Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/f675eb94-ee3e-3e1c-8f0f-a11485b33bed.roa
File:                     f675eb94-ee3e-3e1c-8f0f-a11485b33bed.roa (raw, json)
Hash identifier:          qajkLqg7JA5NbWnnrkHS44yYAiKWn+bRr9TpWX0Dw3E=
Subject key identifier:   8F:FF:9E:FD:E3:E7:97:8B:39:87:09:5B:08:97:F7:F5:FB:EA:8A:F0
Certificate issuer:       /CN=38c5255f-5193-4ef7-92e9-db326ee1d690
Certificate serial:       010D0C9F43285843C9AE0B464B52A5540A60EDC0
Authority key identifier: E8:EB:51:76:DE:0B:D9:56:08:5F:63:4E:0F:48:07:9F:2E:90:9D:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/f675eb94-ee3e-3e1c-8f0f-a11485b33bed.roa
Signing time:             Sun 05 Nov 2023 14:00:20 +0000
ROA not before:           Sun 05 Nov 2023 14:00:20 +0000
ROA not after:            Sat 03 Feb 2024 14:00:20 +0000
asID:                     6498
IP address blocks:        75.78.184.0/22 maxlen: 22
                          75.78.178.0/24 maxlen: 24
                          75.78.177.0/24 maxlen: 24
                          75.78.179.0/24 maxlen: 24
                          75.78.168.0/22 maxlen: 22
                          75.78.124.0/22 maxlen: 22
                          75.78.176.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:c9:ae:0b:46:4b:52:a5:54:0a:60:ed:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38c5255f-5193-4ef7-92e9-db326ee1d690
        Validity
            Not Before: Nov  5 14:00:20 2023 GMT
            Not After : Feb  3 14:00:20 2024 GMT
        Subject: CN=3d840d64-76e1-4e60-b321-1ef4bfe7296d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e5:70:d8:a6:62:04:88:ed:88:59:65:cf:96:
                    93:a8:e3:5e:b9:02:11:42:73:a1:8b:92:ca:d4:8b:
                    7d:3c:c2:b6:a1:fc:40:0f:3e:d1:30:08:2c:57:5c:
                    1e:b7:0d:5d:0d:5f:ea:5d:98:97:6f:e6:7d:27:ec:
                    c4:e1:6a:cf:c3:ce:37:fb:14:a0:3c:4d:9c:89:b4:
                    4f:c5:dd:8d:06:49:a0:39:e4:ff:2f:2c:a7:9d:f9:
                    1f:3b:92:7d:b1:a7:be:61:26:53:87:87:9a:44:ab:
                    d4:cc:8b:2f:d3:e4:3d:d0:18:12:06:2b:af:be:34:
                    24:99:a4:c8:93:8d:2d:59:0f:6c:f0:1b:fd:95:88:
                    cf:3b:b2:87:6f:e4:e2:69:92:74:41:10:15:93:f7:
                    bf:91:b7:53:20:b0:c6:2c:ef:81:96:1e:71:81:a2:
                    52:f9:0f:6f:c3:24:d4:f3:9e:76:26:bd:79:17:5e:
                    8a:30:c6:7f:69:dd:dd:24:e6:47:7f:10:af:c9:10:
                    d1:e0:43:36:98:b7:24:82:b6:05:e4:65:98:10:64:
                    c0:ab:87:09:9f:65:1d:7d:31:69:d1:d5:3c:42:66:
                    44:9c:9a:5f:38:b8:68:ca:cd:d4:98:32:2e:98:55:
                    38:31:47:84:f6:6c:3c:66:5d:d0:13:d8:70:77:f8:
                    ed:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:FF:9E:FD:E3:E7:97:8B:39:87:09:5B:08:97:F7:F5:FB:EA:8A:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/f675eb94-ee3e-3e1c-8f0f-a11485b33bed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.crl

            X509v3 Authority Key Identifier:
