Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/2d81ea7a-bc7e-3d8d-8382-bb4a541b521c.roa
File:                     2d81ea7a-bc7e-3d8d-8382-bb4a541b521c.roa (raw, json)
Hash identifier:          wDQ6kYgA8phq7JSWVCibK77Id4xgr2TVCTiTgytMA0I=
Subject key identifier:   DA:E3:23:4F:9C:6E:E1:05:89:64:35:E5:D1:4A:BD:4F:FC:18:BF:B3
Certificate issuer:       /CN=8ed3050a-4605-4094-b331-bb0f8758defe
Certificate serial:       010D0C9F4328583F2A961CA1C9CCB393B52F87E0
Authority key identifier: 71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/2d81ea7a-bc7e-3d8d-8382-bb4a541b521c.roa
Signing time:             Wed 31 Aug 2022 12:00:00 +0000
ROA not before:           Wed 31 Aug 2022 12:00:00 +0000
ROA not after:            Mon 12 Aug 2024 04:00:00 +0000
asID:                     36376
IP address blocks:        35.3.0.0/16 maxlen: 16
                          35.0.0.0/16 maxlen: 16
                          35.1.0.0/16 maxlen: 16
                          35.2.0.0/16 maxlen: 16
                          35.4.0.0/16 maxlen: 16
                          35.5.0.0/16 maxlen: 16
                          35.6.0.0/16 maxlen: 16
                          35.7.0.0/16 maxlen: 16
                          35.7.128.0/18 maxlen: 18
                          192.41.232.0/23 maxlen: 23
                          198.108.8.0/21 maxlen: 21
                          198.111.181.0/25 maxlen: 25
                          207.75.144.0/20 maxlen: 20

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:2a:96:1c:a1:c9:cc:b3:93:b5:2f:87:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ed3050a-4605-4094-b331-bb0f8758defe
        Validity
            Not Before: Aug 31 12:00:00 2022 GMT
            Not After : Aug 12 04:00:00 2024 GMT
        Subject: CN=07361c34-582d-483d-8cfd-28a106777a38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:5d:0d:09:1d:06:79:0b:69:1f:f8:c3:a8:ed:
                    2b:f3:77:6a:80:75:61:6b:77:4e:df:ee:72:99:74:
                    ad:1f:a3:02:bc:01:ab:1f:9c:5b:b4:2c:5d:07:73:
                    a0:29:4e:6f:aa:fa:d7:4b:62:65:58:45:d0:46:a2:
                    2d:24:f8:b9:54:93:3c:50:5b:8d:38:e6:e9:7b:35:
                    31:a0:47:c1:22:14:ce:09:bf:aa:e2:62:92:25:14:
                    14:9c:53:5e:58:8e:65:05:60:37:5b:86:00:e1:cf:
                    11:38:7c:1c:50:6e:51:46:78:53:c3:8f:f1:85:cd:
                    7c:f8:a3:0a:d0:bc:ec:9a:12:0d:55:2a:62:de:63:
                    2f:f6:b0:ca:c2:71:30:0e:f6:0a:13:a8:77:bf:cd:
                    c7:64:a9:00:de:09:c8:8f:ce:41:a1:7d:d7:22:2f:
                    62:2c:32:f7:c8:bc:e7:24:cd:01:54:0d:9a:6d:60:
                    5b:a7:cf:5d:7c:d4:ea:bc:f4:7c:f1:20:82:e6:e9:
                    e7:58:c0:18:43:b6:77:20:0a:d6:8f:40:e1:9d:1b:
                    65:25:b8:2a:44:89:86:33:94:73:9a:a4:e0:cf:21:
                    b2:d8:78:de:b6:e3:ce:1a:16:36:a0:a8:36:c1:70:
                    dc:67:36:f8:e3:98:67:2c:83:bc:7b:d0:45:fc:41:
                    59:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:E3:23:4F:9C:6E:E1:05:89:64:35:E5:D1:4A:BD:4F:FC:18:BF:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/2d81ea7a-bc7e-3d8d-8382-bb4a541b521c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl

            X509v3 Authority Key Identifier:
                keyid:71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.0.0.0/13
                  192.41.232.0/23
                  198.108.8.0/21
                  198.111.181.0/25
                  207.75.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:b6:c7:04:18:2b:c3:1e:c3:fc:cd:a9:fc:63:99:ba:55:91:
         4c:9e:a0:c0:f9:de:d7:86:1b:2a:48:11:76:ce:52:13:49:08:
         46:ba:81:db:86:c9:3e:d4:18:b8:5d:5c:ad:3e:16:5a:9f:84:
         34:92:c1:79:34:f3:17:a8:30:11:69:c2:b7:08:ab:9d:63:9d:
         51:15:ae:df:06:0a:0f:5e:21:b7:a1:f7:5d:05:9b:c0:58:c3:
         1c:4b:5e:8c:c1:40:c2:30:50:16:00:68:d5:0d:57:7b:66:ba:
         64:c2:86:4e:5b:db:d4:31:42:72:50:16:0e:77:5e:39:5c:a4:
         8c:50:79:ee:0f:04:27:dc:6a:68:96:2d:bf:6d:fe:1a:86:0d:
         64:dc:2e:74:86:0b:18:a4:86:cd:e1:78:b8:64:2c:89:ac:34:
         69:b6:31:5f:78:c9:1f:b3:88:c5:a2:a5:b2:1b:d1:09:af:e6:
         a7:bd:bc:4b:f1:a4:da:d9:a5:5e:dc:2c:2c:8b:40:80:7e:dd:
         bf:13:b5:35:30:ec:e0:bd:d2:71:b8:d0:83:c8:46:04:87:76:
         bb:2b:a5:20:b1:d3:92:4f:9f:2f:ad:cf:a3:8e:62:e0:37:5f:
         2b:87:e4:9b:d3:d0:73:8c:86:25:c1:33:75:ca:69:1d:7b:65:
         e4:0c:c7:33
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:22 2023 by rpki-client on console-ams.rpki-client.org