Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b37c853d-f614-417a-87d9-fed9cf9b6e4a/516222a9-791c-3899-9c97-bfea67709d79.roa
File:                     516222a9-791c-3899-9c97-bfea67709d79.roa (raw, json)
Hash identifier:          2Cbih0z0/NJSOOl11pCNlfeBmK4+JvOYBjmDajifPJY=
Subject key identifier:   DD:24:4C:60:7A:E5:16:D5:E6:32:53:94:D5:61:40:52:9C:92:E5:57
Certificate issuer:       /CN=b37c853d-f614-417a-87d9-fed9cf9b6e4a
Certificate serial:       010D0C9F432858428A1C8F30A305A73497659980
Authority key identifier: 3E:A7:F9:01:23:61:AC:1F:79:59:23:F4:91:51:C1:90:B3:00:69:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b37c853d-f614-417a-87d9-fed9cf9b6e4a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b37c853d-f614-417a-87d9-fed9cf9b6e4a/516222a9-791c-3899-9c97-bfea67709d79.roa
Signing time:             Fri 14 Jul 2023 02:44:21 +0000
ROA not before:           Fri 14 Jul 2023 02:44:21 +0000
ROA not after:            Thu 12 Oct 2023 02:44:21 +0000
asID:                     399899
IP address blocks:        172.98.52.0/23 maxlen: 24
                          2602:fbb7::/36 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:8a:1c:8f:30:a3:05:a7:34:97:65:99:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b37c853d-f614-417a-87d9-fed9cf9b6e4a
        Validity
            Not Before: Jul 14 02:44:21 2023 GMT
            Not After : Oct 12 02:44:21 2023 GMT
        Subject: CN=b81e6aa5-abff-455d-8c82-59b9264132b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:a9:ca:89:4a:af:29:e7:8d:09:29:32:db:61:
                    f5:a6:7f:93:6e:b2:f2:4f:6c:c2:8a:a8:76:c5:4a:
                    a8:df:26:34:0c:61:a4:50:ad:a5:d3:3b:16:93:b0:
                    4e:c8:10:77:3c:f1:e1:80:5e:24:4c:31:4d:ac:58:
                    3a:55:d5:c2:9d:7e:a4:e3:20:58:1c:4c:0a:75:12:
                    71:89:7f:27:65:2e:dd:3b:1a:cc:12:5d:da:fc:a2:
                    7a:56:90:db:32:6f:d4:b5:19:94:40:f3:79:2e:76:
                    a3:45:65:3a:4a:09:9c:f5:9b:0d:34:0b:b7:b6:a9:
                    d3:84:20:c1:fe:02:d4:b0:fe:cc:f6:41:d5:d5:59:
                    57:93:02:a6:2e:fa:c6:07:04:6c:11:40:0b:ae:8e:
                    b2:ee:2a:5e:6e:c3:31:00:f0:a7:9f:b8:b0:a1:9e:
                    f7:5a:4d:5f:3f:c0:b2:2d:25:2c:37:d5:e9:e4:e4:
                    2c:48:dc:99:c1:27:3e:3f:1c:5e:1a:da:ae:8a:85:
                    ae:ec:1c:a8:5e:13:3c:5d:10:e4:e3:3d:85:1d:ea:
                    b0:14:75:86:42:1c:91:c8:cc:20:a3:d5:1a:b9:6d:
                    dd:5f:27:00:77:9a:5b:35:32:01:98:6b:d3:3b:8c:
                    5b:de:2e:61:78:80:0c:17:91:86:a0:86:70:09:2a:
                    17:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:24:4C:60:7A:E5:16:D5:E6:32:53:94:D5:61:40:52:9C:92:E5:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b37c853d-f614-417a-87d9-fed9cf9b6e4a/516222a9-791c-3899-9c97-bfea67709d79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b37c853d-f614-417a-87d9-fed9cf9b6e4a/b37c853d-f614-417a-87d9-fed9cf9b6e4a.crl

            X509v3 Authority Key Identifier:
                keyid:3E:A7:F9:01:23:61:AC:1F:79:59:23:F4:91:51:C1:90:B3:00:69:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b37c853d-f614-417a-87d9-fed9cf9b6e4a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.98.52.0/23
                IPv6:
                  2602:fbb7::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:c3:d7:05:fb:ca:77:dd:86:2a:76:32:e3:23:45:c1:45:00:
         4f:f7:b7:21:48:6d:a0:57:33:33:66:38:fe:cf:13:ee:71:43:
         e1:f3:de:56:79:38:4f:f1:23:f6:52:e4:f7:63:0b:3e:ec:55:
         de:4f:10:e9:ef:29:7f:79:c5:60:f5:23:82:af:34:7f:c1:07:
         83:67:54:8b:56:ef:21:be:8e:ea:81:63:57:74:0f:65:8c:9e:
         62:7e:86:29:a4:4d:b7:cb:b9:f7:fe:a4:eb:5d:10:d6:dc:c5:
         ce:27:03:e5:73:d1:a7:0f:16:8c:c5:0e:ba:39:0d:fa:96:bd:
         03:4f:b6:a3:8f:17:cd:64:81:7a:39:3d:fb:e1:5d:28:dc:42:
         f8:8f:e9:61:ef:87:8d:1b:80:44:d9:38:20:a4:6d:38:76:48:
         b5:67:09:32:56:3b:72:3a:db:32:3f:02:8d:88:c8:77:d4:38:
         f5:93:ff:91:b4:5e:f2:ff:6a:7c:90:b2:f2:59:6f:7b:59:4f:
         0a:c0:7f:6b:49:81:dc:2b:1b:66:d1:0c:9e:2a:55:7f:ce:5b:
         c1:12:9c:b7:c4:80:b9:7e:00:c7:ad:91:d8:5a:55:e9:09:13:
         d2:85:36:a3:4e:e1:46:92:b1:98:4e:95:9a:a5:82:9d:ec:b7:
         6f:bc:bc:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:43 2023 by rpki-client on console-fra.rpki-client.org