Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/84a15440-bde3-34ae-a23d-3664fafb6ca8.roa
File:                     84a15440-bde3-34ae-a23d-3664fafb6ca8.roa (raw, json)
Hash identifier:          ILP+J7b/cWKSqoMWCY69GFyKE2Rd+8zsFrcA92pwMBM=
Subject key identifier:   C5:C3:0B:EC:A8:9B:96:12:7F:1D:51:FA:C1:D6:7D:9D:2B:A8:68:47
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328583B0AFFC372E4E9933B9863DFD0
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/84a15440-bde3-34ae-a23d-3664fafb6ca8.roa
Signing time:             Tue 10 Apr 2018 04:00:00 +0000
ROA not before:           Tue 10 Apr 2018 04:00:00 +0000
ROA not after:            Tue 28 Nov 2023 05:00:00 +0000
asID:                     20940
IP address blocks:        165.254.203.192/26 maxlen: 26
                          165.254.247.128/25 maxlen: 25
                          204.2.158.0/23 maxlen: 24
                          2001:418:1401:6a::/64 maxlen: 64

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:0a:ff:c3:72:e4:e9:93:3b:98:63:df:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 04:00:00 2018 GMT
            Not After : Nov 28 05:00:00 2023 GMT
        Subject: CN=c11a158b-e2fe-4a70-ab15-4f27f4da1360
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ca:00:f9:5c:15:90:60:6a:69:cf:c6:bf:ba:
                    9d:de:b5:72:3b:d5:18:02:f1:cb:fb:b5:e6:0d:0a:
                    c3:d5:48:e9:45:78:35:e3:1a:60:13:1a:50:2c:20:
                    28:f2:22:e0:8f:8e:74:3d:2a:bd:82:72:f7:f9:4b:
                    5e:2d:ba:80:30:c3:f2:e4:47:8d:46:30:c8:80:c5:
                    50:1b:3e:80:e1:a1:ba:cf:39:87:55:be:ef:77:a6:
                    56:9f:30:b9:ce:10:55:be:12:07:b9:4b:6c:0b:e0:
                    db:7f:3b:bc:5f:2b:52:e8:38:82:ad:a7:56:dd:84:
                    c5:1f:ac:74:dd:d3:47:dc:75:e6:37:3f:de:b0:13:
                    1b:d0:4b:f9:be:a3:62:d2:2b:a8:32:d5:57:69:9e:
                    fc:68:9b:83:82:ab:2a:cd:bb:82:8f:7c:8f:55:c3:
                    c4:1c:5a:a9:d6:23:bd:ae:13:5b:ba:9b:11:79:d6:
                    44:91:6c:90:bf:8a:2e:7b:d4:0c:ec:3e:4c:0e:20:
                    82:31:8e:a6:2e:e1:ce:a4:13:11:0e:76:90:c1:fa:
                    82:c4:f1:76:81:0d:46:2a:4a:c2:80:63:f5:a4:ee:
                    f7:1f:9f:fb:6f:b8:8b:3a:e1:d7:5d:39:f3:a6:69:
                    d1:b7:c0:d4:77:7b:2a:78:d1:1e:bd:37:75:7e:32:
                    e1:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:C3:0B:EC:A8:9B:96:12:7F:1D:51:FA:C1:D6:7D:9D:2B:A8:68:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/84a15440-bde3-34ae-a23d-3664fafb6ca8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.254.203.192/26
                  165.254.247.128/25
                  204.2.158.0/23
                IPv6:
                  2001:418:1401:6a::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:81:04:f0:d7:54:b7:cf:f8:d4:6e:c5:7e:06:5c:b7:89:f5:
         e9:f5:13:61:60:21:ed:23:99:2b:9f:57:24:df:a4:bc:a9:92:
         c8:e4:95:e9:63:06:38:e8:85:43:1c:33:01:69:5f:8c:39:e6:
         01:f1:26:f8:91:fe:c1:b5:19:02:f3:8a:3f:48:79:64:18:cf:
         fe:b3:6a:bf:e9:5f:b1:39:03:a7:9c:fc:79:35:ce:09:12:5d:
         e0:f8:a2:ee:19:1e:eb:a4:e9:3c:02:0b:c0:d0:47:cb:83:35:
         56:f4:c9:de:59:11:90:45:91:66:15:29:9f:6c:29:21:43:1d:
         2e:dc:8d:e8:54:41:9a:f3:a6:03:a3:f5:27:36:cb:4e:0a:65:
         90:5d:c9:ab:af:ed:18:66:6e:50:4f:16:fd:c3:2a:24:76:3b:
         0d:11:03:82:92:c9:dd:c5:ce:f9:37:59:ad:a1:19:a1:3b:ce:
         be:58:b8:ed:7d:8e:65:cf:14:eb:96:aa:81:65:ea:97:9f:3c:
         b1:94:41:a4:ce:2c:f5:87:82:84:9f:b2:f0:0d:26:33:08:01:
         38:18:4f:fb:9e:50:e8:a0:67:6f:c0:95:e0:b5:66:28:c3:ed:
         b8:e4:98:4b:43:69:c0:79:bc:02:da:c3:92:23:68:65:46:21:
         ee:ec:14:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 28 18:18:55 2023 by rpki-client on console-ams.rpki-client.org