Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/11b7bb9c-967f-3c16-befa-1501025b173f.roa
File:                     11b7bb9c-967f-3c16-befa-1501025b173f.roa (raw, json)
Hash identifier:          tQSWCdpOPQfDFw/SYiRWPniJzItzU4DrxyvtC8draTg=
Subject key identifier:   E5:24:45:79:72:22:69:32:E6:04:F3:5B:84:30:27:55:27:2E:25:34
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F43285842DADEC80B39F1FA6ED364EE40
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/11b7bb9c-967f-3c16-befa-1501025b173f.roa
Signing time:             Sat 12 Aug 2023 01:00:21 +0000
ROA not before:           Sat 12 Aug 2023 01:00:21 +0000
ROA not after:            Fri 10 Nov 2023 02:00:21 +0000
asID:                     396356
IP address blocks:        172.111.185.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:da:de:c8:0b:39:f1:fa:6e:d3:64:ee:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Aug 12 01:00:21 2023 GMT
            Not After : Nov 10 02:00:21 2023 GMT
        Subject: CN=24c6803c-f881-40a1-b1bc-13339d11026f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c6:78:90:7b:57:5a:c1:41:f4:bf:71:35:a1:
                    f0:00:59:e3:ad:91:8f:dc:bc:1d:ea:b9:3e:ac:5c:
                    43:e2:0b:69:86:8a:46:48:1f:b6:01:da:6e:93:53:
                    be:c8:1b:67:4c:34:1e:3c:46:57:8a:97:98:2d:31:
                    e8:90:46:cb:45:d9:16:eb:23:9d:4c:52:85:98:93:
                    cd:37:93:ec:52:93:76:cc:06:c7:cd:8a:99:3e:e2:
                    13:00:a6:48:24:4f:d6:15:a8:d4:ee:c9:c8:60:58:
                    18:4e:06:cb:38:80:55:5f:8f:35:ec:af:b6:62:28:
                    c2:cf:b3:a3:86:d8:d3:db:ef:11:7b:e3:17:c6:04:
                    ba:06:6b:2e:e9:fd:f2:41:a7:3d:0d:67:e1:58:67:
                    f2:64:58:19:12:33:32:f9:ff:b7:23:ab:82:0f:dd:
                    8f:51:98:7d:01:f3:d9:10:fb:ba:34:3c:50:1e:63:
                    7f:22:c1:10:64:36:c6:73:16:42:1e:e9:d7:1e:a1:
                    73:6b:91:83:61:e9:9d:e0:e1:8f:93:d1:82:46:9b:
                    74:cb:75:e9:ae:a3:ee:63:03:2d:51:f5:e0:f9:6b:
                    fa:b5:98:a7:10:cc:ac:43:eb:66:45:66:9a:9b:11:
                    c1:a6:ce:cf:22:65:3f:56:38:a1:7b:8e:c8:40:05:
                    5e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:24:45:79:72:22:69:32:E6:04:F3:5B:84:30:27:55:27:2E:25:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/11b7bb9c-967f-3c16-befa-1501025b173f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:01:7e:50:12:c0:b2:72:a4:06:92:26:50:02:93:98:98:97:
         a1:b7:e6:a8:89:02:e0:2a:4c:a0:ff:2d:67:0d:fd:68:04:be:
         ef:09:9c:7e:0d:c7:6a:a3:ee:98:d5:cc:01:57:a0:72:9e:98:
         0d:bc:b2:35:21:bc:b8:5a:02:9f:77:32:22:02:7d:ff:04:a4:
         23:e7:ff:44:6c:ad:58:94:1d:c9:a4:6d:0d:fe:b9:d2:a4:9e:
         3d:1f:dd:76:df:b7:ff:8c:88:a7:44:88:cc:8b:bb:44:5a:7a:
         5c:21:59:4a:14:be:2d:46:7b:b8:fb:48:d3:71:b9:f2:ec:52:
         a0:96:5e:6d:e8:1a:67:28:6e:61:58:d8:2e:db:b2:c3:46:de:
         fb:ac:4d:70:11:86:66:a4:28:66:da:ab:eb:66:7c:be:86:27:
         03:c3:7d:d0:a6:29:d0:f7:96:f2:4f:1a:58:78:90:41:61:f7:
         59:71:5b:17:5c:06:37:ac:82:c9:13:35:66:5c:9e:83:4b:e1:
         61:89:10:59:cf:98:bb:e0:74:2d:bf:bb:2d:b6:c6:35:37:5f:
         cf:d6:2c:f9:56:d6:13:e5:ee:ee:73:53:7d:4f:6c:74:ba:58:
         75:dd:fe:2f:88:34:44:56:36:ba:87:16:fb:f3:22:91:5d:22:
         b3:41:10:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 22 06:54:50 2023 by rpki-client on console-fra.rpki-client.org