Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/aed7f8dd-9950-3edc-bd91-58426031e06d.roa
File:                     aed7f8dd-9950-3edc-bd91-58426031e06d.roa (raw, json)
Hash identifier:          Sc+stGbqLiyUlOCkKzvVj3lx63q9GuaCz5hl58AaIac=
Subject key identifier:   5A:A5:90:3C:34:5E:B6:96:62:FE:31:D8:80:A7:04:71:A4:59:92:F7
Certificate issuer:       /CN=6876d5a8-5dd6-440a-97e2-5e20b9e00f5c
Certificate serial:       010D0C9F4328583C397A07A1B0D222542E24E040
Authority key identifier: A1:27:6E:C4:CF:90:E9:A7:8A:38:DD:8C:B9:B8:D1:1C:F0:17:9A:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/aed7f8dd-9950-3edc-bd91-58426031e06d.roa
Signing time:             Fri 11 Jun 2021 04:00:00 +0000
ROA not before:           Fri 11 Jun 2021 04:00:00 +0000
ROA not after:            Fri 15 Mar 2024 04:00:00 +0000
asID:                     7185
IP address blocks:        66.63.169.0/24 maxlen: 24
                          104.129.54.0/24 maxlen: 24
                          104.223.124.0/24 maxlen: 24
                          192.161.191.0/24 maxlen: 24
                          216.144.226.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:39:7a:07:a1:b0:d2:22:54:2e:24:e0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6876d5a8-5dd6-440a-97e2-5e20b9e00f5c
        Validity
            Not Before: Jun 11 04:00:00 2021 GMT
            Not After : Mar 15 04:00:00 2024 GMT
        Subject: CN=23b02e97-b2a5-4831-90ae-6eab6236de87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b2:75:64:45:1d:ea:e1:31:fb:01:64:8a:8d:
                    44:f2:80:9b:9d:d1:e9:8e:ba:a5:bc:7a:a1:c8:de:
                    ef:df:e6:93:f9:a8:a9:b4:1d:7b:03:7c:21:04:db:
                    61:4c:37:44:ae:7d:99:9a:24:d9:7d:00:f2:d4:f0:
                    40:fc:6e:18:48:36:26:ce:b3:75:25:74:14:99:bb:
                    a0:38:1d:72:c2:db:96:fa:e1:1d:e2:96:a7:4d:10:
                    18:68:87:29:8c:e0:da:e7:56:c0:f1:d2:a2:f0:0c:
                    37:bb:99:5c:45:5a:72:17:7b:55:e5:77:0d:f3:8b:
                    80:ef:46:5a:98:1f:73:a1:d1:01:4b:dd:27:ea:9d:
                    bc:5f:35:89:45:48:01:f7:aa:1d:f2:7f:da:a6:18:
                    e0:de:ce:f8:0a:0f:f5:5b:0b:c4:8d:ba:b1:84:cf:
                    0b:40:8e:fc:fb:1a:cb:6b:81:74:30:68:5e:13:6f:
                    ff:87:e7:67:92:25:5c:0a:8c:8c:68:fd:8c:c0:ab:
                    19:7a:8d:dd:7d:7a:ca:fb:c4:fb:1c:41:58:72:b3:
                    d2:40:4a:33:e2:f7:e3:08:b9:8a:c7:68:a8:b3:f5:
                    e5:5a:c6:99:ba:da:ae:ab:8e:2a:7f:aa:75:ef:d4:
                    ef:de:11:5f:b3:6e:b7:0c:8a:ca:29:11:f3:9a:f5:
                    59:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:A5:90:3C:34:5E:B6:96:62:FE:31:D8:80:A7:04:71:A4:59:92:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/aed7f8dd-9950-3edc-bd91-58426031e06d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.crl

            X509v3 Authority Key Identifier:
                keyid:A1:27:6E:C4:CF:90:E9:A7:8A:38:DD:8C:B9:B8:D1:1C:F0:17:9A:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.63.169.0/24
