Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/fdd8393e-d262-3341-a1dc-1596775503ef.roa
File:                     fdd8393e-d262-3341-a1dc-1596775503ef.roa (raw, json)
Hash identifier:          ebjwP8VQMTrSM8ozLwihbiNcVWZR47qbydJl4QYrRi8=
Subject key identifier:   A8:4A:55:D1:44:4E:62:41:89:4E:D6:1C:9D:C4:67:EE:2A:0C:F0:23
Certificate issuer:       /CN=0d1fca78-9d98-4559-bd51-80a6c47ba01e
Certificate serial:       010D0C9F43285841B1A5732315EFD72B72F0EB80
Authority key identifier: CA:61:9B:E8:AC:A4:3A:07:D0:BF:6A:5F:5B:AA:3F:D4:20:E9:5A:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/fdd8393e-d262-3341-a1dc-1596775503ef.roa
Signing time:             Tue 24 May 2022 21:33:00 +0000
ROA not before:           Tue 24 May 2022 21:33:00 +0000
ROA not after:            Mon 26 Aug 2024 04:00:00 +0000
asID:                     393529
IP address blocks:        160.129.68.0/22 maxlen: 22
                          160.129.36.0/22 maxlen: 22
                          160.129.12.0/22 maxlen: 22
                          160.129.60.0/22 maxlen: 22
                          160.129.64.0/22 maxlen: 22
                          160.129.72.0/22 maxlen: 22
                          160.129.76.0/22 maxlen: 22
                          160.129.80.0/22 maxlen: 22
                          160.129.84.0/22 maxlen: 22
                          160.129.88.0/22 maxlen: 22
                          160.129.92.0/22 maxlen: 22
                          160.129.96.0/22 maxlen: 22
                          160.129.100.0/22 maxlen: 22
                          160.129.104.0/22 maxlen: 22
                          160.129.108.0/22 maxlen: 22
                          160.129.112.0/22 maxlen: 22
                          160.129.116.0/22 maxlen: 22
                          160.129.120.0/22 maxlen: 22
                          160.129.124.0/22 maxlen: 22
                          160.129.128.0/22 maxlen: 22
                          160.129.132.0/22 maxlen: 22
                          160.129.136.0/22 maxlen: 22
                          160.129.140.0/22 maxlen: 22
                          160.129.144.0/22 maxlen: 22
                          160.129.148.0/22 maxlen: 22
                          160.129.152.0/22 maxlen: 22
                          160.129.156.0/22 maxlen: 22
                          160.129.160.0/22 maxlen: 22
                          160.129.164.0/22 maxlen: 22
                          160.129.168.0/22 maxlen: 22
                          160.129.172.0/22 maxlen: 22
                          160.129.176.0/22 maxlen: 22
                          160.129.180.0/22 maxlen: 22
                          160.129.184.0/22 maxlen: 22
                          160.129.188.0/22 maxlen: 22
                          160.129.192.0/22 maxlen: 22
                          160.129.196.0/22 maxlen: 22
                          160.129.200.0/22 maxlen: 22
                          160.129.204.0/22 maxlen: 22
                          160.129.208.0/22 maxlen: 22
                          160.129.212.0/22 maxlen: 22
                          160.129.216.0/22 maxlen: 22
                          160.129.220.0/22 maxlen: 22
                          160.129.224.0/22 maxlen: 22
                          160.129.228.0/22 maxlen: 22
                          160.129.232.0/22 maxlen: 22
                          160.129.236.0/22 maxlen: 22
                          160.129.240.0/22 maxlen: 22
                          160.129.244.0/22 maxlen: 22
                          160.129.248.0/22 maxlen: 22
                          160.129.252.0/22 maxlen: 22
                          160.129.56.0/22 maxlen: 22
