Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0339efaa-3121-4a82-8dd8-192f56ab47d1/182ba7af-20d6-3927-a006-173aeb8fc2bc.roa
File:                     182ba7af-20d6-3927-a006-173aeb8fc2bc.roa (raw, json)
Hash identifier:          vBlwvrRgMGW43XuJ4avgs5yDqSWhneMvDeFll1/zN/I=
Subject key identifier:   E0:2E:CE:69:8E:86:09:90:64:35:3E:D5:A0:82:B5:C9:B0:19:F6:8A
Certificate issuer:       /CN=0339efaa-3121-4a82-8dd8-192f56ab47d1
Certificate serial:       010D0C9F432858402E376F783BDE1687EA344D00
Authority key identifier: B7:D4:2E:91:48:02:33:18:5A:64:6C:A5:2B:0C:93:B7:AF:1F:EC:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0339efaa-3121-4a82-8dd8-192f56ab47d1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0339efaa-3121-4a82-8dd8-192f56ab47d1/182ba7af-20d6-3927-a006-173aeb8fc2bc.roa
Signing time:             Fri 09 Dec 2022 17:25:29 +0000
ROA not before:           Fri 09 Dec 2022 17:25:29 +0000
ROA not after:            Thu 13 Mar 2025 04:00:00 +0000
asID:                     14041
IP address blocks:        204.228.181.0/24 maxlen: 24
                          204.228.177.0/24 maxlen: 24
                          204.228.179.0/24 maxlen: 24
                          204.228.175.0/24 maxlen: 24
                          199.104.104.0/24 maxlen: 24
                          199.104.105.0/24 maxlen: 24
                          204.228.170.0/24 maxlen: 24
                          204.228.176.0/24 maxlen: 24
                          204.228.178.0/24 maxlen: 24
                          204.228.180.0/24 maxlen: 24
                          204.228.182.0/24 maxlen: 24
                          204.228.183.0/24 maxlen: 24
                          204.228.184.0/24 maxlen: 24
                          204.228.185.0/24 maxlen: 24
                          204.228.186.0/24 maxlen: 24
                          204.228.187.0/24 maxlen: 24
                          204.228.188.0/24 maxlen: 24
                          204.228.189.0/24 maxlen: 24
                          204.228.190.0/24 maxlen: 24
                          204.228.191.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:2e:37:6f:78:3b:de:16:87:ea:34:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0339efaa-3121-4a82-8dd8-192f56ab47d1
        Validity
            Not Before: Dec  9 17:25:29 2022 GMT
            Not After : Mar 13 04:00:00 2025 GMT
        Subject: CN=4c4a7aec-f15a-4be6-95c2-ff8f6eff907d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ba:b4:76:4b:22:a2:71:a6:b3:c8:f2:4c:6e:
                    34:61:40:13:0d:46:78:ad:67:a0:88:28:73:35:82:
                    bd:6c:f6:3f:64:1c:be:99:4c:32:b1:0d:96:7d:29:
                    12:2c:a2:9d:1c:55:5d:f5:6a:f0:ab:3a:4e:28:d8:
                    15:a3:41:fb:ad:5b:ec:06:e8:5e:a5:d2:63:37:a6:
                    01:e9:5b:03:03:16:4e:c1:fb:83:47:58:31:a2:73:
                    94:f0:18:bd:cf:01:de:0b:21:26:63:fb:1c:42:a7:
                    91:31:b0:78:47:7c:07:c1:b4:96:65:c5:46:38:d5:
                    be:e2:74:c1:e3:59:ba:ce:b8:16:4d:47:02:c4:b8:
                    3d:98:3c:fe:2e:4b:ef:c9:f0:8a:89:c1:09:7f:fb:
                    80:0c:e4:ec:fe:13:19:67:1b:9c:f5:fa:8f:17:a9:
                    a8:37:30:e3:ce:96:61:26:5f:02:30:d2:01:34:2b:
                    6e:a1:81:6c:ab:0b:18:a7:e0:f6:15:e8:a4:b7:61:
                    d6:e0:db:03:6b:8b:25:9c:a5:e2:19:d0:a5:83:a7:
                    72:92:c5:47:70:a8:79:d0:68:d6:07:90:02:c1:58:
                    bb:41:65:00:3b:fd:07:b3:98:70:ea:e4:0f:a8:2e:
                    06:7b:7c:95:6f:43:ad:62:1f:f1:9d:39:63:b2:e5:
                    4d:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:2E:CE:69:8E:86:09:90:64:35:3E:D5:A0:82:B5:C9:B0:19:F6:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0339efaa-3121-4a82-8dd8-192f56ab47d1/182ba7af-20d6-3927-a006-173aeb8fc2bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0339efaa-3121-4a82-8dd8-192f56ab47d1/0339efaa-3121-4a82-8dd8-192f56ab47d1.crl

            X509v3 Authority Key Identifier:
                keyid:B7:D4:2E:91:48:02:33:18:5A:64:6C:A5:2B:0C:93:B7:AF:1F:EC:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0339efaa-3121-4a82-8dd8-192f56ab47d1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.104.104.0/23
                  204.228.170.0/24
                  204.228.175.0-204.228.191.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:76:00:f9:34:33:41:0d:3c:8b:80:28:1d:33:ff:01:f6:b6:
         ac:96:ac:76:88:5f:38:9f:9d:aa:e7:c9:4b:34:dc:79:54:45:
         62:13:bd:a5:74:29:45:b5:68:84:0d:3f:68:7a:50:5f:22:f2:
         60:64:40:23:97:22:72:e2:a6:db:8f:21:51:d3:12:55:07:7f:
         f2:56:8f:95:fb:98:90:5b:2a:1c:d8:18:e8:b0:99:0c:5a:5f:
         e3:00:83:d0:a0:59:31:d3:71:07:6d:1f:38:aa:f0:94:a4:c9:
         c3:bc:dc:33:75:80:46:d6:d2:cc:4b:5f:f2:75:be:48:4c:d3:
         b1:83:8f:2f:7e:c4:93:3d:10:d1:fe:3e:6b:10:38:00:09:69:
         c4:c0:e3:b7:80:fa:9f:34:95:56:74:dd:5e:3f:c7:01:68:e4:
         d7:db:36:50:9c:9f:c2:4a:89:b2:fd:25:bf:7b:43:3f:81:43:
         23:04:87:13:af:98:a7:cb:48:fd:d3:52:fb:6b:84:de:57:60:
         3c:79:45:f9:0b:b0:fe:76:a3:90:95:7a:f0:77:d3:7b:ef:24:
         cd:fe:92:ed:93:e7:b1:a7:92:73:08:f8:97:81:03:d5:3f:fb:
         e3:f0:e4:9f:41:94:e6:b0:7f:2a:09:be:1b:83:c3:be:5b:6b:
         b2:65:85:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:48 2023 by rpki-client on console-fra.rpki-client.org