Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/fe95d710-f64a-3063-8902-2116df038747.roa
File:                     fe95d710-f64a-3063-8902-2116df038747.roa (raw, json)
Hash identifier:          gUBp7RjCkdeMmc+fk3JGR3+yi35ajD+GTZJvwxaWXfI=
Subject key identifier:   63:C3:13:47:41:DE:02:CC:9D:6E:CD:99:4E:E9:38:EC:D4:23:F1:1E
Certificate issuer:       /CN=95e29289-6f1c-4c2f-84f4-c944e9e54940
Certificate serial:       010D0C9F4328584225685188C78BCD1F3A918640
Authority key identifier: 4D:BA:45:AA:AB:B9:87:63:A5:E6:6F:B3:09:C5:6E:97:30:94:9A:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/fe95d710-f64a-3063-8902-2116df038747.roa
Signing time:             Thu 08 Jun 2023 01:00:16 +0000
ROA not before:           Thu 08 Jun 2023 01:00:16 +0000
ROA not after:            Wed 06 Sep 2023 01:00:16 +0000
asID:                     203
IP address blocks:        155.254.156.0/22 maxlen: 22
                          155.254.148.0/22 maxlen: 22
                          155.254.144.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:25:68:51:88:c7:8b:cd:1f:3a:91:86:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95e29289-6f1c-4c2f-84f4-c944e9e54940
        Validity
            Not Before: Jun  8 01:00:16 2023 GMT
            Not After : Sep  6 01:00:16 2023 GMT
        Subject: CN=cac2d69b-386d-415c-ab22-8836991acaa0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:b8:11:db:55:bd:43:87:81:b9:d7:e9:58:a1:
                    23:b0:f3:70:0d:8c:9c:c0:9c:35:c7:a1:90:a1:01:
                    eb:65:3f:22:c4:d7:bd:39:0c:e5:8e:28:c3:46:b1:
                    72:0b:96:32:fa:1a:13:54:d4:82:41:05:05:1d:c0:
                    1b:44:78:14:30:c5:96:d2:78:cd:b7:18:20:7a:64:
                    0a:2d:f9:11:0c:87:6c:24:ae:e7:6d:70:39:91:f6:
                    f4:37:b0:1f:ce:b1:40:e4:32:dc:82:c8:c8:4e:f4:
                    1c:ef:c9:44:41:97:ad:01:94:18:d0:1c:26:f5:1f:
                    27:92:d9:94:86:f2:a0:9d:ee:b2:ce:92:22:24:5d:
                    39:20:c4:6d:f9:e9:ad:3e:52:96:08:5e:42:c7:ad:
                    f2:79:bc:9c:b6:fa:83:a0:13:ca:05:92:3e:97:b5:
                    3b:12:0c:e8:33:0f:5e:14:35:a2:63:45:9f:60:de:
                    16:3c:d5:5e:66:c7:8e:ed:6d:30:8d:32:a7:90:77:
                    22:9c:bc:5f:0b:e0:56:24:9f:a5:48:1d:ad:88:14:
                    1e:21:e8:58:03:d6:4a:07:84:8b:c5:07:2f:35:dd:
                    70:73:58:36:c5:f4:a3:ed:1f:a5:7e:90:d4:c4:1c:
                    df:32:01:44:e5:20:c6:21:f3:23:40:ec:63:be:83:
                    07:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:C3:13:47:41:DE:02:CC:9D:6E:CD:99:4E:E9:38:EC:D4:23:F1:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/fe95d710-f64a-3063-8902-2116df038747.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/95e29289-6f1c-4c2f-84f4-c944e9e54940.crl

            X509v3 Authority Key Identifier:
                keyid:4D:BA:45:AA:AB:B9:87:63:A5:E6:6F:B3:09:C5:6E:97:30:94:9A:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.254.144.0/21
                  155.254.156.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:9b:0e:1f:4b:43:6e:cb:83:b4:24:ec:51:60:96:e2:e1:fc:
         d3:11:3d:b2:60:fb:c5:ab:cb:1a:63:49:40:44:f8:22:be:f1:
         12:c5:70:40:4c:58:d2:e5:be:24:bf:a3:e1:28:e8:1f:e8:06:
         01:d2:52:13:43:bb:18:b4:81:89:6e:7b:1a:67:0b:b4:df:ac:
         c4:b4:df:fd:63:e4:36:35:66:93:ae:cb:8c:26:c3:eb:3a:be:
         ca:01:0b:3c:af:8b:f7:49:bb:ea:8b:7b:bc:03:bd:4c:7b:0a:
         67:4d:21:22:a0:86:44:39:e0:a2:87:8b:e8:67:8e:e3:5b:66:
         14:78:4a:05:87:b1:f7:b4:32:a0:e4:b5:12:0f:34:01:22:75:
         e5:5d:d1:11:3e:85:1c:64:03:39:3c:94:81:1c:ba:ca:da:ce:
         de:e5:1e:54:9c:bc:fa:00:eb:55:23:8f:28:d3:03:44:11:5d:
         35:e2:2c:93:9e:2b:84:c5:b0:7b:c2:67:f8:e9:a9:6b:d4:57:
         d7:d1:52:ec:02:21:df:90:34:34:5c:3c:7a:b6:95:7e:31:d0:
         08:9a:80:fa:cc:81:55:69:09:66:03:63:b4:3e:ce:2d:1d:5d:
         b2:cb:e3:7e:3c:a3:b1:90:87:cd:e5:99:04:da:89:c6:a1:16:
         0e:34:9e:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:42 2023 by rpki-client on console-fra.rpki-client.org