Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41/2ac7193c-f223-3d78-99d0-fe399d38bea6.roa
File:                     2ac7193c-f223-3d78-99d0-fe399d38bea6.roa (raw, json)
Hash identifier:          ozki3ArwmVCYMuJeI5TJtIfeZt7jgzw8hbpDujMK/xI=
Subject key identifier:   A0:FF:9B:DA:D3:57:59:DE:12:2C:8D:48:F3:39:25:D7:70:EB:50:D4
Certificate issuer:       /CN=c6921896-3c0f-4cb4-9c99-e2d60d1d2e41
Certificate serial:       010D0C9F432858429A0CD1D343EACC3603C7D680
Authority key identifier: AE:57:89:B5:6E:58:19:47:0D:45:25:4E:58:B2:70:00:DA:93:82:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41/2ac7193c-f223-3d78-99d0-fe399d38bea6.roa
Signing time:             Wed 19 Jul 2023 19:45:35 +0000
ROA not before:           Wed 19 Jul 2023 19:45:35 +0000
ROA not after:            Tue 17 Oct 2023 19:45:35 +0000
asID:                     14618
IP address blocks:        173.213.30.0/24 maxlen: 24
                          173.213.31.0/24 maxlen: 24
                          173.213.32.0/24 maxlen: 24
                          173.213.33.0/24 maxlen: 24
                          173.213.34.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:9a:0c:d1:d3:43:ea:cc:36:03:c7:d6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6921896-3c0f-4cb4-9c99-e2d60d1d2e41
        Validity
            Not Before: Jul 19 19:45:35 2023 GMT
            Not After : Oct 17 19:45:35 2023 GMT
        Subject: CN=a29cf5e4-3474-4bf6-87e6-44a95407fcd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:59:67:c3:40:84:35:b4:49:0a:cc:cf:d2:a2:
                    23:48:ab:be:a0:f6:a5:93:99:cd:28:90:4f:fc:81:
                    1b:98:07:99:55:39:04:8f:d7:bf:d6:b3:18:22:3a:
                    12:d9:f0:5d:74:e0:9d:19:e9:c1:d1:af:2a:eb:e7:
                    8c:5e:16:df:fe:f0:fb:be:5c:b6:98:f9:93:94:be:
                    3c:8a:97:0c:b1:ed:d6:df:56:68:7e:79:84:f7:aa:
                    62:a0:2d:e9:af:f7:e0:9e:9f:17:2e:0e:b3:1f:63:
                    55:55:0b:25:30:93:9d:05:4e:56:ca:09:14:18:47:
                    99:22:bb:fb:14:f6:f9:e6:30:28:ec:7c:be:98:84:
                    ce:46:18:03:98:5e:56:11:a0:c1:9f:75:09:0d:43:
                    f1:95:bc:1e:e7:26:52:3e:4e:23:2a:df:35:82:ac:
                    49:ca:74:12:f8:33:e5:15:ce:3d:9b:4e:47:d3:28:
                    13:26:b9:b9:4b:5b:da:01:c9:53:01:f1:19:4a:a2:
                    b3:c4:80:0d:1e:e4:4e:33:52:e4:c8:14:4e:d3:0c:
                    ed:33:53:0f:80:92:8c:e7:63:7f:c4:ef:d1:5e:b2:
                    17:14:4f:6c:e5:32:64:72:dc:98:5b:77:f0:11:2e:
                    f6:81:e7:fa:a2:8b:4b:f2:5a:12:26:ff:83:6d:27:
                    6c:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:FF:9B:DA:D3:57:59:DE:12:2C:8D:48:F3:39:25:D7:70:EB:50:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41/2ac7193c-f223-3d78-99d0-fe399d38bea6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41.crl

            X509v3 Authority Key Identifier:
