Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/37ed713b-809c-3ac1-9f77-27e409e6f7dd.roa
File:                     37ed713b-809c-3ac1-9f77-27e409e6f7dd.roa (raw, json)
Hash identifier:          JEenlKyWGQmjt6MyInkHJ1cYpi216QD7AZy4qGT6/hc=
Subject key identifier:   90:12:0C:8C:34:8E:EA:3A:13:0E:33:32:13:AA:08:EE:2C:2A:27:1D
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285842FF29B6B965EA5F28A32DB180
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/37ed713b-809c-3ac1-9f77-27e409e6f7dd.roa
Signing time:             Fri 25 Aug 2023 01:00:22 +0000
ROA not before:           Fri 25 Aug 2023 01:00:22 +0000
ROA not after:            Thu 23 Nov 2023 02:00:22 +0000
asID:                     40306
IP address blocks:        70.41.108.0/22 maxlen: 24
                          70.41.104.0/22 maxlen: 24
                          184.63.44.0/22 maxlen: 24
                          70.41.72.0/22 maxlen: 24
                          99.196.120.0/22 maxlen: 24
                          70.41.56.0/22 maxlen: 24
                          184.62.36.0/22 maxlen: 24
                          75.107.184.0/22 maxlen: 24
                          184.62.40.0/22 maxlen: 24
                          72.173.176.0/22 maxlen: 24
                          184.20.28.0/22 maxlen: 24
                          184.62.32.0/22 maxlen: 24
                          72.173.208.0/22 maxlen: 24
                          70.41.48.0/22 maxlen: 24
                          70.41.28.0/22 maxlen: 24
                          75.107.216.0/22 maxlen: 24
                          99.196.124.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:ff:29:b6:b9:65:ea:5f:28:a3:2d:b1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Aug 25 01:00:22 2023 GMT
            Not After : Nov 23 02:00:22 2023 GMT
        Subject: CN=bf16bdd6-0f4d-4958-9342-1e1f93d93842
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:59:6b:eb:81:6b:6a:92:60:9c:ad:44:9d:f5:
                    26:8a:50:8f:f2:fc:a3:01:47:38:eb:3c:9f:6c:4e:
                    f7:98:bd:79:71:06:94:ef:02:96:d6:b9:01:11:c9:
                    5e:66:70:3d:df:38:97:25:99:29:38:5b:84:ea:6e:
                    57:96:d6:c2:32:57:6d:a1:08:b3:82:fe:f2:3f:d0:
                    f3:50:26:5c:69:ad:ed:87:d2:79:1d:88:4e:81:bd:
                    ff:cb:e2:c6:1a:36:92:81:83:7f:0e:fa:cb:1f:c4:
                    3a:e4:9c:db:ef:35:4f:6e:ae:40:c0:a3:d5:94:c4:
                    62:d7:ee:84:54:78:72:23:fc:bc:c1:94:f1:c1:10:
                    c0:8d:ef:25:92:03:35:96:cb:d4:09:17:31:5a:4c:
                    30:9d:19:88:22:15:fe:31:44:80:03:17:77:85:ad:
                    6b:50:a4:5e:90:1e:a6:85:c1:6e:97:6a:65:cf:8a:
                    82:ff:4b:ef:dd:3b:b0:70:fa:b7:e5:e6:44:a4:20:
                    43:a0:cd:e9:56:d1:46:68:bd:4e:40:6e:f7:16:9a:
                    64:e6:c8:ca:53:e2:ac:1e:74:a6:9c:36:d6:d6:3e:
                    68:54:2d:0f:c5:7d:b2:59:15:f7:36:18:11:ca:ca:
                    6e:74:12:e6:50:7f:2c:3a:8e:d3:77:f5:35:db:2a:
                    31:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:12:0C:8C:34:8E:EA:3A:13:0E:33:32:13:AA:08:EE:2C:2A:27:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/37ed713b-809c-3ac1-9f77-27e409e6f7dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.41.28.0/22
                  70.41.48.0/22
                  70.41.56.0/22
                  70.41.72.0/22
                  70.41.104.0/21
                  72.173.176.0/22
                  72.173.208.0/22
                  75.107.184.0/22
                  75.107.216.0/22
                  99.196.120.0/21
                  184.20.28.0/22
                  184.62.32.0-184.62.43.255
                  184.63.44.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:8b:38:70:05:ed:3f:82:37:c8:74:10:a1:b3:8b:ec:1b:82:
         8b:13:c1:56:ce:5d:1b:b5:ce:c5:c1:cc:b2:7b:d2:49:09:db:
         8a:e3:8b:60:28:66:17:98:a8:06:2e:85:55:1c:97:d9:30:6d:
         5e:2c:99:42:cc:e3:a4:06:db:30:7c:68:d1:90:f7:88:48:bd:
         a8:0a:1c:31:c6:95:c0:86:c7:b5:c1:00:c3:7a:f9:4a:38:5a:
         b5:0b:89:cb:ac:e9:a7:60:56:ed:ad:99:4a:bb:da:67:fe:5d:
         33:19:f0:b5:7b:7d:97:9b:8a:03:56:ed:47:a3:0d:23:fa:e9:
         8e:58:e7:58:3f:bc:fb:aa:2b:8e:36:16:43:8a:e8:87:66:9e:
         b4:78:16:5b:87:a3:68:b3:b9:99:01:8e:5a:ef:37:42:2e:33:
         d7:34:94:59:61:a1:5e:a2:65:13:5d:24:67:5e:cc:d5:02:8d:
         6c:6c:c5:7b:a5:2b:1e:5a:4f:c9:4e:d9:70:45:67:e7:9c:11:
         0c:8f:ff:38:ad:3a:69:3c:b3:af:92:1c:9f:9b:ea:af:44:28:
         03:5a:19:15:c6:76:26:d0:8e:da:5d:60:a7:af:61:e8:60:e9:
         dc:4c:bf:78:41:3e:11:9e:21:cf:ae:65:bd:c8:d2:63:31:0c:
         1c:fc:ff:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 12 07:01:32 2023 by rpki-client on console-ams.rpki-client.org