Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4592d18-89a2-4b31-a14b-b5ea3eae2c4a/8fd718e9-8925-3126-a2ee-12ae8a7df56f.roa
File:                     8fd718e9-8925-3126-a2ee-12ae8a7df56f.roa (raw, json)
Hash identifier:          JuWU1csWQ8gK4FGWFCeSWSIU/WIG4Hqy5CzsUvF0oRI=
Subject key identifier:   93:F5:EE:42:5A:B3:43:24:7F:44:7F:7F:95:FA:E4:1D:F7:32:00:4B
Certificate issuer:       /CN=e4592d18-89a2-4b31-a14b-b5ea3eae2c4a
Certificate serial:       010D0C9F432858413FD9DFCA262145C74A286C00
Authority key identifier: 87:5F:A2:FF:E5:93:3B:B5:16:DE:44:BF:B9:3E:AF:BF:FD:FD:59:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4592d18-89a2-4b31-a14b-b5ea3eae2c4a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4592d18-89a2-4b31-a14b-b5ea3eae2c4a/8fd718e9-8925-3126-a2ee-12ae8a7df56f.roa
Signing time:             Sat 31 Dec 2022 12:00:00 +0000
ROA not before:           Sat 31 Dec 2022 12:00:00 +0000
ROA not after:            Sun 16 Feb 2025 05:00:00 +0000
asID:                     3223
IP address blocks:        104.161.32.0/19 maxlen: 32
                          104.161.8.0/21 maxlen: 32
                          104.161.16.0/20 maxlen: 32
                          104.161.64.0/18 maxlen: 32
                          23.226.64.0/20 maxlen: 32
                          107.167.64.0/19 maxlen: 32
                          107.178.64.0/18 maxlen: 32
                          107.189.128.0/18 maxlen: 32
                          162.213.208.0/22 maxlen: 32
                          162.218.112.0/21 maxlen: 32
                          184.164.64.0/19 maxlen: 32
                          192.30.136.0/22 maxlen: 32
                          192.110.160.0/21 maxlen: 32
                          199.231.84.0/22 maxlen: 32
                          2604:6280::/32 maxlen: 64

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:3f:d9:df:ca:26:21:45:c7:4a:28:6c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4592d18-89a2-4b31-a14b-b5ea3eae2c4a
        Validity
            Not Before: Dec 31 12:00:00 2022 GMT
            Not After : Feb 16 05:00:00 2025 GMT
        Subject: CN=19b158fe-d532-4a9d-9745-ca6d6b618901
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:54:ea:f8:e5:51:2f:b2:13:d3:9f:16:8f:02:
                    4e:06:fc:16:7e:e8:af:c1:2f:a2:b5:dc:8d:d3:3f:
                    3e:94:a9:40:bd:02:df:1c:79:40:3d:db:a7:c8:70:
                    03:38:7b:ef:88:ae:e2:90:6f:85:8b:6f:d1:44:ad:
                    50:e7:06:4a:58:2d:ab:87:98:97:54:fb:d2:f2:74:
                    55:d1:7c:8e:cd:d0:af:1b:0a:10:33:7a:05:ac:8f:
                    d7:f8:83:03:16:9c:a5:1c:a6:0d:09:e0:99:a2:53:
                    b1:ff:98:53:48:f5:30:a0:07:6f:5b:9e:45:96:bf:
                    1e:ab:6f:7b:ef:ec:a2:67:5d:67:fa:de:a8:ee:aa:
                    b1:f5:8c:51:ad:af:f1:05:7b:f2:a3:56:30:32:ec:
                    7b:08:85:fd:3a:6c:a1:aa:78:bb:63:24:aa:c7:ca:
                    d7:64:e0:d8:a1:af:41:8b:c7:f0:ae:9e:a5:ae:eb:
                    d7:d2:ec:78:b6:40:eb:e8:30:b5:da:ce:8e:4b:21:
                    48:88:81:86:64:43:a8:c9:27:be:f6:69:0c:aa:8a:
                    6b:10:f5:55:fa:35:5f:74:49:3f:56:03:e6:12:76:
                    5b:65:12:fb:29:01:e9:bf:dd:2a:8e:01:bf:0e:8d:
                    6f:6a:48:2f:90:d7:6f:bf:fd:f0:7a:a6:c1:5b:47:
                    03:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:F5:EE:42:5A:B3:43:24:7F:44:7F:7F:95:FA:E4:1D:F7:32:00:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4592d18-89a2-4b31-a14b-b5ea3eae2c4a/8fd718e9-8925-3126-a2ee-12ae8a7df56f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4592d18-89a2-4b31-a14b-b5ea3eae2c4a/e4592d18-89a2-4b31-a14b-b5ea3eae2c4a.crl

            X509v3 Authority Key Identifier:
                keyid:87:5F:A2:FF:E5:93:3B:B5:16:DE:44:BF:B9:3E:AF:BF:FD:FD:59:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4592d18-89a2-4b31-a14b-b5ea3eae2c4a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.226.64.0/20
                  104.161.8.0-104.161.127.255
                  107.167.64.0/19
                  107.178.64.0/18
                  107.189.128.0/18
                  162.213.208.0/22
                  162.218.112.0/21
                  184.164.64.0/19
                  192.30.136.0/22
                  192.110.160.0/21
                  199.231.84.0/22
                IPv6:
                  2604:6280::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:7e:91:c3:3a:a2:2e:fc:33:fa:37:cb:8b:e4:79:d7:42:5c:
         e9:43:a2:cd:61:f9:ff:ab:92:5b:d2:d8:eb:8e:4e:95:d8:f6:
         01:cc:64:d2:0b:96:27:b3:4c:74:63:dd:42:86:28:bb:86:d5:
         6e:7b:51:8b:ed:5b:10:4e:70:7e:84:31:23:b7:c7:46:19:e3:
         ca:b5:75:f0:f5:bd:91:ee:c2:22:56:fd:d0:b7:24:14:da:f2:
         72:ca:61:0f:a2:43:90:e2:b1:14:c7:fb:65:b2:8d:6f:8e:bf:
         cf:0d:eb:b4:a6:88:71:ab:79:4d:4a:ec:42:05:84:df:83:63:
         32:54:ae:c4:4a:14:a1:4f:f3:1d:d8:44:a0:b8:80:a8:8d:6b:
         76:1e:f2:a8:10:05:48:49:51:73:65:21:e2:d8:26:f1:2e:6b:
         8f:a8:90:f1:46:c7:c8:0c:a8:7b:9c:83:6e:07:cc:e2:eb:62:
         e0:ff:ec:56:d3:ac:13:40:89:3c:1a:b1:3c:0b:f5:e6:25:80:
         3f:12:f4:71:be:0b:d1:57:15:0d:73:48:a3:f5:f0:69:fc:31:
         f0:04:ea:0a:96:e2:32:ad:17:05:57:15:d9:24:f2:b5:9e:7b:
         46:e8:a2:b9:68:64:c1:0d:4f:0e:ad:94:25:65:3a:da:9d:15:
         19:1f:1b:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:26 2023 by rpki-client on console-ams.rpki-client.org