Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/f5fa1fec-679f-32e0-a94a-2df04927c6a2.roa
File:                     f5fa1fec-679f-32e0-a94a-2df04927c6a2.roa (raw, json)
Hash identifier:          YzWWZN/ePLSJawRXAPQ8MWYlPKG/5+rnHwH83zYg2gQ=
Subject key identifier:   D0:BA:59:37:19:0B:B9:26:1B:8A:03:14:60:12:9D:25:37:BE:4F:19
Certificate issuer:       /CN=249140ca-277e-4871-a100-451d066d1c5b
Certificate serial:       010D0C9F4328583F61C5C63F59894ECEF461BE80
Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/f5fa1fec-679f-32e0-a94a-2df04927c6a2.roa
Signing time:             Thu 15 Sep 2022 14:57:08 +0000
ROA not before:           Thu 15 Sep 2022 14:57:08 +0000
ROA not after:            Sun 01 Feb 2032 05:00:00 +0000
asID:                     21949
IP address blocks:        66.23.0.0/17 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:61:c5:c6:3f:59:89:4e:ce:f4:61:be:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b
        Validity
            Not Before: Sep 15 14:57:08 2022 GMT
            Not After : Feb  1 05:00:00 2032 GMT
        Subject: CN=dfb6cfed-768d-466a-bea3-4ecd8b39abe4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:23:7d:f5:26:90:47:a4:63:a5:39:f3:b4:b3:
                    3a:41:af:73:3b:5c:ed:84:19:05:a4:d2:95:2c:4e:
                    42:3a:86:1e:2f:71:06:9a:1f:60:5d:2e:b9:2d:88:
                    a2:12:bb:df:f6:90:a8:f5:ad:58:e1:b3:ae:3f:7e:
                    c7:5c:0b:4d:56:2a:ae:31:dd:e0:e6:eb:d2:8e:0d:
                    72:42:aa:04:29:2c:f1:ee:ac:d2:e2:7c:f3:7a:d4:
                    4b:64:4d:57:6c:9d:f5:61:b6:2a:15:c6:52:79:1e:
                    91:f1:94:d8:8c:df:e0:1e:ee:65:c1:ec:43:df:29:
                    67:27:72:c4:7e:4f:56:32:c6:cd:45:d6:d9:26:64:
                    1a:14:c5:e2:70:96:dc:b4:5e:de:fa:5c:c0:c1:62:
                    47:02:ac:09:d8:26:5c:38:71:1d:d3:c6:e1:be:e4:
                    fc:21:4a:5f:b7:e7:29:4a:c7:32:d0:e2:2e:e9:80:
                    45:6b:21:c6:01:aa:df:a3:10:0c:6c:85:7d:0b:2e:
                    e6:d8:18:3b:27:f6:eb:c6:a0:ff:ed:36:6a:00:e7:
                    6a:d9:b0:85:20:41:de:52:29:5a:64:2f:02:9d:1d:
                    db:10:fd:52:2d:4f:c9:5f:44:05:2f:73:a8:73:9e:
                    e5:41:5b:86:e4:b9:d0:5e:b0:93:b3:e9:11:fd:a5:
                    2b:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:BA:59:37:19:0B:B9:26:1B:8A:03:14:60:12:9D:25:37:BE:4F:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/f5fa1fec-679f-32e0-a94a-2df04927c6a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl

            X509v3 Authority Key Identifier:
                keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.23.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:49:24:43:af:5d:d3:3c:59:f1:6d:7a:e0:55:59:e9:85:d6:
         b3:7b:f6:13:1b:46:6e:ea:0a:b6:59:57:f6:9b:ed:b3:f2:1c:
         05:19:7f:a9:ea:4a:98:4a:18:54:ed:18:8d:bc:db:51:20:de:
         0d:6c:a0:5f:5d:b0:95:08:d4:35:3e:d4:b5:c2:15:0a:2f:3a:
         cf:cd:aa:5a:02:96:17:f7:a3:5c:b4:13:68:c3:c7:ea:55:b6:
         36:4e:db:1b:5a:49:6f:e5:57:3f:40:21:82:79:f7:28:03:fc:
         86:70:1b:f7:e6:32:ac:63:a1:0a:83:86:a9:b0:4a:00:65:e3:
         27:77:eb:60:40:d1:3e:f5:17:e2:46:62:c4:43:07:b6:30:62:
         7a:05:6f:11:d6:16:86:b8:b9:a1:78:c8:14:b3:a6:10:a8:02:
         e1:e2:87:c6:e3:06:b4:b4:f4:4e:65:d8:1a:e2:22:12:79:d9:
         03:85:86:84:d8:40:13:34:9e:58:41:c2:9b:9b:65:ba:dd:43:
         93:33:62:0d:72:00:b9:89:74:d9:40:df:76:a2:dc:b5:d0:2d:
         ec:68:38:4c:1d:88:96:e1:a9:f6:31:84:50:4a:62:04:03:23:
         cf:67:c7:9c:72:af:c9:68:f5:5c:4a:c4:81:c4:3a:d1:90:36:
         1a:2c:f6:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:38:37 2023 by rpki-client on console-fra.rpki-client.org