Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/7ef4280d-bc9e-3e2a-9285-69b33d5201b3.roa
File:                     7ef4280d-bc9e-3e2a-9285-69b33d5201b3.roa (raw, json)
Hash identifier:          hZkhTk/szT748AnFI/QTIcKIx53+Z3J4HPPoYMUzELo=
Subject key identifier:   B5:0B:76:CE:76:ED:88:16:E9:27:DC:05:87:B2:0C:39:72:E0:87:EE
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328583D664349FF5959CB82344CFA00
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/7ef4280d-bc9e-3e2a-9285-69b33d5201b3.roa
Signing time:             Tue 10 Apr 2018 04:00:00 +0000
ROA not before:           Tue 10 Apr 2018 04:00:00 +0000
ROA not after:            Mon 01 Jul 2024 04:00:00 +0000
asID:                     3938
IP address blocks:        128.241.200.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:66:43:49:ff:59:59:cb:82:34:4c:fa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 04:00:00 2018 GMT
            Not After : Jul  1 04:00:00 2024 GMT
        Subject: CN=49c220e1-6008-44d9-a34a-e9f2586f7d04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:6f:25:85:30:39:0d:dc:d9:8c:b1:53:8d:df:
                    cb:21:87:40:3a:b9:67:35:45:c5:4f:d0:da:bb:5e:
                    8e:0d:ce:67:92:b8:43:15:6e:c9:48:07:0b:7b:c7:
                    e1:6c:65:56:bc:0b:db:e8:e7:85:0d:5a:c9:a0:ad:
                    81:29:65:35:0e:bd:7f:cf:5b:92:dc:81:22:4a:34:
                    cd:93:49:b2:5c:6c:3c:21:36:6c:05:bb:3c:da:fb:
                    be:2f:f0:2c:5e:e9:23:52:68:8a:e1:53:77:53:20:
                    f3:c2:82:43:42:1c:7d:e6:b1:49:80:e9:c8:d5:fa:
                    7f:61:53:10:d3:97:8e:66:9a:bc:05:00:42:84:2b:
                    9b:2a:6d:c0:58:61:ed:e8:cc:79:ca:99:20:5e:8f:
                    18:2c:2c:aa:2f:23:2d:c0:2d:57:68:8f:b9:0a:f2:
                    79:22:6c:11:f3:4d:bd:db:01:e8:ee:34:0f:ae:7f:
                    ea:e6:eb:90:a8:65:ea:18:ad:c6:99:21:4e:4d:e1:
                    43:f4:16:08:80:e9:96:ad:4b:63:2f:6b:bb:36:24:
                    f2:36:a4:87:7d:8f:e8:90:75:2a:8d:5e:2d:4b:bd:
                    63:30:35:94:9f:9a:0c:df:31:38:9e:1d:e3:04:cc:
                    60:3e:b7:00:29:01:76:c4:e5:22:37:f3:4d:b0:b7:
                    36:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:0B:76:CE:76:ED:88:16:E9:27:DC:05:87:B2:0C:39:72:E0:87:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/7ef4280d-bc9e-3e2a-9285-69b33d5201b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.241.200.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:bc:b8:d8:ae:d7:51:76:83:dc:48:a3:d2:10:49:fa:52:05:
         bb:7d:66:1a:b5:58:a0:b0:f9:18:69:ea:75:13:cf:8e:ef:78:
         64:c3:a5:ce:e0:36:bd:b3:bb:c9:b8:77:84:91:34:b4:78:0b:
         4c:69:51:97:dd:cd:b5:d7:b6:ed:38:38:55:01:2d:33:0d:28:
         5d:30:96:56:b1:a1:85:b6:d4:be:0a:25:95:96:d1:14:86:f8:
         7d:c7:64:40:84:b2:c7:f4:2d:da:82:b0:9d:69:c9:f5:b5:b5:
         63:5b:97:ae:00:6c:4b:65:00:44:f4:5e:d0:76:18:e9:cb:fe:
         0f:eb:31:60:e4:d6:31:13:23:ea:e1:99:87:6d:76:16:87:c6:
         6a:58:96:50:88:45:3e:7d:f5:0b:7b:de:57:30:af:c1:d2:96:
         15:a3:91:29:d7:98:7c:20:78:d9:a5:90:33:6b:d9:7d:d8:4c:
         56:85:1b:be:ee:1c:ad:ff:9f:54:76:ff:4d:0e:09:ee:6b:b6:
         57:1e:39:8b:fd:6c:7d:8b:86:a9:98:e5:d5:a1:18:a9:f3:fa:
         ca:cb:55:3f:72:b9:b1:ec:fa:6d:96:bd:45:69:16:0e:ad:56:
         93:b8:75:93:00:57:1f:53:a4:e3:72:6a:15:51:e5:60:79:45:
         f2:41:c5:de
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD1mQ0n/WVnLgjRM+gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk
OTdmMB4XDTE4MDQxMDA0MDAwMFoXDTI0MDcwMTA0MDAwMFowLzEtMCsGA1UEAxMk
NDljMjIwZTEtNjAwOC00NGQ5LWEzNGEtZTlmMjU4NmY3ZDA0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjm8lhTA5DdzZjLFTjd/LIYdAOrlnNUXFT9Da
u16ODc5nkrhDFW7JSAcLe8fhbGVWvAvb6OeFDVrJoK2BKWU1Dr1/z1uS3IEiSjTN
k0myXGw8ITZsBbs82vu+L/AsXukjUmiK4VN3UyDzwoJDQhx95rFJgOnI1fp/YVMQ
05eOZpq8BQBChCubKm3AWGHt6Mx5ypkgXo8YLCyqLyMtwC1XaI+5CvJ5ImwR8029
2wHo7jQPrn/q5uuQqGXqGK3GmSFOTeFD9BYIgOmWrUtjL2u7NiTyNqSHfY/okHUq
jV4tS71jMDWUn5oM3zE4nh3jBMxgPrcAKQF2xOUiN/NNsLc2dwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLULds527YgW6SfcBYeyDDly4IfuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz
ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvN2VmNDI4MGQtYmM5ZS0z
ZTJhLTkyODUtNjliMzNkNTIwMWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm
ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0
ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3
NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBgPHIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH68uNiu11F2g9xIo9IQSfpSBbt9Zhq1WKCw+Rhp6nUTz47veGTDpc7g
Nr2zu8m4d4SRNLR4C0xpUZfdzbXXtu04OFUBLTMNKF0wllaxoYW21L4KJZWW0RSG
+H3HZECEssf0LdqCsJ1pyfW1tWNbl64AbEtlAET0XtB2GOnL/g/rMWDk1jETI+rh
mYdtdhaHxmpYllCIRT599Qt73lcwr8HSlhWjkSnXmHwgeNmlkDNr2X3YTFaFG77u
HK3/n1R2/00OCe5rtlceOYv9bH2LhqmY5dWhGKnz+srLVT9yubHs+m2WvUVpFg6t
VpO4dZMAVx9TpONyahVR5WB5RfJBxd4=
-----END CERTIFICATE-----
Generated at Tue Aug 29 18:12:33 2023 by rpki-client on console-fra.rpki-client.org