                keyid:E8:EB:51:76:DE:0B:D9:56:08:5F:63:4E:0F:48:07:9F:2E:90:9D:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.78.124.0/22
                  75.78.168.0/22
                  75.78.176.0/22
                  75.78.184.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:8e:48:72:db:ac:7e:a9:01:d3:14:7d:e3:8c:e3:9d:e6:b2:
         36:05:01:ce:27:62:f9:cb:3e:f6:90:55:94:66:31:eb:f6:39:
         49:29:7c:a9:d6:f0:5c:03:62:5f:57:9d:4f:3a:76:23:c0:8a:
         b7:81:3a:5a:83:55:b2:61:17:7c:fa:49:c0:42:76:38:50:23:
         9e:4d:b3:93:9f:42:dc:ea:55:2c:3d:23:3b:ad:13:e2:73:2e:
         6a:6e:d6:29:cd:4c:6a:d4:61:9a:8d:7a:97:f9:2b:8b:60:65:
         bf:c5:d3:89:7a:ac:48:43:82:61:a2:87:c0:7f:48:d0:ed:df:
         3d:0b:b6:30:8d:0b:e0:bd:ad:00:24:61:d0:17:33:5e:41:55:
         1f:55:64:be:e9:21:e3:b5:d7:8d:b0:05:49:fe:7f:36:6b:5b:
         20:46:ee:ba:96:6e:2f:63:b3:88:ff:7e:5e:a5:43:ad:39:5c:
         ae:2c:0e:78:e3:09:46:2f:92:09:c5:fa:14:19:89:28:2d:da:
         a7:5d:d4:1d:2f:fc:c9:80:49:ba:7a:fb:cc:65:a6:d2:20:14:
         0e:40:1b:9b:f5:9c:8e:35:29:f4:94:53:db:69:6d:db:1d:e8:
         48:26:0a:32:df:a2:f3:ad:d3:30:ae:22:de:72:2d:04:f9:59:
         c9:33:11:28
-----BEGIN CERTIFICATE-----
MIIGVTCCBT2gAwIBAgIUAQ0Mn0MoWEPJrgtGS1KlVApg7cAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzhjNTI1NWYtNTE5My00ZWY3LTkyZTktZGIzMjZlZTFk
NjkwMB4XDTIzMTEwNTE0MDAyMFoXDTI0MDIwMzE0MDAyMFowLzEtMCsGA1UEAxMk
M2Q4NDBkNjQtNzZlMS00ZTYwLWIzMjEtMWVmNGJmZTcyOTZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAneVw2KZiBIjtiFllz5aTqONeuQIRQnOhi5LK
1It9PMK2ofxADz7RMAgsV1wetw1dDV/qXZiXb+Z9J+zE4WrPw843+xSgPE2cibRP
xd2NBkmgOeT/LyynnfkfO5J9sae+YSZTh4eaRKvUzIsv0+Q90BgSBiuvvjQkmaTI
k40tWQ9s8Bv9lYjPO7KHb+TiaZJ0QRAVk/e/kbdTILDGLO+Blh5xgaJS+Q9vwyTU
8552Jr15F16KMMZ/ad3dJOZHfxCvyRDR4EM2mLckgrYF5GWYEGTAq4cJn2UdfTFp
0dU8QmZEnJpfOLhoys3UmDIumFU4MUeE9mw8Zl3QE9hwd/jtRQIDAQABo4IDZzCC
A2MwHQYDVR0OBBYEFI//nv3j55eLOYcJWwiX9/X76orwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zOGM1
MjU1Zi01MTkzLTRlZjctOTJlOS1kYjMyNmVlMWQ2OTAvZjY3NWViOTQtZWUzZS0z
ZTFjLThmMGYtYTExNDg1YjMzYmVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzhjNTI1NWYtNTE5My00ZWY3LTky
ZTktZGIzMjZlZTFkNjkwLzM4YzUyNTVmLTUxOTMtNGVmNy05MmU5LWRiMzI2ZWUx
ZDY5MC5jcmwwHwYDVR0jBBgwFoAU6OtRdt4L2VYIX2NOD0gHny6QnZUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8zOGM1MjU1Zi01MTkzLTRlZjctOTJlOS1kYjMy
NmVlMWQ2OTAuY2VyMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCS058AwQC
S06oAwQCS06wAwQCS064MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr
BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz
Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBAAKOSHLbrH6pAdMUfeOM453msjYFAc4n
YvnLPvaQVZRmMev2OUkpfKnW8FwDYl9XnU86diPAireBOlqDVbJhF3z6ScBCdjhQ
I55Ns5OfQtzqVSw9IzutE+JzLmpu1inNTGrUYZqNepf5K4tgZb/F04l6rEhDgmGi
h8B/SNDt3z0LtjCNC+C9rQAkYdAXM15BVR9VZL7pIeO1142wBUn+fzZrWyBG7rqW
bi9js4j/fl6lQ605XK4sDnjjCUYvkgnF+hQZiSgt2qdd1B0v/MmASbp6+8xlptIg
FA5AG5v1nI41KfSUU9tpbdsd6EgmCjLfovOt0zCuIt5yLQT5WckzESg=
-----END CERTIFICATE-----
Generated at Fri Dec 8 07:07:32 2023 by rpki-client on console-ams.rpki-client.org