Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/9a3c2b2c-08c8-3fae-a350-3cd75129ee75.roa
File:                     9a3c2b2c-08c8-3fae-a350-3cd75129ee75.roa (raw, json)
Hash identifier:          6xCkMX6CYBGx8NVSeKDlHNWYj6QXtlP1l6dFVho4+7M=
Subject key identifier:   7D:59:FE:9B:67:60:9C:9E:37:96:40:02:05:A5:09:4B:73:92:43:D1
Certificate issuer:       /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial:       010D0C9F4328583A30B856E9388A29F68399E380
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/9a3c2b2c-08c8-3fae-a350-3cd75129ee75.roa
Signing time:             Mon 16 Sep 2019 04:00:00 +0000
ROA not before:           Mon 16 Sep 2019 04:00:00 +0000
ROA not after:            Mon 11 Sep 2023 04:00:00 +0000
asID:                     3356
IP address blocks:        173.244.49.0/24 maxlen: 24
                          173.244.52.0/24 maxlen: 24
                          173.244.60.0/24 maxlen: 24
                          173.244.62.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:30:b8:56:e9:38:8a:29:f6:83:99:e3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
        Validity
            Not Before: Sep 16 04:00:00 2019 GMT
            Not After : Sep 11 04:00:00 2023 GMT
        Subject: CN=0a3350bc-08ea-4c37-b77f-b43abbdcd262
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:7e:d9:df:3e:82:dd:d9:b3:68:a9:41:cb:00:
                    a8:13:c8:f3:c7:ea:73:f6:5a:e5:c5:56:26:0e:c4:
                    6e:5d:3a:be:d5:e6:4a:f6:70:10:8c:83:c7:3f:87:
                    bc:9e:25:d1:64:bb:aa:12:b5:79:ea:9d:93:62:f6:
                    eb:96:5a:2f:45:5b:13:61:58:46:b5:af:19:a5:14:
                    ef:2c:a0:5f:32:ad:ba:06:6b:d5:a2:0d:bc:a1:21:
                    e4:0f:9f:fe:78:1b:2f:25:e8:ed:4c:ee:82:65:ad:
                    5a:9d:46:87:4c:5f:0c:b6:7b:0e:35:70:88:2c:b1:
                    e7:47:70:9b:64:10:36:b0:f9:b9:10:fe:2f:72:f8:
                    91:70:f8:d1:cf:84:bc:7c:dd:d3:e6:b5:5d:96:b3:
                    70:f2:a7:7c:de:db:af:c5:b6:ca:4c:cb:db:fc:41:
                    99:09:04:62:e6:09:2e:ca:5d:f3:e9:f3:ea:2e:18:
                    ea:a3:e5:85:fb:62:b6:c4:2b:00:e5:f2:a1:51:e2:
                    12:3f:92:04:35:29:a3:e2:47:59:70:af:ee:88:95:
                    03:42:17:ef:cd:85:47:99:19:d9:4e:15:69:97:9d:
                    7f:e9:0b:55:31:fb:1c:9c:d9:f8:f9:60:cd:8d:76:
                    36:c0:7a:d3:1c:98:f7:41:86:46:eb:5d:93:d2:0f:
                    a0:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:59:FE:9B:67:60:9C:9E:37:96:40:02:05:A5:09:4B:73:92:43:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/9a3c2b2c-08c8-3fae-a350-3cd75129ee75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.244.49.0/24
                  173.244.52.0/24
                  173.244.60.0/24
                  173.244.62.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:93:e6:51:8e:40:16:89:e4:bd:ab:d6:b3:5f:80:f7:95:82:
         bf:6a:3c:c3:8d:86:17:a8:33:a4:fe:47:e1:82:01:e2:df:90:
         38:fd:0d:25:55:66:23:24:c1:99:c9:41:fe:90:22:38:fc:d9:
         5e:00:5e:3c:a3:74:a0:38:3e:79:a8:de:87:fa:6f:dc:83:3b:
         fe:77:13:e3:51:4d:75:42:3a:66:bf:b6:93:cf:48:ae:e6:9e:
         1c:d6:9f:ac:50:64:96:ff:ec:bf:a1:70:e0:d8:08:21:91:80:
         ad:fb:a7:05:5e:a2:a5:dd:ec:0d:53:52:2f:b2:d2:66:da:22:
         36:85:00:0d:f5:ed:8e:03:54:06:0d:b1:40:2d:58:54:2d:ab:
         72:79:8f:cc:c6:1c:e3:14:c5:2a:31:62:10:9e:4e:5a:da:6a:
         c7:61:19:2c:ae:1d:f6:3f:ab:5e:79:51:2f:df:29:5b:61:a8:
         d7:37:92:f3:e3:65:dd:0b:fc:6d:18:a9:0c:cf:cc:21:3e:dc:
         78:21:b3:d9:22:a1:c6:c1:bb:61:4a:f8:c6:41:b4:36:06:80:
         c0:80:6f:ea:fc:7f:8a:ae:aa:30:ed:d3:9a:94:29:a0:08:0e:
         e2:6c:f0:a6:6a:ee:bc:96:f8:2f:e3:26:71:39:05:72:01:01:
         83:a7:eb:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:37:10 2023 by rpki-client on console-fra.rpki-client.org