Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880/d8bbff46-6849-3e47-a455-9dfb30413594.roa
File:                     d8bbff46-6849-3e47-a455-9dfb30413594.roa (raw, json)
Hash identifier:          Mlx+Szs+Lzeg0oYzD5BkJidPjot3cMQtcqh1NM8u3Bo=
Subject key identifier:   0F:E2:A0:D6:21:F6:10:49:CF:30:D4:AE:E2:FD:02:2B:6A:DA:BC:E4
Certificate issuer:       /CN=3bb6068b-be48-4cc9-ad75-338daae24880
Certificate serial:       010D0C9F4328583D81E13AC56320BF6A5EC0F7C0
Authority key identifier: 6E:D4:F1:96:20:A7:E8:9A:EF:DD:7E:10:E9:42:93:80:A6:AA:52:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880/d8bbff46-6849-3e47-a455-9dfb30413594.roa
Signing time:             Fri 08 Apr 2022 04:00:00 +0000
ROA not before:           Fri 08 Apr 2022 04:00:00 +0000
ROA not after:            Thu 08 Apr 2032 04:00:00 +0000
asID:                     1293
IP address blocks:        74.117.216.0/21 maxlen: 21

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:81:e1:3a:c5:63:20:bf:6a:5e:c0:f7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3bb6068b-be48-4cc9-ad75-338daae24880
        Validity
            Not Before: Apr  8 04:00:00 2022 GMT
            Not After : Apr  8 04:00:00 2032 GMT
        Subject: CN=6110d8f8-77fb-487e-b7a8-c81984ba2e27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:17:c9:1a:26:13:a1:6c:f6:bf:8c:5c:59:15:
                    06:31:5e:a2:d8:34:f7:34:be:66:1c:b0:90:fe:27:
                    c0:21:ee:82:ea:8d:67:9d:17:70:16:0f:f9:70:2c:
                    f5:29:49:67:d4:af:fa:a0:c4:37:12:df:cd:1c:99:
                    06:ee:8f:6f:ef:69:d9:3e:bb:05:37:97:f3:e8:e1:
                    5d:99:82:69:ba:2b:1f:b0:05:c4:57:2c:c3:22:39:
                    36:62:ba:83:d0:2d:c5:c4:40:1c:ab:47:fd:89:2e:
                    ae:5d:cc:8f:5b:7e:8d:b3:08:d4:e3:16:47:ed:f5:
                    80:7e:95:84:c1:ae:63:d0:bf:4d:cf:57:e3:11:d8:
                    44:e2:47:66:76:ba:bc:b5:e2:2a:ca:7b:99:aa:d8:
                    0e:b6:07:44:2e:da:b1:04:97:69:0c:1d:f1:b6:66:
                    88:4c:6b:78:79:ba:1f:58:a5:a2:bd:02:cc:bb:71:
                    b2:a8:f5:07:ca:c5:02:61:54:93:5d:ed:97:02:0a:
                    b5:9e:f3:71:2c:d4:19:90:7a:c5:e7:0e:18:e5:8a:
                    41:f3:90:57:5f:2c:d7:9d:89:26:60:8f:b8:f5:fa:
                    cb:98:cc:72:25:75:a2:58:d0:ff:a5:3b:0e:b8:04:
                    07:56:1a:78:8c:b5:0e:83:9e:3a:fa:dd:b5:5f:58:
                    bc:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:E2:A0:D6:21:F6:10:49:CF:30:D4:AE:E2:FD:02:2B:6A:DA:BC:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880/d8bbff46-6849-3e47-a455-9dfb30413594.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880/3bb6068b-be48-4cc9-ad75-338daae24880.crl

            X509v3 Authority Key Identifier:
                keyid:6E:D4:F1:96:20:A7:E8:9A:EF:DD:7E:10:E9:42:93:80:A6:AA:52:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bb6068b-be48-4cc9-ad75-338daae24880.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.117.216.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:b8:bf:57:33:60:44:6b:06:98:7c:a0:39:86:f3:a1:ed:94:
         cd:9e:29:bc:15:ca:92:43:95:58:9b:8c:14:d5:cf:d8:cb:23:
         80:73:95:a4:f1:a2:0a:83:98:c2:c9:20:88:34:55:da:9b:a2:
         1c:36:29:1a:c2:50:f1:ce:eb:1a:ce:4a:fd:7d:e6:a4:d2:13:
         f7:ad:7f:a0:d1:ff:b5:8b:ce:c9:8d:10:7c:4b:d5:65:3d:2f:
         fc:e3:6d:e2:1f:b6:fc:57:fe:bb:ac:d6:c4:27:68:3d:fc:0a:
         32:a1:a7:1f:f4:dd:9d:71:9c:a2:fb:12:0e:52:7c:7e:0e:8c:
         7a:86:d6:3f:c1:18:39:58:83:ce:c6:72:ab:0a:84:5e:7d:4b:
         4a:87:56:41:ee:11:06:fc:0a:18:c7:25:6a:a4:d3:ef:5f:b6:
         bb:a9:78:ec:42:d5:7c:46:6e:8b:0a:70:6e:6d:53:33:b0:13:
         88:51:f2:20:2c:44:0e:38:d0:16:ca:34:88:95:c7:96:c5:e1:
         d8:14:78:66:45:54:4d:f4:46:df:fc:aa:de:c1:67:c0:ad:ee:
         af:17:22:cc:46:cd:84:23:a6:b6:ac:4c:d4:1e:07:63:fc:8d:
         6e:16:dc:dd:95:44:5a:47:92:7a:93:50:2e:61:db:05:bc:3b:
         35:da:8e:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:38:37 2023 by rpki-client on console-fra.rpki-client.org