Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/8e39660c-9c97-383d-bc24-14871773a274.roa
File:                     8e39660c-9c97-383d-bc24-14871773a274.roa (raw, json)
Hash identifier:          fpqpEovb6wA8zAEvZpYTwgsb3Lw8UxCCVmwdrCU5Pfw=
Subject key identifier:   E8:DE:08:06:B4:59:2F:0D:43:DE:06:57:09:63:D4:A3:A5:AF:15:9B
Certificate issuer:       /CN=71ea89b4-ed85-463f-83d9-8453300bf2bd
Certificate serial:       010D0C9F4328583D181281A0F1FD96CB362F72A0
Authority key identifier: 00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/8e39660c-9c97-383d-bc24-14871773a274.roa
Signing time:             Wed 21 Oct 2020 04:00:00 +0000
ROA not before:           Wed 21 Oct 2020 04:00:00 +0000
ROA not after:            Tue 03 Jun 2025 04:00:00 +0000
asID:                     7862
IP address blocks:        144.5.224.0/21 maxlen: 24
                          146.23.8.0/22 maxlen: 24
                          146.23.16.0/22 maxlen: 24
                          146.23.20.0/22 maxlen: 24
                          146.23.28.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:18:12:81:a0:f1:fd:96:cb:36:2f:72:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71ea89b4-ed85-463f-83d9-8453300bf2bd
        Validity
            Not Before: Oct 21 04:00:00 2020 GMT
            Not After : Jun  3 04:00:00 2025 GMT
        Subject: CN=3976a0f3-86de-4af3-a061-405a4ee34e6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a1:54:a7:1c:ba:eb:14:d4:a0:17:41:03:8a:
                    a4:18:b5:d7:d1:89:22:1d:0f:9e:5a:dc:ea:f0:34:
                    7b:6c:ef:88:24:6f:f5:b2:94:a6:08:04:c9:54:d4:
                    f5:e9:15:9f:f7:90:93:86:45:7b:10:b8:6c:89:3f:
                    dc:33:2d:03:30:1b:a4:dc:9e:11:ea:6e:01:e5:70:
                    fd:e6:6f:f9:e6:67:6e:4d:1c:35:2a:e0:f1:91:8d:
                    15:b6:9b:d3:5c:42:6c:3a:36:fc:70:fb:c3:ce:6c:
                    95:30:a0:09:c6:96:ed:17:95:70:33:87:6a:98:a2:
                    e4:73:a9:a2:df:52:bc:66:10:84:a6:11:a2:bd:2b:
                    77:93:d0:02:4a:ee:9f:79:09:d6:81:58:1b:5e:df:
                    aa:2f:c9:47:d9:88:84:ff:e9:c3:59:e4:92:61:09:
                    32:de:ba:8b:96:66:99:7a:bd:29:51:56:1a:dd:07:
                    31:0a:58:f3:6f:50:1a:78:43:85:92:ab:52:76:e2:
                    ca:1f:10:34:69:1d:a5:ca:6a:08:1a:6d:30:a4:a1:
                    a3:53:10:df:b1:bb:bd:3d:77:8c:8d:06:9b:35:e8:
                    70:81:40:3f:b5:a7:10:91:b5:68:d2:c4:c7:05:ed:
                    47:8c:af:bd:a5:2d:7f:37:40:c8:f8:57:41:cd:9c:
                    f0:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:DE:08:06:B4:59:2F:0D:43:DE:06:57:09:63:D4:A3:A5:AF:15:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/8e39660c-9c97-383d-bc24-14871773a274.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.crl

            X509v3 Authority Key Identifier:
                keyid:00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.5.224.0/21
