Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/46d43cee-39e6-4150-ae7b-94a20c139206/8dea2d48-3392-3419-aeab-e25192c2eae8.roa
File:                     8dea2d48-3392-3419-aeab-e25192c2eae8.roa (raw, json)
Hash identifier:          UCSbl2l/mkihp+zVETs2DZl0K37/64xKS4ApwLuxwpc=
Subject key identifier:   D1:8B:CA:2E:34:78:74:56:DD:F5:BC:FB:BF:05:B8:A4:49:88:76:58
Certificate issuer:       /CN=46d43cee-39e6-4150-ae7b-94a20c139206
Certificate serial:       010D0C9F4328583A44CD8F4DFAE804ADF0048EC0
Authority key identifier: 28:87:3B:F3:C9:20:CA:EE:07:F8:54:B5:01:37:9B:C6:84:08:F9:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/46d43cee-39e6-4150-ae7b-94a20c139206.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/46d43cee-39e6-4150-ae7b-94a20c139206/8dea2d48-3392-3419-aeab-e25192c2eae8.roa
Signing time:             Tue 15 Jun 2021 04:00:00 +0000
ROA not before:           Tue 15 Jun 2021 04:00:00 +0000
ROA not after:            Sun 01 Jun 2031 04:00:00 +0000
asID:                     394367
IP address blocks:        23.176.0.0/24 maxlen: 24
                          205.207.142.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:44:cd:8f:4d:fa:e8:04:ad:f0:04:8e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46d43cee-39e6-4150-ae7b-94a20c139206
        Validity
            Not Before: Jun 15 04:00:00 2021 GMT
            Not After : Jun  1 04:00:00 2031 GMT
        Subject: CN=a290869f-355e-439b-95d1-654266f32df0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:86:ab:1e:54:d3:23:7c:85:ab:91:89:36:38:
                    7d:4f:77:36:f4:f9:95:7b:3f:40:5e:8b:76:ac:ac:
                    eb:5f:f4:ac:f9:ad:59:13:0a:c3:98:e2:0d:1b:5a:
                    cb:0e:20:c3:ef:81:30:c3:31:fa:8b:e4:7c:9c:ff:
                    4c:e5:2a:fd:fe:f5:af:38:ca:ea:1d:4c:a0:d7:a2:
                    bd:d3:d8:36:d8:18:d2:f6:3c:a6:2c:f0:88:18:89:
                    7c:6e:b5:06:07:5d:d9:2d:b2:5b:6b:9f:1b:41:07:
                    56:f7:59:c1:b7:05:33:af:a1:81:5d:75:62:f6:c9:
                    e7:5d:35:ff:d4:95:f6:e8:08:87:92:4c:62:b6:5f:
                    4e:4e:c5:ed:ba:70:37:90:86:22:88:d9:13:2a:d8:
                    9d:e2:f0:cc:33:b0:c9:33:11:52:2d:e9:17:a3:c9:
                    ce:ea:16:2f:02:f6:56:40:76:18:48:4e:04:ee:6b:
                    4f:7f:75:ab:54:ed:e0:6e:bb:4d:4e:4e:10:84:57:
                    db:ed:37:a3:d5:99:17:38:05:e3:c2:64:83:c1:97:
                    42:3a:6f:fe:ef:f9:5b:53:78:47:14:af:4a:5a:77:
                    04:f2:33:44:1a:9e:e8:da:cb:69:99:4c:4d:fd:25:
                    c0:ad:f4:31:55:9d:ab:93:1f:4e:3b:c1:6b:a8:06:
                    58:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:8B:CA:2E:34:78:74:56:DD:F5:BC:FB:BF:05:B8:A4:49:88:76:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/46d43cee-39e6-4150-ae7b-94a20c139206/8dea2d48-3392-3419-aeab-e25192c2eae8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/46d43cee-39e6-4150-ae7b-94a20c139206/46d43cee-39e6-4150-ae7b-94a20c139206.crl

            X509v3 Authority Key Identifier:
                keyid:28:87:3B:F3:C9:20:CA:EE:07:F8:54:B5:01:37:9B:C6:84:08:F9:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/46d43cee-39e6-4150-ae7b-94a20c139206.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.176.0.0/24
                  205.207.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:fe:22:3f:5d:2f:45:a4:b9:00:44:22:78:fd:41:44:0b:62:
         67:fc:08:e8:7c:9d:a3:01:40:3d:24:95:40:2b:45:d8:32:c0:
         88:38:d6:72:22:15:3e:f5:e9:9b:e0:91:ea:93:50:d8:03:6a:
         67:53:d4:f4:43:e8:2f:f0:81:ef:34:7f:f2:6d:67:3f:65:d6:
         3b:aa:3e:fa:a5:45:a0:73:bc:4f:fd:c5:22:62:46:56:3f:1f:
         0b:e2:51:3f:95:99:9b:86:f8:d9:33:c6:c3:93:e4:12:31:5c:
         0c:cb:44:ba:83:ed:d1:1c:94:2a:69:ef:ac:17:66:a0:56:ae:
         24:ce:ca:e6:64:97:2f:be:77:40:77:63:11:4f:9a:72:9a:f3:
         44:ac:be:26:21:dd:12:7f:2d:c0:a9:d7:4f:68:81:19:f5:69:
         c2:3d:a1:31:54:02:96:9a:91:24:53:6a:82:86:0e:7e:7c:63:
         fa:81:b7:0c:93:b8:5d:dd:28:08:18:cf:dd:e0:fb:46:66:b5:
         e9:d0:b5:27:ef:a8:5b:b9:e6:d9:d5:dd:f4:e6:e6:f4:fc:6c:
         8a:23:78:54:e1:ca:3f:38:3a:5b:4c:7c:40:ad:e2:70:6c:ef:
         58:88:70:71:00:56:c8:bb:4c:9b:67:93:49:f9:2e:57:af:18:
         ac:5a:ed:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:34 2023 by rpki-client on console-fra.rpki-client.org