                keyid:AE:57:89:B5:6E:58:19:47:0D:45:25:4E:58:B2:70:00:DA:93:82:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.213.30.0-173.213.34.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:6b:b7:89:6e:d4:99:dd:f4:18:40:30:27:75:48:ed:5e:2a:
         7a:0f:e8:04:86:40:b2:ed:e2:72:d1:c4:e5:b2:ab:bd:16:db:
         03:94:3f:1e:8e:ce:f3:9b:b4:dd:d0:73:8b:26:89:b9:1b:f9:
         f5:28:76:78:9d:bc:b1:03:8b:e4:80:5d:f5:8f:23:56:b7:4a:
         53:c9:96:34:ee:e7:45:2d:fc:bb:44:fb:3a:c1:ea:25:1f:31:
         67:50:24:00:c0:a6:c3:88:c1:57:3d:03:f5:9f:cc:83:49:62:
         e0:66:af:00:0e:63:c5:2b:68:ee:5c:31:d1:67:c4:3e:00:bf:
         46:a8:0c:12:e0:46:a0:f8:9d:46:c1:3a:e6:4e:05:96:e0:4d:
         26:6d:60:af:f3:b6:11:1d:ef:dc:02:5c:50:8a:a3:4b:9e:9f:
         41:63:a8:7d:5c:52:5a:14:25:33:b5:e2:e2:f4:05:f3:af:40:
         4c:30:87:cf:12:34:f2:38:b1:e6:e0:e3:69:d9:3b:af:35:6a:
         9f:65:78:40:cb:33:0f:11:70:42:1c:75:c2:ff:5c:77:e9:de:
         5c:53:cf:28:8e:8d:1a:e8:ac:f9:2a:a2:81:ac:63:98:a4:54:
         6d:26:c9:c0:9a:c3:69:88:38:dc:ff:c3:29:fc:bb:8c:a5:79:
         d7:f1:1e:3a
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEKaDNHTQ+rMNgPH1oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzY5MjE4OTYtM2MwZi00Y2I0LTljOTktZTJkNjBkMWQy
ZTQxMB4XDTIzMDcxOTE5NDUzNVoXDTIzMTAxNzE5NDUzNVowLzEtMCsGA1UEAxMk
YTI5Y2Y1ZTQtMzQ3NC00YmY2LTg3ZTYtNDRhOTU0MDdmY2Q4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAillnw0CENbRJCszP0qIjSKu+oPalk5nNKJBP
/IEbmAeZVTkEj9e/1rMYIjoS2fBddOCdGenB0a8q6+eMXhbf/vD7vly2mPmTlL48
ipcMse3W31ZofnmE96pioC3pr/fgnp8XLg6zH2NVVQslMJOdBU5WygkUGEeZIrv7
FPb55jAo7Hy+mITORhgDmF5WEaDBn3UJDUPxlbwe5yZSPk4jKt81gqxJynQS+DPl
Fc49m05H0ygTJrm5S1vaAclTAfEZSqKzxIANHuROM1LkyBRO0wztM1MPgJKM52N/
xO/RXrIXFE9s5TJkctyYW3fwES72gef6ootL8loSJv+DbSdsrwIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFKD/m9rTV1neEiyNSPM5Jddw61DUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jNjky
MTg5Ni0zYzBmLTRjYjQtOWM5OS1lMmQ2MGQxZDJlNDEvMmFjNzE5M2MtZjIyMy0z
ZDc4LTk5ZDAtZmUzOTlkMzhiZWE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzY5MjE4OTYtM2MwZi00Y2I0LTlj
OTktZTJkNjBkMWQyZTQxL2M2OTIxODk2LTNjMGYtNGNiNC05Yzk5LWUyZDYwZDFk
MmU0MS5jcmwwHwYDVR0jBBgwFoAUrleJtW5YGUcNRSVOWLJwANqTgo4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jNjkyMTg5Ni0zYzBmLTRjYjQtOWM5OS1lMmQ2
MGQxZDJlNDEuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAGt1R4D
BACt1SIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEAEWu3iW7Umd30GEAwJ3VI7V4qeg/oBIZAsu3ictHE5bKr
vRbbA5Q/Ho7O85u03dBziyaJuRv59Sh2eJ28sQOL5IBd9Y8jVrdKU8mWNO7nRS38
u0T7OsHqJR8xZ1AkAMCmw4jBVz0D9Z/Mg0li4GavAA5jxSto7lwx0WfEPgC/RqgM
EuBGoPidRsE65k4FluBNJm1gr/O2ER3v3AJcUIqjS56fQWOofVxSWhQlM7Xi4vQF
869ATDCHzxI08jix5uDjadk7rzVqn2V4QMszDxFwQhx1wv9cd+neXFPPKI6NGuis
+SqigaxjmKRUbSbJwJrDaYg43P/DKfy7jKV51/EeOg==
-----END CERTIFICATE-----
Generated at Thu Aug 3 22:07:39 2023 by rpki-client on console-fra.rpki-client.org