Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/aeffe571-4455-3b94-8d49-564701de0c4c.roa
File:                     aeffe571-4455-3b94-8d49-564701de0c4c.roa (raw, json)
Hash identifier:          3LTUQo6xjOwyrIDMZLFH/ii9n7uHDnRFnxyGDnxaBfM=
Subject key identifier:   68:DF:99:1A:9B:09:44:62:4D:5E:7E:BD:79:18:E2:85:F1:5B:E2:4D
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328583A82380F8CE8AF977C8AEA5680
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/aeffe571-4455-3b94-8d49-564701de0c4c.roa
Signing time:             Tue 10 Apr 2018 04:00:00 +0000
ROA not before:           Tue 10 Apr 2018 04:00:00 +0000
ROA not after:            Tue 10 Oct 2023 04:00:00 +0000
asID:                     1225
IP address blocks:        2001:418:3ff:4::/64 maxlen: 64
                          2001:418:0:7000::/64 maxlen: 64
                          2001:418:7:4::/64 maxlen: 64
                          2001:418:7:6::/64 maxlen: 64
                          2001:418:3ff:5::/64 maxlen: 64
                          2001:418:3ff:8::/64 maxlen: 64
                          2001:418:1401:12::/64 maxlen: 64
                          2001:418:1456:b0a::/64 maxlen: 64
                          2001:418:1456:b15::/64 maxlen: 64
                          2001:418:1456:b16::/64 maxlen: 64
                          2001:418:3801::/64 maxlen: 64

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:82:38:0f:8c:e8:af:97:7c:8a:ea:56:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 04:00:00 2018 GMT
            Not After : Oct 10 04:00:00 2023 GMT
        Subject: CN=666331f8-51e5-4ffd-8e56-07bb03701825
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:8c:ba:20:55:ce:f8:e9:f0:a0:52:4b:03:d6:
                    ff:b3:9e:91:7f:1e:28:82:87:ab:bd:17:e4:23:5d:
                    a5:f6:2c:7d:6b:d3:7f:d1:4c:d7:99:5e:ec:3e:0d:
                    75:4d:67:60:4b:c6:64:46:ef:ad:ba:a5:f9:d2:c0:
                    4b:c0:03:df:6c:f1:06:46:67:3a:42:85:20:5b:88:
                    5e:b9:1d:67:ab:3e:06:89:67:df:3f:af:02:2e:d2:
                    c3:2a:11:f3:fe:0f:ef:2f:3b:c9:07:9b:27:4b:6c:
                    33:ae:f7:a0:94:b0:c1:67:a3:e7:51:0e:11:c7:9e:
                    2f:0f:a0:29:e8:92:8c:81:b8:90:cc:fc:45:86:75:
                    26:c0:46:f2:44:08:e1:d7:62:8b:a1:61:91:25:93:
                    9c:3a:b7:5c:17:49:07:e0:d5:73:93:d6:89:54:a5:
                    93:a9:f4:27:41:d9:38:6d:f4:c7:b8:3f:74:b3:d8:
                    d1:8d:87:39:b5:e7:4d:af:33:0f:9f:ba:93:c3:02:
                    da:bf:6d:a4:f3:42:d8:00:6b:89:1b:bb:2b:6a:62:
                    65:52:4b:e9:ae:4d:5e:d5:e8:8d:c4:1d:bc:28:28:
                    d5:c3:ff:87:cd:ee:ea:d1:50:60:ce:26:74:c9:c3:
                    07:c4:cf:94:7c:5f:18:eb:26:da:ee:7d:56:21:36:
                    cc:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:DF:99:1A:9B:09:44:62:4D:5E:7E:BD:79:18:E2:85:F1:5B:E2:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/aeffe571-4455-3b94-8d49-564701de0c4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:418:0:7000::/64
                  2001:418:7:4::/64
                  2001:418:7:6::/64
                  2001:418:3ff:4::/63
                  2001:418:3ff:8::/64
                  2001:418:1401:12::/64
                  2001:418:1456:b0a::/64
                  2001:418:1456:b15::-2001:418:1456:b16:ffff:ffff:ffff:ffff
                  2001:418:3801::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:b1:6d:8a:ad:11:4b:49:a3:62:30:fc:95:dc:6a:b7:5d:4f:
         ec:95:af:77:9b:55:2b:71:65:e4:1b:80:30:ef:4b:da:4c:c1:
         8f:12:15:46:c8:9a:0f:4e:2d:e8:a6:9f:90:4a:bb:e5:90:88:
         9a:bc:c3:16:77:c1:41:b7:00:9f:c2:ca:cc:59:3d:4a:57:8d:
         9d:c6:c9:71:91:85:93:5c:03:05:41:7c:df:af:6b:9b:d8:f2:
         c5:bc:17:b8:94:75:86:8e:78:6b:3b:c1:52:6a:58:ed:ec:49:
         bb:51:c1:db:f8:35:f9:2e:69:16:ea:e6:e7:a4:bd:d3:ec:29:
         14:06:35:a5:fb:c4:25:8f:d6:bc:96:98:42:9e:72:85:8d:76:
         8d:cd:0e:11:33:3f:96:57:0f:ad:cd:95:df:ee:3b:8e:0c:83:
         25:12:92:0e:00:fb:72:99:db:09:c5:5e:ec:ab:2f:83:8e:3c:
         ce:6e:d0:87:85:70:7c:f6:7e:cb:73:5e:c0:c3:5c:3a:97:12:
         87:b9:dd:ad:5d:98:bc:13:6c:1e:90:62:14:2f:56:a5:72:27:
         94:24:16:50:f8:5f:7c:3c:bd:96:76:c8:4a:11:74:6b:17:9a:
         f3:16:e6:0f:ec:12:d7:73:b2:d9:6d:43:46:94:06:50:4a:49:
         2a:a5:a9:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 28 17:49:33 2023 by rpki-client on console-fra.rpki-client.org