Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/8fd421ea-75b0-3ae7-903a-645ae588446e.roa
File:                     8fd421ea-75b0-3ae7-903a-645ae588446e.roa (raw, json)
Hash identifier:          4B2MVduc7Wy6BZj157NDJFslUWaF5cxhEEY0IkWPgZU=
Subject key identifier:   27:5F:74:06:15:83:75:72:6A:F2:5A:50:0B:53:33:26:EF:4E:2D:09
Certificate issuer:       /CN=63817736-7e5e-4740-8ee1-ac6f2317f08d
Certificate serial:       010D0C9F432858433100025D66C69B2952C26784
Authority key identifier: B5:F4:FF:81:CB:E0:A0:26:F5:12:35:A7:B3:44:73:D0:89:4F:FC:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/8fd421ea-75b0-3ae7-903a-645ae588446e.roa
Signing time:             Mon 11 Sep 2023 21:26:50 +0000
ROA not before:           Mon 11 Sep 2023 21:26:50 +0000
ROA not after:            Sun 10 Dec 2023 22:26:50 +0000
asID:                     20473
IP address blocks:        144.202.0.0/17 maxlen: 32
                          107.191.32.0/19 maxlen: 32
                          108.61.0.0/16 maxlen: 32
                          140.82.0.0/18 maxlen: 32
                          149.28.8.0/21 maxlen: 32
                          149.28.16.0/20 maxlen: 32
                          149.28.32.0/19 maxlen: 32
                          149.28.64.0/18 maxlen: 32
                          149.28.128.0/17 maxlen: 32
                          149.248.0.0/18 maxlen: 32
                          173.199.64.0/18 maxlen: 32
                          198.13.32.0/19 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:31:00:02:5d:66:c6:9b:29:52:c2:67:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63817736-7e5e-4740-8ee1-ac6f2317f08d
        Validity
            Not Before: Sep 11 21:26:50 2023 GMT
            Not After : Dec 10 22:26:50 2023 GMT
        Subject: CN=537e1951-9e1a-42d1-b358-89354ce48bc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:dd:0f:cf:f3:88:fd:68:83:39:d7:28:50:71:
                    de:e4:56:6f:fc:8d:b6:b7:57:f4:7b:f1:d9:27:69:
                    e0:bf:dc:14:f2:97:99:17:7a:28:e8:60:41:f2:78:
                    72:a9:ba:ef:66:3f:73:1f:7c:fe:9a:29:25:bf:1d:
                    d6:58:c1:78:b0:f3:e9:a9:c1:6f:4e:e2:01:4e:87:
                    a7:e0:84:83:e8:63:e3:e3:48:ba:9c:02:52:35:91:
                    56:1e:83:c5:69:f5:aa:2d:03:a0:b0:98:91:68:d8:
                    8f:94:5c:e6:74:6c:1d:ff:6b:6a:0c:fa:d6:4d:4c:
                    63:30:6e:34:5f:67:f1:9b:7f:76:30:e1:e4:c4:23:
                    e0:00:af:a0:db:e0:59:78:55:0d:27:f7:50:a6:31:
                    2f:4a:db:7d:c4:98:88:a3:0e:2d:33:03:89:6d:01:
                    3e:ab:fe:4f:fc:b7:4b:03:01:8e:7e:f0:6f:62:36:
                    62:5a:bb:39:cf:3a:26:1f:8b:ed:6e:dc:8f:c8:e8:
                    40:fd:db:fd:1b:0a:a5:d0:bf:54:83:36:6f:be:ec:
                    e2:1f:4c:76:e2:1f:74:54:2c:72:c0:29:8b:e1:63:
                    1f:50:a3:88:78:30:a2:c0:72:e0:60:2c:85:c1:ee:
                    b8:da:ce:54:9f:de:98:e6:bc:1b:02:95:51:ed:70:
                    de:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:5F:74:06:15:83:75:72:6A:F2:5A:50:0B:53:33:26:EF:4E:2D:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/8fd421ea-75b0-3ae7-903a-645ae588446e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/63817736-7e5e-4740-8ee1-ac6f2317f08d.crl

            X509v3 Authority Key Identifier:
                keyid:B5:F4:FF:81:CB:E0:A0:26:F5:12:35:A7:B3:44:73:D0:89:4F:FC:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.191.32.0/19
                  108.61.0.0/16
                  140.82.0.0/18
                  144.202.0.0/17
                  149.28.8.0-149.28.255.255
                  149.248.0.0/18
                  173.199.64.0/18
                  198.13.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:31:48:7c:e9:59:61:f4:64:ed:59:2c:6d:af:c1:07:58:eb:
         94:5f:b7:ba:6b:2b:86:84:63:fe:14:69:5b:30:0a:7c:fc:54:
         e4:8b:e3:f9:0b:36:8a:17:d9:8e:a3:55:36:d9:9d:05:4b:9c:
         d8:4c:e5:2d:f5:07:37:35:bb:e4:12:88:bc:74:a2:2e:9f:00:
         13:5e:d9:7c:90:0e:f8:b1:04:f3:74:f2:4e:7d:58:17:50:2a:
         ce:53:af:2c:7d:fc:ee:20:ec:7a:b7:e2:46:fd:65:51:67:b7:
         0a:c7:4d:7c:a6:8b:09:dd:28:32:31:61:57:5d:74:f1:69:29:
         fb:f5:66:51:69:66:28:3a:d2:11:01:96:ff:4f:87:a9:75:16:
         71:b9:df:80:a9:c1:0b:94:a9:1e:9e:82:f9:78:d3:fd:92:ae:
         9d:ab:ca:86:52:12:c9:39:af:ad:43:44:b4:52:60:41:36:1d:
         4d:04:b5:89:35:67:06:70:64:2f:ff:c3:04:db:76:a6:27:17:
         8c:42:b8:7b:80:d7:99:0d:70:53:16:6b:65:75:1e:38:69:82:
         32:da:bb:d3:82:c0:04:c9:bd:4a:76:59:a4:c9:08:9f:ad:7c:
         ca:9d:13:b7:45:99:48:c8:ee:f4:e0:99:40:49:33:90:f8:c1:
         29:7c:8c:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 11 22:40:35 2023 by rpki-client on console-fra.rpki-client.org