Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/fae39f2a-9d73-30f9-9bc9-339ad5de0f43.roa
File:                     fae39f2a-9d73-30f9-9bc9-339ad5de0f43.roa (raw, json)
Hash identifier:          I24Fn4YWRJdwvUHEqzeYxnvxHRAvWnH1Er/vsho+kPc=
Subject key identifier:   54:E6:9F:CA:CA:8D:BF:51:43:72:22:6D:CF:2E:DE:01:FB:C0:F4:A6
Certificate issuer:       /CN=63817736-7e5e-4740-8ee1-ac6f2317f08d
Certificate serial:       010D0C9F43285842C48950364EE15FB24B75CB40
Authority key identifier: B5:F4:FF:81:CB:E0:A0:26:F5:12:35:A7:B3:44:73:D0:89:4F:FC:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/fae39f2a-9d73-30f9-9bc9-339ad5de0f43.roa
Signing time:             Fri 04 Aug 2023 01:00:17 +0000
ROA not before:           Fri 04 Aug 2023 01:00:17 +0000
ROA not after:            Thu 02 Nov 2023 01:00:17 +0000
asID:                     20473
IP address blocks:        216.155.128.0/19 maxlen: 24
                          209.222.0.0/19 maxlen: 24
                          207.148.0.0/19 maxlen: 24
                          207.246.64.0/18 maxlen: 24
                          208.167.224.0/19 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:c4:89:50:36:4e:e1:5f:b2:4b:75:cb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63817736-7e5e-4740-8ee1-ac6f2317f08d
        Validity
            Not Before: Aug  4 01:00:17 2023 GMT
            Not After : Nov  2 01:00:17 2023 GMT
        Subject: CN=2a33a33f-9987-4f45-8bbc-731d1ef8928d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:2f:16:31:cc:8f:fb:79:4b:bb:47:9c:26:ae:
                    74:f7:37:5a:a0:64:1c:49:42:4d:85:dd:fa:d5:c0:
                    d0:9e:4c:cb:4e:43:3a:9c:43:bf:bf:95:1e:0a:24:
                    26:d2:7a:09:1d:78:b1:55:9d:f4:be:27:02:bd:38:
                    35:f1:88:a0:66:2b:87:f2:f8:3f:35:36:1d:82:ce:
                    aa:6d:61:e8:37:4f:3b:87:83:4b:58:15:28:ca:14:
                    68:c5:4e:cf:a3:2f:0f:50:5c:4d:93:0e:2c:f0:26:
                    06:a3:00:4d:f4:af:c6:51:27:da:cd:a2:7a:3c:3c:
                    fe:49:47:a4:0a:e7:da:9e:3c:d2:85:fd:56:82:bd:
                    9a:5f:76:da:18:da:28:a4:2b:f5:f4:46:18:29:5d:
                    99:18:46:b8:37:e8:07:01:0a:98:05:46:6a:fb:30:
                    42:bc:05:55:e4:d6:60:13:4a:77:35:db:9d:aa:31:
                    dc:4a:55:3a:66:e9:1d:c1:c1:25:34:15:0d:17:f2:
                    68:b9:bf:e4:8d:74:93:00:da:2c:e7:73:04:72:5e:
                    10:94:70:05:b9:15:8f:b9:b9:3a:c4:26:f3:7f:80:
                    63:5b:9b:39:c8:aa:b3:58:1b:eb:89:2b:02:73:0d:
                    16:a1:d0:2b:23:a8:1a:e6:0f:9c:16:e2:bd:78:2b:
                    72:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:E6:9F:CA:CA:8D:BF:51:43:72:22:6D:CF:2E:DE:01:FB:C0:F4:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/fae39f2a-9d73-30f9-9bc9-339ad5de0f43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/63817736-7e5e-4740-8ee1-ac6f2317f08d.crl

            X509v3 Authority Key Identifier:
                keyid:B5:F4:FF:81:CB:E0:A0:26:F5:12:35:A7:B3:44:73:D0:89:4F:FC:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.148.0.0/19
                  207.246.64.0/18
                  208.167.224.0/19
                  209.222.0.0/19
                  216.155.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:1f:f6:ec:1a:72:3c:a2:96:9b:7d:1a:58:6c:d6:c9:a4:60:
         f4:02:c7:80:6a:fd:a8:16:7d:bf:5b:69:23:82:f8:41:88:ef:
         e6:af:02:6b:dd:f4:eb:ff:82:a2:f7:b2:80:27:3f:05:f7:97:
         cf:0c:d4:4e:2b:e5:f4:de:6e:4a:55:7e:1e:83:fa:1b:f0:75:
         8c:15:8f:e0:8b:6a:8f:8a:48:04:77:6a:0c:e6:44:66:8d:25:
         4e:9e:33:7b:a5:9f:1b:f3:e5:81:a9:3f:32:5c:87:f0:75:2a:
         a5:d6:89:00:04:8a:03:54:ce:65:8e:69:55:4b:15:84:94:ee:
         4d:83:51:6c:0f:f9:7a:30:35:2b:93:6a:a5:f1:81:9f:97:63:
         7b:c9:41:c9:7d:6e:19:a0:2d:02:df:0a:26:ff:8b:88:b2:c1:
         b0:ad:14:a1:5f:32:47:04:df:d0:2f:63:11:90:a8:92:bd:64:
         1e:b3:34:8e:bc:d1:34:0b:fb:74:07:9a:f2:96:ad:70:f1:c3:
         b5:b5:1a:8f:a0:46:27:f9:66:bd:b6:b8:b4:c2:ef:c2:24:1d:
         2f:84:96:f7:05:33:34:81:f0:af:54:3d:75:6a:9d:ae:92:e8:
         12:28:94:cc:cd:d8:af:46:fe:a2:c0:40:d3:b4:09:43:7a:67:
         3c:26:c1:41
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Sep 11 22:37:45 2023 by rpki-client on console-ams.rpki-client.org