                          160.129.48.0/22 maxlen: 22
                          160.129.52.0/22 maxlen: 22
                          160.129.40.0/22 maxlen: 22
                          160.129.44.0/22 maxlen: 22
                          160.129.28.0/22 maxlen: 22
                          160.129.0.0/22 maxlen: 22
                          160.129.4.0/22 maxlen: 22
                          160.129.8.0/22 maxlen: 22
                          160.129.16.0/22 maxlen: 22
                          160.129.20.0/22 maxlen: 22
                          160.129.24.0/22 maxlen: 22
                          160.129.32.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:b1:a5:73:23:15:ef:d7:2b:72:f0:eb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d1fca78-9d98-4559-bd51-80a6c47ba01e
        Validity
            Not Before: May 24 21:33:00 2022 GMT
            Not After : Aug 26 04:00:00 2024 GMT
        Subject: CN=3669d1f3-ff4c-45c7-9cef-765f3dec4808
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:b2:b1:58:11:31:9c:0c:87:1e:5f:34:c0:1b:
                    ae:c2:aa:13:8f:60:2d:bf:be:b7:53:8c:68:e3:9f:
                    d9:8d:e8:7f:d0:f7:d4:bf:1a:19:66:ba:97:5f:23:
                    32:6f:31:02:4a:9e:68:27:49:33:ea:10:68:47:80:
                    59:e8:1d:83:54:35:79:56:d3:6d:79:62:51:90:9a:
                    d2:16:ad:c6:3d:b9:6a:0f:8e:de:60:c9:72:73:8b:
                    ef:92:de:21:c9:1f:e6:3b:31:71:18:15:a1:b4:e2:
                    97:78:b9:87:79:7e:c3:5b:1f:19:ad:b8:24:31:7d:
                    0d:67:47:3b:c9:ce:a2:a4:ac:56:eb:fe:f3:84:66:
                    09:50:63:69:a0:61:28:d2:04:02:f4:60:00:a2:95:
                    87:e4:d3:ec:91:46:68:26:96:5f:81:6c:2f:dd:4b:
                    64:06:26:b2:3f:35:af:10:58:50:6e:b9:3d:88:27:
                    af:28:01:20:77:3d:13:bc:39:36:08:48:67:2a:fa:
                    09:ee:51:d1:24:49:c8:b5:59:b7:f9:25:65:05:2c:
                    13:6e:cd:1b:a2:c3:7d:b3:d2:8e:6c:c2:3e:1e:c4:
                    9d:24:45:14:a6:ba:d6:6a:a4:33:c0:57:88:a9:13:
                    49:a4:b4:9e:0c:64:6f:18:53:ad:85:26:c4:b7:c8:
                    f0:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:4A:55:D1:44:4E:62:41:89:4E:D6:1C:9D:C4:67:EE:2A:0C:F0:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/fdd8393e-d262-3341-a1dc-1596775503ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/0d1fca78-9d98-4559-bd51-80a6c47ba01e.crl

            X509v3 Authority Key Identifier:
                keyid:CA:61:9B:E8:AC:A4:3A:07:D0:BF:6A:5F:5B:AA:3F:D4:20:E9:5A:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.129.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:c1:ad:5c:80:2d:c4:d2:99:90:ef:d1:80:4c:f3:e3:90:46:
         97:d3:be:eb:c8:c9:e1:2d:61:be:31:d4:2e:ee:f1:33:49:c8:
         28:be:d1:41:d3:df:10:c8:a8:85:7f:34:a0:ab:da:60:77:93:
         0d:91:dd:57:3b:cc:73:02:90:4a:a7:78:ab:c4:d6:2b:58:cd:
         38:65:cb:4a:f0:69:fd:83:c0:56:36:61:07:d8:1b:80:cc:ff:
         f3:32:f8:11:02:16:41:d5:a7:81:1f:76:44:3b:10:35:0a:c3:
         62:2c:70:0b:e9:c5:c2:c6:b4:68:fe:a4:80:e2:e0:80:0d:49:
         54:9f:c8:30:b7:e0:0f:e4:92:6f:47:a9:5d:c7:df:38:12:a8:
         e5:5c:72:50:09:d2:d5:90:55:20:be:f4:b3:c3:a5:44:40:e2:
         96:c8:1f:d9:98:f9:96:32:82:29:48:a4:91:b0:ff:42:b3:64:
         30:3d:83:5e:a3:0c:07:53:8e:c5:ab:5e:b3:7b:6c:e0:cc:62:
         fe:dd:94:c6:02:fb:f4:79:c1:00:5f:c2:b9:b9:25:73:a1:40:
         87:35:57:a4:e2:0a:53:39:86:31:15:a2:d4:b5:67:81:c8:69:
         2e:50:a4:dd:3f:a2:fe:0e:4d:c7:03:40:72:9a:61:33:ee:db:
         d3:8f:d5:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:16 2023 by rpki-client on console-ams.rpki-client.org