Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/9130230c-ab4e-3472-9484-994c775d8763.roa
File:                     9130230c-ab4e-3472-9484-994c775d8763.roa (raw, json)
Hash identifier:          B1hizUZJCh536VLZgqXlo6RfvfE0/r3fIPB3TZSLoVo=
Subject key identifier:   A0:B8:86:CB:31:7A:EB:5D:38:FA:D6:2F:E2:C4:4E:54:7C:61:7A:F3
Certificate issuer:       /CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
Certificate serial:       010D0C9F4328583D7403CE87057F430FD0D1A600
Authority key identifier: 0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/9130230c-ab4e-3472-9484-994c775d8763.roa
Signing time:             Fri 15 Oct 2021 04:00:00 +0000
ROA not before:           Fri 15 Oct 2021 04:00:00 +0000
ROA not after:            Sat 06 Jul 2030 04:00:00 +0000
asID:                     33083
IP address blocks:        172.102.207.0/24 maxlen: 24
                          172.102.219.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:74:03:ce:87:05:7f:43:0f:d0:d1:a6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
        Validity
            Not Before: Oct 15 04:00:00 2021 GMT
            Not After : Jul  6 04:00:00 2030 GMT
        Subject: CN=eaee1576-5f0c-44ca-a340-18ff03cfd610
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:b6:da:d2:a8:61:d8:f8:cb:a6:81:df:98:12:
                    54:91:82:fa:f8:f9:85:ec:b3:4c:0d:48:ab:39:33:
                    b1:1c:74:c5:08:b1:30:fc:8a:9a:e5:92:c2:9b:83:
                    ed:14:08:f4:c2:03:98:06:bb:19:c5:6f:23:9e:74:
                    49:b8:9a:a4:ac:38:f8:87:98:67:65:7f:39:0c:e3:
                    f3:35:b1:8c:9d:f6:42:ad:10:b9:ad:71:96:3d:b9:
                    0c:a7:a4:11:5e:51:07:65:63:d8:67:ab:56:ed:86:
                    8c:46:0d:a9:a5:12:18:22:89:4f:5e:b6:35:e9:75:
                    cf:fa:8d:ea:25:22:e0:ee:05:44:55:b8:39:dc:52:
                    be:97:f2:21:7e:3d:e4:b8:60:4f:f4:e6:43:c1:c3:
                    88:31:0e:0f:10:d9:aa:5e:fa:4d:77:70:c3:86:62:
                    94:a7:0c:59:3c:b0:02:7b:06:d1:f9:eb:ea:93:a3:
                    08:82:03:06:66:bd:39:3f:a1:5d:9f:db:24:83:84:
                    fa:2d:c9:41:de:22:f3:42:c5:46:ef:fc:54:b1:cb:
                    de:fc:da:73:aa:13:08:5e:7b:ff:19:c2:c9:fc:00:
                    65:58:ed:69:70:13:61:70:12:53:35:bd:72:8f:e7:
                    f8:d8:b0:6c:55:e2:75:28:5f:42:72:67:62:96:44:
                    aa:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:B8:86:CB:31:7A:EB:5D:38:FA:D6:2F:E2:C4:4E:54:7C:61:7A:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/9130230c-ab4e-3472-9484-994c775d8763.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl

            X509v3 Authority Key Identifier:
                keyid:0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.102.207.0/24
                  172.102.219.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:11:c0:60:b3:6d:7d:31:86:fb:21:a5:a9:4c:f8:21:eb:86:
         6d:63:28:31:61:6e:e9:f3:c5:1c:04:02:62:6e:9c:8a:e6:2b:
         b6:35:ca:a0:ab:23:7f:78:6a:88:8f:a5:65:72:c3:18:f9:9f:
         77:95:27:ea:1f:cf:c3:70:3e:03:5f:44:17:98:fe:31:34:af:
         e1:e2:15:e2:14:6c:2f:63:15:a3:29:45:b0:16:f6:7c:3e:32:
         cd:ad:cd:1d:42:ff:7f:63:a0:fc:e5:cd:14:cd:22:02:b4:5d:
         a3:2f:99:18:b2:67:13:07:c1:ac:4d:42:10:d0:8a:65:3f:13:
         52:ef:a6:1f:f8:33:c9:04:ae:36:93:9d:3b:6d:21:4b:85:2b:
         35:42:4d:fd:80:9a:a6:43:2f:12:1c:04:ac:46:cb:f2:89:79:
         d8:e9:94:b5:98:39:70:fe:aa:4e:83:95:ca:84:0b:49:6d:95:
         e6:ac:ce:1c:81:20:64:c9:9a:83:c8:0d:8b:2e:1d:98:29:b0:
         7d:33:7c:65:c3:52:57:e4:c2:30:b7:b2:3b:f0:9e:52:03:ef:
         88:c7:00:d2:a1:2b:24:15:22:05:6a:34:db:87:2a:86:31:58:
         b2:9a:02:2f:b1:7f:0d:54:a6:25:1d:23:74:10:c5:f2:b9:f7:
         36:65:4a:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:32 2023 by rpki-client on console-ams.rpki-client.org