                  146.23.8.0/22
                  146.23.16.0/21
                  146.23.28.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:e1:e3:47:11:e9:82:d7:64:69:34:30:6b:34:2f:c5:49:d5:
         60:a8:fe:39:f1:f6:8e:d2:5b:c2:c1:58:16:d4:f2:33:e9:f4:
         41:50:46:9a:00:8a:1f:8a:b4:ff:66:4f:42:28:7c:9a:24:7a:
         de:10:aa:98:ac:c7:5c:82:3c:17:16:07:a9:e4:ba:6c:b2:bd:
         f4:f8:66:2a:38:26:4b:e6:06:55:6a:bc:98:5f:f3:c9:31:ae:
         9a:0d:b1:7a:55:28:4d:af:a3:a8:ef:6c:92:0d:b8:e0:ba:01:
         bb:47:30:09:49:30:21:c4:8b:89:f4:0b:eb:07:5c:0e:f0:89:
         b2:b2:3e:b6:45:81:94:bc:17:26:ee:ae:7d:c3:79:cd:ef:43:
         fa:c9:25:9f:32:5a:79:15:f7:96:a8:62:71:8d:5d:3f:2a:71:
         80:83:88:25:2a:14:14:ac:a1:87:9b:21:0e:dc:65:c0:f2:ad:
         31:f7:fc:54:cb:fd:ca:66:80:71:93:8b:31:a9:c4:e3:07:5d:
         58:c3:69:67:04:6e:13:b0:8b:49:f9:90:f5:f2:8d:3e:b1:70:
         56:e5:f4:0c:55:fa:42:0d:5c:0b:43:e0:5a:1f:d2:e3:63:f9:
         3a:b6:b2:74:d1:3c:23:92:48:2a:b6:bb:6d:f4:e5:61:8d:75:
         af:85:73:ce
-----BEGIN CERTIFICATE-----
MIIGVTCCBT2gAwIBAgIUAQ0Mn0MoWD0YEoGg8f2WyzYvcqAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzFlYTg5YjQtZWQ4NS00NjNmLTgzZDktODQ1MzMwMGJm
MmJkMB4XDTIwMTAyMTA0MDAwMFoXDTI1MDYwMzA0MDAwMFowLzEtMCsGA1UEAxMk
Mzk3NmEwZjMtODZkZS00YWYzLWEwNjEtNDA1YTRlZTM0ZTZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6FUpxy66xTUoBdBA4qkGLXX0YkiHQ+eWtzq
8DR7bO+IJG/1spSmCATJVNT16RWf95CThkV7ELhsiT/cMy0DMBuk3J4R6m4B5XD9
5m/55mduTRw1KuDxkY0VtpvTXEJsOjb8cPvDzmyVMKAJxpbtF5VwM4dqmKLkc6mi
31K8ZhCEphGivSt3k9ACSu6feQnWgVgbXt+qL8lH2YiE/+nDWeSSYQky3rqLlmaZ
er0pUVYa3QcxCljzb1AaeEOFkqtSduLKHxA0aR2lymoIGm0wpKGjUxDfsbu9PXeM
jQabNehwgUA/tacQkbVo0sTHBe1HjK+9pS1/N0DI+FdBzZzwEwIDAQABo4IDZzCC
A2MwHQYDVR0OBBYEFOjeCAa0WS8NQ94GVwlj1KOlrxWbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83MWVh
ODliNC1lZDg1LTQ2M2YtODNkOS04NDUzMzAwYmYyYmQvOGUzOTY2MGMtOWM5Ny0z
ODNkLWJjMjQtMTQ4NzE3NzNhMjc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNzFlYTg5YjQtZWQ4NS00NjNmLTgz
ZDktODQ1MzMwMGJmMmJkLzcxZWE4OWI0LWVkODUtNDYzZi04M2Q5LTg0NTMzMDBi
ZjJiZC5jcmwwHwYDVR0jBBgwFoAUAPoosGNeNAxamY5KWp40aTpaVmIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC83MWVhODliNC1lZDg1LTQ2M2YtODNkOS04NDUz
MzAwYmYyYmQuY2VyMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQDkAXgAwQC
khcIAwQDkhcQAwQCkhccMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr
BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz
Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBALvh40cR6YLXZGk0MGs0L8VJ1WCo/jnx
9o7SW8LBWBbU8jPp9EFQRpoAih+KtP9mT0IofJoket4Qqpisx1yCPBcWB6nkumyy
vfT4Zio4JkvmBlVqvJhf88kxrpoNsXpVKE2vo6jvbJINuOC6AbtHMAlJMCHEi4n0
C+sHXA7wibKyPrZFgZS8Fyburn3Dec3vQ/rJJZ8yWnkV95aoYnGNXT8qcYCDiCUq
FBSsoYebIQ7cZcDyrTH3/FTL/cpmgHGTizGpxOMHXVjDaWcEbhOwi0n5kPXyjT6x
cFbl9AxV+kINXAtD4Fof0uNj+Tq2snTRPCOSSCq2u2305WGNda+Fc84=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:09 2023 by rpki-client on console-ams.rpki-client.org