Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/f5cbf7af-3c13-3f13-8fed-7945b531f22b.roa
File:                     f5cbf7af-3c13-3f13-8fed-7945b531f22b.roa (raw, json)
Hash identifier:          tGisFcGIyV7LZnbxEXp9/Ya3hydgheAACxMvr77wRw0=
Subject key identifier:   B7:2B:1E:5E:E0:EC:32:28:44:CB:41:FF:5A:48:A8:EB:61:B8:F4:B8
Certificate issuer:       /CN=6876d5a8-5dd6-440a-97e2-5e20b9e00f5c
Certificate serial:       010D0C9F4328583DA424A59B4100CC0976C705D0
Authority key identifier: A1:27:6E:C4:CF:90:E9:A7:8A:38:DD:8C:B9:B8:D1:1C:F0:17:9A:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/f5cbf7af-3c13-3f13-8fed-7945b531f22b.roa
Signing time:             Fri 11 Jun 2021 18:59:09 +0000
ROA not before:           Fri 11 Jun 2021 18:59:09 +0000
ROA not after:            Tue 23 Jul 2024 04:00:00 +0000
asID:                     23470
IP address blocks:        107.150.3.0/24 maxlen: 24
                          204.152.221.0/24 maxlen: 24
                          155.94.172.0/24 maxlen: 24
                          192.161.170.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:a4:24:a5:9b:41:00:cc:09:76:c7:05:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6876d5a8-5dd6-440a-97e2-5e20b9e00f5c
        Validity
            Not Before: Jun 11 18:59:09 2021 GMT
            Not After : Jul 23 04:00:00 2024 GMT
        Subject: CN=afa815bf-e143-4716-b7af-444c03b2404c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:c2:8d:ae:f0:bc:a0:33:47:43:bf:2b:3a:29:
                    80:b3:cc:f2:77:a3:83:06:d7:5d:ff:3d:4b:3d:83:
                    25:5d:84:6e:42:70:5d:fa:84:f2:e2:d0:ff:b4:13:
                    91:8d:d9:8b:39:43:b8:da:0a:de:35:7e:5b:21:97:
                    af:1b:c8:e2:04:2a:74:77:18:33:9d:c4:7d:5b:27:
                    f4:a6:b0:4b:50:e1:67:05:7b:5d:d3:b5:dd:0f:06:
                    66:d1:aa:8d:01:83:34:fb:d2:c8:65:24:24:12:0e:
                    d4:1a:f0:17:bb:fc:06:bb:5b:d5:92:8e:7f:41:07:
                    33:5a:b5:d9:79:d6:58:5c:1b:39:3d:c7:88:70:4a:
                    12:01:97:c1:b9:f5:82:6a:33:66:d4:c8:43:e0:f8:
                    f1:82:fe:59:6c:7e:b8:ab:4f:4c:fd:c2:b0:4c:90:
                    af:d7:2d:a0:a8:4a:e9:b6:a9:b2:24:c0:ec:dc:3a:
                    ed:09:e6:62:fe:28:77:d9:c0:df:17:0e:8e:e7:35:
                    fe:70:51:fe:49:3d:2b:f3:98:d6:a8:b0:e5:79:bf:
                    c1:76:77:64:fb:39:24:f4:62:d5:48:9b:e8:6a:dd:
                    18:f0:76:9c:73:5f:e0:1f:21:6a:38:37:01:e6:23:
                    a6:7c:a5:08:4f:8c:66:df:5e:e0:35:ce:d5:be:72:
                    7f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:2B:1E:5E:E0:EC:32:28:44:CB:41:FF:5A:48:A8:EB:61:B8:F4:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/f5cbf7af-3c13-3f13-8fed-7945b531f22b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.crl

            X509v3 Authority Key Identifier:
                keyid:A1:27:6E:C4:CF:90:E9:A7:8A:38:DD:8C:B9:B8:D1:1C:F0:17:9A:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.150.3.0/24