                  104.129.54.0/24
                  104.223.124.0/24
                  192.161.191.0/24
                  216.144.226.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:83:53:6d:c4:14:8e:8e:a2:a9:27:59:e5:cc:00:56:7e:17:
         b7:92:30:79:56:f6:bf:b0:c9:03:ad:93:5a:21:e7:06:61:a3:
         a7:4d:39:a2:3e:2d:76:28:d5:65:72:fc:9d:b1:10:df:5c:ef:
         23:02:09:2d:16:79:04:6b:75:25:59:43:33:6a:1a:83:24:62:
         68:7a:8f:af:48:04:ee:b6:df:79:d7:a2:de:f3:bf:33:0d:84:
         0f:23:7b:c2:c8:53:3f:af:c1:3b:3a:3a:cd:18:09:dd:0d:fc:
         9c:1c:fb:79:d8:6d:5d:94:ad:cf:2d:3c:57:f3:f1:6a:95:5c:
         d7:eb:5e:28:bd:80:22:a0:ce:ea:ae:28:1d:7c:d8:8e:67:4a:
         5b:11:a5:c7:b9:9f:89:5c:68:79:fa:03:13:e4:26:71:4f:32:
         b3:fd:ba:af:d8:bd:53:71:cd:75:ad:aa:93:7d:78:c6:2b:e4:
         94:22:97:74:b9:e2:bd:a3:0b:04:9b:e5:11:cf:cf:a2:b9:2e:
         51:42:4d:29:18:64:2c:20:21:e5:45:30:6d:08:44:c3:9b:69:
         6d:39:14:0c:25:ac:47:60:59:79:21:9c:14:15:d0:67:d0:ea:
         bd:fc:98:a2:9d:b5:e9:22:9c:ce:d9:e8:87:c7:b4:82:5a:f5:
         8e:9d:58:03
-----BEGIN CERTIFICATE-----
MIIGWzCCBUOgAwIBAgIUAQ0Mn0MoWDw5egehsNIiVC4k4EAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjg3NmQ1YTgtNWRkNi00NDBhLTk3ZTItNWUyMGI5ZTAw
ZjVjMB4XDTIxMDYxMTA0MDAwMFoXDTI0MDMxNTA0MDAwMFowLzEtMCsGA1UEAxMk
MjNiMDJlOTctYjJhNS00ODMxLTkwYWUtNmVhYjYyMzZkZTg3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7J1ZEUd6uEx+wFkio1E8oCbndHpjrqlvHqh
yN7v3+aT+aiptB17A3whBNthTDdErn2ZmiTZfQDy1PBA/G4YSDYmzrN1JXQUmbug
OB1ywtuW+uEd4panTRAYaIcpjODa51bA8dKi8Aw3u5lcRVpyF3tV5XcN84uA70Za
mB9zodEBS90n6p28XzWJRUgB96od8n/aphjg3s74Cg/1WwvEjbqxhM8LQI78+xrL
a4F0MGheE2//h+dnkiVcCoyMaP2MwKsZeo3dfXrK+8T7HEFYcrPSQEoz4vfjCLmK
x2ios/XlWsaZutquq44qf6p179Tv3hFfs263DIrKKRHzmvVZ0wIDAQABo4IDbTCC
A2kwHQYDVR0OBBYEFFqlkDw0XraWYv4x2ICnBHGkWZL3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ODc2
ZDVhOC01ZGQ2LTQ0MGEtOTdlMi01ZTIwYjllMDBmNWMvYWVkN2Y4ZGQtOTk1MC0z
ZWRjLWJkOTEtNTg0MjYwMzFlMDZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNjg3NmQ1YTgtNWRkNi00NDBhLTk3
ZTItNWUyMGI5ZTAwZjVjLzY4NzZkNWE4LTVkZDYtNDQwYS05N2UyLTVlMjBiOWUw
MGY1Yy5jcmwwHwYDVR0jBBgwFoAUoSduxM+Q6aeKON2MubjRHPAXmrMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82ODc2ZDVhOC01ZGQ2LTQ0MGEtOTdlMi01ZTIw
YjllMDBmNWMuY2VyMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAQj+pAwQA
aIE2AwQAaN98AwQAwKG/AwQA2JDiMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw
OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw
a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBABKDU23EFI6OoqknWeXMAFZ+
F7eSMHlW9r+wyQOtk1oh5wZho6dNOaI+LXYo1WVy/J2xEN9c7yMCCS0WeQRrdSVZ
QzNqGoMkYmh6j69IBO6233nXot7zvzMNhA8je8LIUz+vwTs6Os0YCd0N/Jwc+3nY
bV2Urc8tPFfz8WqVXNfrXii9gCKgzuquKB182I5nSlsRpce5n4lcaHn6AxPkJnFP
MrP9uq/YvVNxzXWtqpN9eMYr5JQil3S54r2jCwSb5RHPz6K5LlFCTSkYZCwgIeVF
MG0IRMObaW05FAwlrEdgWXkhnBQV0GfQ6r38mKKdtekinM7Z6IfHtIJa9Y6dWAM=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:35 2023 by rpki-client on console-fra.rpki-client.org