Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/0e3ac12b-653e-30ff-a8ae-9a81fe7fccc9.roa
File:                     0e3ac12b-653e-30ff-a8ae-9a81fe7fccc9.roa (raw, json)
Hash identifier:          Mj8631GIpEjwX1JgUrHEazs5xrmQ4hAbuQ63mr7xPSo=
Subject key identifier:   31:D8:26:5A:AE:B8:ED:3C:AD:B4:BB:8E:40:9C:DB:23:39:B3:6B:14
Certificate issuer:       /CN=b32217e1-2473-49a5-919e-08e1896c5019
Certificate serial:       010D0C9F432858433B2803973AE87FFB58D6C3A0
Authority key identifier: 48:AE:0D:F8:A0:D7:74:90:58:A4:5A:B5:23:A6:6E:B7:B1:C0:77:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/0e3ac12b-653e-30ff-a8ae-9a81fe7fccc9.roa
Signing time:             Fri 15 Sep 2023 12:45:31 +0000
ROA not before:           Fri 15 Sep 2023 12:45:31 +0000
ROA not after:            Thu 14 Dec 2023 13:45:31 +0000
asID:                     22191
IP address blocks:        130.45.229.0/24 maxlen: 24
                          130.45.230.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:3b:28:03:97:3a:e8:7f:fb:58:d6:c3:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b32217e1-2473-49a5-919e-08e1896c5019
        Validity
            Not Before: Sep 15 12:45:31 2023 GMT
            Not After : Dec 14 13:45:31 2023 GMT
        Subject: CN=11310bbc-a8d3-4551-b228-92aadd7ab396
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:76:66:de:47:98:ff:de:ac:b2:75:d6:20:9a:
                    b7:c4:20:09:e2:f0:ee:6a:6e:80:5f:a2:76:05:0a:
                    40:fe:5d:ae:f7:27:46:52:c0:1d:83:64:7e:4c:9c:
                    6b:22:b9:23:dc:e0:f2:3f:ce:af:f1:84:74:04:18:
                    eb:c8:5a:de:fd:3b:e7:a8:d1:44:1b:87:72:b8:47:
                    62:c0:6f:8d:92:df:e7:cb:7a:f9:2d:81:dd:3a:4c:
                    9a:34:d0:03:99:e1:36:95:38:5d:97:ac:36:70:31:
                    09:a1:9a:ff:df:d1:6b:c0:fa:5f:83:38:f1:dc:a2:
                    bc:d7:0a:c1:fd:ac:c3:27:5a:90:de:d3:33:23:0e:
                    75:6c:1b:fe:a9:c6:3f:0a:86:06:82:c1:0a:a6:87:
                    cf:ee:b0:ff:38:07:41:11:43:1b:1c:7c:03:9f:ad:
                    76:56:91:1e:5e:51:67:5e:2f:d7:fd:98:78:2b:c6:
                    22:37:a1:a7:46:a8:a5:37:7a:dd:b6:b6:04:2f:bf:
                    9e:30:bd:74:0e:1f:77:e6:4e:5f:f7:a3:71:c2:54:
                    ec:79:e0:a7:77:aa:4c:b8:9e:2d:7d:24:74:6e:90:
                    08:5e:b2:f5:2e:16:83:c3:7a:ef:a5:b4:75:0e:3d:
                    3f:72:ba:91:2f:52:10:f3:e4:3d:b4:a7:58:90:f9:
                    7d:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:D8:26:5A:AE:B8:ED:3C:AD:B4:BB:8E:40:9C:DB:23:39:B3:6B:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/0e3ac12b-653e-30ff-a8ae-9a81fe7fccc9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/b32217e1-2473-49a5-919e-08e1896c5019.crl

            X509v3 Authority Key Identifier:
