Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/0b0621d3-f913-3c13-88a1-fd9d5fc64dc9.roa
File:                     0b0621d3-f913-3c13-88a1-fd9d5fc64dc9.roa (raw, json)
Hash identifier:          1xadaB4g/h7zg2f7lO7h14uZljW8dGKyjpPn0e0qvDc=
Subject key identifier:   08:8D:12:2B:39:31:9F:FB:CD:8F:7F:1C:5D:B8:2E:0C:62:19:9B:D8
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F432858454272BF6BB625CA968FAC74C0
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/0b0621d3-f913-3c13-88a1-fd9d5fc64dc9.roa
Signing time:             Tue 19 Mar 2024 13:00:34 +0000
ROA not before:           Tue 19 Mar 2024 13:00:34 +0000
ROA not after:            Mon 17 Jun 2024 13:00:34 +0000
asID:                     16509
IP address blocks:        170.114.60.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 28 Mar 2024 21:50:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:42:72:bf:6b:b6:25:ca:96:8f:ac:74:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Mar 19 13:00:34 2024 GMT
            Not After : Jun 17 13:00:34 2024 GMT
        Subject: CN=acee95f2-faf2-449f-a9fe-d929f46986c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:7f:48:f2:dd:f2:bf:ee:88:9e:c6:be:6d:71:
                    cc:92:83:7b:7d:b5:b7:23:eb:82:49:7a:b0:0f:b7:
                    44:5d:30:2a:cf:81:07:37:73:8e:5f:13:df:44:f2:
                    13:39:66:d0:19:df:01:7d:6e:a8:00:b9:e5:dd:59:
                    35:86:96:35:7b:95:ba:b5:ad:63:fd:cf:fa:f4:cb:
                    69:2f:cb:27:0a:8b:8e:85:8c:dc:44:a6:47:72:86:
                    d5:11:d5:fb:5b:e3:5a:0c:c8:5d:e7:46:30:21:33:
                    f3:70:a5:7f:4a:bf:db:b9:71:3e:0a:3c:69:72:ab:
                    f4:a1:e0:50:84:f7:30:59:99:4e:b3:dc:67:df:2f:
                    5e:e1:e9:78:4a:29:9a:7a:9b:6d:fe:9c:f7:da:e7:
                    77:dc:cb:d5:7e:93:a8:12:60:78:c2:f2:b6:a0:bb:
                    81:c9:be:1a:b2:8c:d2:4b:25:8f:03:51:25:6e:67:
                    f6:82:3b:c6:1d:ea:5b:92:43:e3:66:bd:e2:b9:88:
                    59:97:ac:4c:7b:fd:41:1c:6b:17:1d:4b:fa:3a:e5:
                    7d:1a:49:3d:b1:3b:84:70:e1:ba:03:84:86:46:43:
                    c3:43:45:fc:52:7a:1d:a1:45:ff:33:81:76:11:38:
                    21:c4:a2:70:3e:22:ff:7c:45:1e:a0:b7:06:80:0f:
                    0d:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:8D:12:2B:39:31:9F:FB:CD:8F:7F:1C:5D:B8:2E:0C:62:19:9B:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/0b0621d3-f913-3c13-88a1-fd9d5fc64dc9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.114.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:52:c1:e1:05:01:7d:a9:d8:b3:2f:52:73:44:59:31:e2:82:
         fc:5a:17:54:7a:2f:28:e7:3a:b0:f4:98:30:3e:e4:87:b0:98:
         d2:35:84:78:53:50:0e:f1:30:a2:fe:5e:76:c4:d3:a6:67:3a:
         ee:57:90:de:8f:af:d0:ef:6a:57:33:81:45:b2:aa:56:4d:b5:
         4d:bb:a8:5c:34:61:e5:e1:7b:76:15:b7:03:4e:73:30:2c:56:
         d5:e1:d7:0d:a9:e3:ea:4a:18:3f:ce:2c:5d:9f:84:bf:96:49:
         f2:73:d4:f0:b5:4f:98:07:a6:27:53:f2:de:39:a7:d0:e2:71:
         f0:55:a1:6f:65:db:0b:79:a7:f7:68:90:51:93:84:e7:52:75:
         22:cb:f1:ab:0f:0b:02:60:80:36:41:a5:29:6b:71:ad:e1:a6:
         9d:7a:be:ac:58:3a:26:ed:de:83:ac:ab:8a:6f:45:07:de:75:
         a4:13:d7:6f:13:5b:2f:ce:a6:34:d0:90:98:c2:2e:2c:f9:2b:
         57:45:98:ed:ed:83:1c:7f:5c:18:ce:89:65:79:fe:83:94:31:
         87:25:5e:a0:48:cd:36:70:1e:0f:2e:da:a2:34:e1:52:71:d1:
         b6:ff:af:55:72:c2:e5:f8:91:df:6d:69:19:1f:01:54:6f:1c:
         bb:55:50:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:57 2024 by rpki-client on console-fra.rpki-client.org