                  155.94.172.0/24
                  192.161.170.0/24
                  204.152.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:58:08:e6:ba:62:f4:bb:35:82:75:95:61:ca:0e:99:5b:be:
         03:6a:30:39:73:23:07:b6:c8:e2:28:76:78:a7:0d:31:30:4e:
         e9:78:b8:55:d1:5f:44:cc:da:d1:ac:bc:63:09:3b:32:b6:b0:
         86:15:6c:3b:36:d2:0f:4a:d1:a1:79:d2:01:f1:8b:dd:80:f3:
         5b:e2:a8:10:f9:95:5d:37:f1:e2:5f:89:87:26:db:00:76:4f:
         b6:ec:e5:3e:79:9f:5f:01:91:94:c2:78:89:fa:d8:ae:84:29:
         a0:6f:61:eb:b5:29:2c:4e:fc:62:b5:88:fa:cb:04:12:9f:e7:
         ac:bc:f3:f9:2c:80:77:3b:d8:fd:53:fe:9f:fb:e0:56:2d:4e:
         cf:bc:fc:b6:7c:59:c1:d5:31:66:96:df:c2:47:52:4d:b4:d6:
         60:75:43:e1:1e:1c:3d:e5:cd:c7:dd:d8:c7:43:73:8b:b6:a5:
         f6:af:3e:88:62:6a:2e:e7:f8:e3:b3:a0:15:85:ec:36:41:ce:
         49:1b:21:7c:de:20:06:7a:3d:8e:4d:17:f7:c0:91:9e:c5:77:
         33:bc:77:6c:ed:e6:fa:73:fb:8c:82:b2:18:52:9b:61:3e:2c:
         e7:51:2c:cf:a0:a6:36:b4:d8:9a:6b:5b:b3:5e:2e:0d:76:c6:
         c5:75:58:6e
-----BEGIN CERTIFICATE-----
MIIGVTCCBT2gAwIBAgIUAQ0Mn0MoWD2kJKWbQQDMCXbHBdAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjg3NmQ1YTgtNWRkNi00NDBhLTk3ZTItNWUyMGI5ZTAw
ZjVjMB4XDTIxMDYxMTE4NTkwOVoXDTI0MDcyMzA0MDAwMFowLzEtMCsGA1UEAxMk
YWZhODE1YmYtZTE0My00NzE2LWI3YWYtNDQ0YzAzYjI0MDRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8KNrvC8oDNHQ78rOimAs8zyd6ODBtdd/z1L
PYMlXYRuQnBd+oTy4tD/tBORjdmLOUO42greNX5bIZevG8jiBCp0dxgzncR9Wyf0
prBLUOFnBXtd07XdDwZm0aqNAYM0+9LIZSQkEg7UGvAXu/wGu1vVko5/QQczWrXZ
edZYXBs5PceIcEoSAZfBufWCajNm1MhD4Pjxgv5ZbH64q09M/cKwTJCv1y2gqErp
tqmyJMDs3DrtCeZi/ih32cDfFw6O5zX+cFH+ST0r85jWqLDleb/Bdndk+zkk9GLV
SJvoat0Y8Hacc1/gHyFqODcB5iOmfKUIT4xm317gNc7VvnJ/FwIDAQABo4IDZzCC
A2MwHQYDVR0OBBYEFLcrHl7g7DIoRMtB/1pIqOthuPS4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ODc2
ZDVhOC01ZGQ2LTQ0MGEtOTdlMi01ZTIwYjllMDBmNWMvZjVjYmY3YWYtM2MxMy0z
ZjEzLThmZWQtNzk0NWI1MzFmMjJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNjg3NmQ1YTgtNWRkNi00NDBhLTk3
ZTItNWUyMGI5ZTAwZjVjLzY4NzZkNWE4LTVkZDYtNDQwYS05N2UyLTVlMjBiOWUw
MGY1Yy5jcmwwHwYDVR0jBBgwFoAUoSduxM+Q6aeKON2MubjRHPAXmrMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82ODc2ZDVhOC01ZGQ2LTQ0MGEtOTdlMi01ZTIw
YjllMDBmNWMuY2VyMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAa5YDAwQA
m16sAwQAwKGqAwQAzJjdMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr
BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz
Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBAFtYCOa6YvS7NYJ1lWHKDplbvgNqMDlz
Iwe2yOIodninDTEwTul4uFXRX0TM2tGsvGMJOzK2sIYVbDs20g9K0aF50gHxi92A
81viqBD5lV038eJfiYcm2wB2T7bs5T55n18BkZTCeIn62K6EKaBvYeu1KSxO/GK1
iPrLBBKf56y88/ksgHc72P1T/p/74FYtTs+8/LZ8WcHVMWaW38JHUk201mB1Q+Ee
HD3lzcfd2MdDc4u2pfavPohiai7n+OOzoBWF7DZBzkkbIXzeIAZ6PY5NF/fAkZ7F
dzO8d2zt5vpz+4yCshhSm2E+LOdRLM+gpja02JprW7NeLg12xsV1WG4=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:36 2023 by rpki-client on console-fra.rpki-client.org