Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/2a2d16bd-6e31-3bde-a46b-5b6918be3da0.roa
File:                     2a2d16bd-6e31-3bde-a46b-5b6918be3da0.roa (raw, json)
Hash identifier:          zhExPt/q8kr4ymLOSw7ijhc23nJSbnNMgGmZ5INfq0Q=
Subject key identifier:   CE:CE:51:8C:CE:C5:5E:E3:AA:76:41:EB:84:3D:E9:B5:8B:FF:33:E7
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328576D51CC73C042CFC16DBE49A75D
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/2a2d16bd-6e31-3bde-a46b-5b6918be3da0.roa
Signing time:             Sat 12 Oct 2019 04:46:01 +0000
ROA not before:           Tue 10 Apr 2018 04:00:00 +0000
ROA not after:            Mon 10 Apr 2028 04:00:00 +0000
asID:                     16625
IP address blocks:        2001:418:1456:600::/56 maxlen: 64
                          2001:418:1456:c00::/56 maxlen: 64
                          2001:418:1456:1300::/56 maxlen: 64
                          2001:418:1456:1700::/56 maxlen: 64
                          2001:418:1456:1900::/56 maxlen: 64

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6d:be:49:a7:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 04:00:00 2018 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=7ca813d2-bd69-4915-a74b-29d3c3f47862
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a3:d8:30:4f:f5:18:33:8b:05:19:64:c3:93:
                    6f:62:d8:89:cf:4e:a4:1f:12:32:66:9e:e1:e0:ea:
                    bd:f2:97:b6:f7:9a:39:d1:b5:b0:64:ff:a1:c5:4e:
                    66:ab:f7:d4:9f:40:fd:af:8c:86:70:b7:ae:4a:db:
                    36:63:2e:87:91:13:37:4d:0f:1e:c5:d5:ea:db:29:
                    e1:71:bb:06:f2:44:7d:8d:b6:5b:65:07:2a:34:0d:
                    10:81:74:22:37:49:84:db:1a:9e:f2:61:2f:bf:40:
                    ea:af:bb:64:a8:aa:fb:a6:11:cf:ab:34:4c:fd:0d:
                    10:38:da:79:5a:e7:29:c8:ef:cc:27:b2:c5:91:14:
                    e6:8a:96:1a:63:a7:9e:78:0c:47:87:95:f9:6b:42:
                    83:ce:d2:8c:d7:e3:73:53:38:9e:14:08:f5:41:d2:
                    15:bc:02:93:c7:12:e3:b1:34:a7:08:20:9b:a5:83:
                    2e:ab:91:27:d1:00:c9:5a:20:a7:b9:69:19:a5:f1:
                    ea:85:85:e6:74:f8:7f:89:2a:f3:b2:13:4c:35:ee:
                    e4:62:0d:e9:8d:18:50:de:68:ba:f9:de:73:84:4c:
                    a4:10:79:93:39:05:61:dd:22:2f:09:fa:c5:13:2f:
                    98:7c:02:e2:41:86:a9:ab:2d:bc:56:15:38:39:2e:
                    81:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:CE:51:8C:CE:C5:5E:E3:AA:76:41:EB:84:3D:E9:B5:8B:FF:33:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/2a2d16bd-6e31-3bde-a46b-5b6918be3da0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:418:1456:600::/56
                  2001:418:1456:c00::/56
                  2001:418:1456:1300::/56
                  2001:418:1456:1700::/56
                  2001:418:1456:1900::/56

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:d5:15:98:ff:8d:78:a9:81:cb:66:85:df:df:82:9d:05:e3:
         17:a8:a8:78:10:4a:2d:18:24:44:bd:a7:57:1b:e1:7b:50:f4:
         9e:28:6c:13:5b:20:ae:8e:54:99:ae:2f:8a:a4:04:e3:e3:8a:
         20:5e:ca:e0:3f:da:a2:f2:62:d6:e6:75:0f:e3:66:42:bf:73:
         99:20:34:87:21:fe:a0:ab:75:22:8f:0d:f4:93:7b:f5:48:83:
         4a:b6:d6:43:92:ae:3c:86:8c:eb:8c:b6:9d:ab:e4:e3:23:87:
         e2:5f:49:cf:25:78:91:43:a1:00:d2:ce:ca:4a:26:e8:3f:32:
         4a:b8:c4:0d:70:5f:9b:09:e9:d6:e3:27:7f:0c:95:39:3d:45:
         1c:dc:7d:fc:03:be:a5:1f:f3:cc:3d:a5:9f:f3:3f:43:3a:d9:
         b1:3b:e0:91:2e:ca:09:93:62:3f:2e:78:dd:4c:fd:80:16:87:
         ea:26:e5:1f:09:10:0f:26:a3:93:75:d0:cd:f3:06:2c:f8:db:
         16:13:5c:d8:15:ed:ab:8e:60:81:f5:99:04:a3:f9:64:02:3e:
         13:cd:47:0c:69:11:99:d1:de:1a:a6:20:f3:2c:ea:01:18:8c:
         41:15:a4:b3:7f:d8:1a:d1:c1:1b:8f:ed:9c:2e:7c:93:58:8e:
         14:55:d0:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:24 2023 by rpki-client on console-ams.rpki-client.org