                keyid:48:AE:0D:F8:A0:D7:74:90:58:A4:5A:B5:23:A6:6E:B7:B1:C0:77:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.45.229.0-130.45.230.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:37:08:2d:4b:76:14:24:da:5a:ad:4e:02:a8:2a:82:57:ab:
         f4:6f:40:de:d4:5a:77:d0:74:49:0e:c3:e9:f2:95:75:4f:2a:
         34:fe:9b:68:c0:36:86:e2:d4:32:5b:9f:10:b1:6f:bd:d2:79:
         38:61:7e:52:44:f5:2e:f6:b6:2c:bb:2f:06:83:03:39:2d:1e:
         d2:94:ee:ce:23:a5:7e:9d:46:3f:23:00:0d:d3:a0:fc:22:a2:
         39:12:8c:77:77:1b:23:27:3f:8d:7a:92:0f:42:f9:56:7e:6a:
         f4:73:49:4f:bf:a7:b8:a8:af:2e:64:e4:82:a7:ec:cf:46:ff:
         72:71:f8:2d:d8:57:54:c2:52:40:6a:c9:27:86:23:70:31:e1:
         f7:05:b2:66:36:a1:bb:6c:44:82:34:00:65:b9:94:b7:3f:ac:
         c8:5f:b9:5a:1d:8f:a9:e4:f6:63:87:88:1a:4a:00:da:64:ce:
         42:e9:6a:fb:90:c8:02:e9:bc:6f:db:26:77:8e:af:bf:ac:92:
         f1:f4:e2:02:3f:09:e9:91:46:da:61:90:27:53:ad:b6:49:da:
         0c:cf:a4:25:f3:33:d9:b8:ea:55:9d:11:97:b2:0f:56:82:2b:
         1e:a0:de:b5:0a:90:e9:4c:7d:bd:19:1f:90:38:a0:89:00:ef:
         65:2e:07:57
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEM7KAOXOuh/+1jWw6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjMyMjE3ZTEtMjQ3My00OWE1LTkxOWUtMDhlMTg5NmM1
MDE5MB4XDTIzMDkxNTEyNDUzMVoXDTIzMTIxNDEzNDUzMVowLzEtMCsGA1UEAxMk
MTEzMTBiYmMtYThkMy00NTUxLWIyMjgtOTJhYWRkN2FiMzk2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3Zm3keY/96ssnXWIJq3xCAJ4vDuam6AX6J2
BQpA/l2u9ydGUsAdg2R+TJxrIrkj3ODyP86v8YR0BBjryFre/TvnqNFEG4dyuEdi
wG+Nkt/ny3r5LYHdOkyaNNADmeE2lThdl6w2cDEJoZr/39FrwPpfgzjx3KK81wrB
/azDJ1qQ3tMzIw51bBv+qcY/CoYGgsEKpofP7rD/OAdBEUMbHHwDn612VpEeXlFn
Xi/X/Zh4K8YiN6GnRqilN3rdtrYEL7+eML10Dh935k5f96NxwlTseeCnd6pMuJ4t
fSR0bpAIXrL1LhaDw3rvpbR1Dj0/crqRL1IQ8+Q9tKdYkPl9dQIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFDHYJlquuO08rbS7jkCc2yM5s2sUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iMzIy
MTdlMS0yNDczLTQ5YTUtOTE5ZS0wOGUxODk2YzUwMTkvMGUzYWMxMmItNjUzZS0z
MGZmLWE4YWUtOWE4MWZlN2ZjY2M5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjMyMjE3ZTEtMjQ3My00OWE1LTkx
OWUtMDhlMTg5NmM1MDE5L2IzMjIxN2UxLTI0NzMtNDlhNS05MTllLTA4ZTE4OTZj
NTAxOS5jcmwwHwYDVR0jBBgwFoAUSK4N+KDXdJBYpFq1I6Zut7HAd7YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9iMzIyMTdlMS0yNDczLTQ5YTUtOTE5ZS0wOGUx
ODk2YzUwMTkuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACCLeUD
BACCLeYwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEAdzcILUt2FCTaWq1OAqgqgler9G9A3tRad9B0SQ7D6fKV
dU8qNP6baMA2huLUMlufELFvvdJ5OGF+UkT1Lva2LLsvBoMDOS0e0pTuziOlfp1G
PyMADdOg/CKiORKMd3cbIyc/jXqSD0L5Vn5q9HNJT7+nuKivLmTkgqfsz0b/cnH4
LdhXVMJSQGrJJ4YjcDHh9wWyZjahu2xEgjQAZbmUtz+syF+5Wh2PqeT2Y4eIGkoA
2mTOQulq+5DIAum8b9smd46vv6yS8fTiAj8J6ZFG2mGQJ1OttknaDM+kJfMz2bjq
VZ0Rl7IPVoIrHqDetQqQ6Ux9vRkfkDigiQDvZS4HVw==
-----END CERTIFICATE-----
Generated at Mon Sep 25 13:59:53 2023 by rpki-client on console-fra.rpki-client.org