Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e/45fc9558-e866-3503-83d8-16779a833964.roa
File:                     45fc9558-e866-3503-83d8-16779a833964.roa (raw, json)
Hash identifier:          2zodAT7ksfUALmR+9he/XwZt/RkZW1YvgTn3IIHGmo0=
Subject key identifier:   86:90:05:F7:82:19:26:7E:14:EC:A2:61:01:ED:CD:B7:4C:20:23:A2
Certificate issuer:       /CN=7f6bc06a-0a42-4758-8629-8c90ecf2f82e
Certificate serial:       010D0C9F4328583D41AD8235CA24CB0A484E8D80
Authority key identifier: 22:8E:E7:FA:0E:00:40:C5:BA:3F:20:67:77:FA:3C:05:BD:6F:5A:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e/45fc9558-e866-3503-83d8-16779a833964.roa
Signing time:             Wed 16 Mar 2022 04:00:00 +0000
ROA not before:           Wed 16 Mar 2022 04:00:00 +0000
ROA not after:            Tue 18 Jun 2024 04:00:00 +0000
asID:                     26223
IP address blocks:        199.19.112.0/21 maxlen: 24
                          162.248.128.0/23 maxlen: 24
                          192.64.2.0/23 maxlen: 24
                          192.187.62.0/23 maxlen: 24
                          199.66.104.0/22 maxlen: 24
                          199.192.124.0/22 maxlen: 24
                          204.8.60.0/22 maxlen: 24
                          204.8.68.0/22 maxlen: 24
                          207.183.160.0/19 maxlen: 24
                          216.21.208.0/22 maxlen: 24
                          216.128.224.0/20 maxlen: 24
                          217.147.184.0/21 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:41:ad:82:35:ca:24:cb:0a:48:4e:8d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f6bc06a-0a42-4758-8629-8c90ecf2f82e
        Validity
            Not Before: Mar 16 04:00:00 2022 GMT
            Not After : Jun 18 04:00:00 2024 GMT
        Subject: CN=d69e9e6d-c9ed-42df-8777-ed0a36851e43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a7:78:83:d6:e7:a5:ff:4f:4b:c4:13:32:c5:
                    3a:b0:70:e3:d6:78:c1:00:d5:ce:6e:f8:4a:47:e0:
                    12:e8:b6:68:3b:e1:2c:f3:c0:81:ce:ad:cf:69:b4:
                    8a:a2:b3:4c:ab:2c:67:0b:eb:6b:ad:63:8a:ab:3a:
                    73:7a:88:e6:bc:7d:9c:0f:26:81:21:5a:2e:10:25:
                    f9:26:7c:38:dc:da:c2:a0:bf:5e:7a:7f:83:6a:b7:
                    93:d3:85:e4:9e:16:3f:37:c0:8c:e2:c7:5d:2d:e7:
                    72:2a:ec:fb:f1:ad:66:d0:2b:36:af:37:71:5f:c5:
                    dd:da:09:29:16:73:45:fd:5a:ed:1b:dd:82:c8:73:
                    01:a3:43:52:86:55:21:19:15:63:7c:b1:92:67:0e:
                    9b:55:45:2f:68:70:b8:e9:01:34:0d:21:71:18:fd:
                    50:76:3d:1d:ce:65:4f:f8:0c:d0:45:37:26:c7:55:
                    08:46:fc:ea:46:33:0e:d8:6b:0f:16:7f:07:e2:6b:
                    ae:87:8a:23:7b:7d:ef:45:d8:f6:1f:53:87:d2:00:
                    f0:4e:8c:fb:82:e9:7f:4b:0e:95:5f:88:19:72:c5:
                    5a:c9:e7:d6:cf:69:94:1d:c4:36:05:19:1d:da:e3:
                    e9:3d:6c:08:71:1c:43:5a:a2:22:b7:a4:1a:ce:43:
                    fc:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:90:05:F7:82:19:26:7E:14:EC:A2:61:01:ED:CD:B7:4C:20:23:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e/45fc9558-e866-3503-83d8-16779a833964.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e/7f6bc06a-0a42-4758-8629-8c90ecf2f82e.crl

            X509v3 Authority Key Identifier:
                keyid:22:8E:E7:FA:0E:00:40:C5:BA:3F:20:67:77:FA:3C:05:BD:6F:5A:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.248.128.0/23
                  192.64.2.0/23
                  192.187.62.0/23
                  199.19.112.0/21
                  199.66.104.0/22
                  199.192.124.0/22
                  204.8.60.0/22
                  204.8.68.0/22
                  207.183.160.0/19
                  216.21.208.0/22
                  216.128.224.0/20
                  217.147.184.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:94:28:4d:ab:19:58:c6:a9:20:07:88:b5:58:94:0c:77:81:
         21:3f:01:04:0d:71:a3:de:67:26:8a:81:dd:ef:02:ca:79:ea:
         4f:7a:28:a0:63:9f:ff:00:b6:cd:a4:6b:e9:62:c7:43:64:70:
         62:2e:e7:9a:c6:46:99:76:56:ed:aa:5e:5a:e9:3b:44:68:03:
         e8:6f:d9:6a:58:80:af:3f:31:50:00:16:ac:b6:8a:3b:29:ae:
         a6:81:3a:31:58:e7:07:b3:20:99:14:8f:5f:bb:bd:20:bb:9d:
         6d:0e:48:75:54:62:d2:66:17:3a:bd:ac:ac:ab:af:08:44:d6:
         4c:12:0b:49:de:76:3a:01:02:17:e7:b0:60:3c:b4:af:76:ed:
         7e:2c:fb:ef:d7:4d:e7:30:c8:95:55:9e:10:f8:ea:cf:84:d5:
         c4:c2:17:40:29:5f:79:19:9d:da:12:5e:41:31:d9:d7:7e:3e:
         06:7d:54:e9:98:91:7a:3b:a3:c3:d4:d9:ca:9d:7d:fe:fa:91:
         14:41:3a:2c:b9:5e:cf:ca:97:97:51:f6:30:2d:6d:d3:a3:71:
         43:44:62:f2:6d:da:43:5b:f2:9d:45:fb:2a:22:84:2b:82:ca:
         02:32:da:d9:10:cd:c1:8a:63:a2:d7:40:78:1c:3d:fe:b3:5c:
         e3:52:98:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:37 2023 by rpki-client on console-ams.rpki-client.org