0a:4f:38:61:1b:24:1b:9d:58:25:53:34:f5:
                    58:b4:b1:7f:dd:8f:8a:9b:b2:fb:a7:2d:85:1b:52:
                    69:da:c6:b9:1c:1b:f2:c6:eb:3f:64:de:90:3e:2a:
                    6b:80:6e:45:27:2c:66:5d:f0:fc:9b:fa:6d:31:df:
                    0d:c0:16:6e:e9:34:b5:12:67:0a:9a:29:38:bc:86:
                    d3:09:b9:10:24:9c:1e:c8:94:42:0f:1b:25:be:0a:
                    89:93:72:26:c7:ed:5c:b2:fd:ab:d8:bf:85:57:0c:
                    dc:21:95:08:0c:72:75:51:57:03:06:8b:b5:5c:53:
                    5b:b7:1f:4d:e6:00:4a:ff:d3:f6:f1:e5:c6:2a:ef:
                    56:75:80:88:de:c5:bf:42:89:0a:98:cf:65:f7:18:
                    f0:e3:7a:fa:04:f8:b1:0f:30:db:f0:22:3e:69:8d:
                    af:44:9e:b9:fa:04:7c:6c:6f:71:0c:bf:6c:24:d1:
                    9e:85:49:f6:c5:e8:0a:e9:ff:13:a9:7e:a1:89:bf:
                    da:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:0C:AE:F6:86:4F:84:03:7B:56:67:46:4E:2C:BD:74:3E:B8:36:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/e3760d5f-f17f-3347-bd58-af6e9386f9c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.66.25.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:ef:66:5a:42:41:6a:73:0e:d0:79:93:c5:79:cb:1e:59:25:
         2f:c1:bf:ab:1c:a6:a3:fc:03:39:93:e1:0c:73:45:3c:31:34:
         f4:00:0b:4a:63:f3:7e:93:10:cc:cd:5f:e3:77:b9:e7:55:f5:
         ba:ff:cb:c5:d2:51:76:34:1d:4e:39:5f:ad:47:aa:2b:01:bc:
         cb:fb:b7:99:6e:c1:63:98:de:f0:e8:df:9c:ed:5c:e6:59:9f:
         66:08:37:2d:66:ef:3b:2c:2a:e6:63:a7:5c:e3:8e:f4:8b:aa:
         eb:bc:74:61:b0:8d:6a:2c:20:11:63:c9:18:a3:26:cd:f9:28:
         06:f9:56:59:26:9c:5c:06:e5:b0:6c:11:73:9a:4a:f1:9e:10:
         3e:ab:f4:56:ae:04:fa:63:65:2d:37:9e:ee:40:d0:0a:b4:04:
         42:ee:a0:70:63:3e:76:61:7c:06:93:4d:7c:63:05:da:bf:04:
         ce:c8:c3:00:4f:72:52:3e:5e:e4:83:ed:e2:62:df:00:d4:0a:
         6a:8f:cb:0e:b0:d3:1d:c1:ff:06:6e:f1:fa:e5:a3:70:be:3d:
         4a:bd:9c:8e:00:ce:98:24:ee:7a:9f:85:47:ae:8c:81:af:f7:
         a4:61:5e:4a:20:68:ce:e0:d4:67:c0:5c:78:ea:33:78:3d:90:
         e9:08:38:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 25 23:36:34 2024 by rpki-client on console-fra.rpki-client.org