Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/b29d1676-633e-30ab-9dea-e42821dc4758.roa
File:                     b29d1676-633e-30ab-9dea-e42821dc4758.roa (raw, json)
Hash identifier:          l8mwuMJgJtv8PjhceNJuicFAUQsjRdTobYoFpDt/OtM=
Subject key identifier:   67:E2:42:5B:7D:74:8C:AD:EC:AB:7B:16:B3:98:95:55:FD:72:C6:54
Certificate issuer:       /CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
Certificate serial:       010D0C9F4328583D73FEE877B8505C435296EB00
Authority key identifier: 0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/b29d1676-633e-30ab-9dea-e42821dc4758.roa
Signing time:             Fri 15 Oct 2021 04:00:00 +0000
ROA not before:           Fri 15 Oct 2021 04:00:00 +0000
ROA not after:            Sat 06 Jul 2030 04:00:00 +0000
asID:                     19437
IP address blocks:        216.158.198.0/24 maxlen: 24
                          216.158.210.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:73:fe:e8:77:b8:50:5c:43:52:96:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
        Validity
            Not Before: Oct 15 04:00:00 2021 GMT
            Not After : Jul  6 04:00:00 2030 GMT
        Subject: CN=b9199832-df13-4fda-bb53-95bbd336ad7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:28:88:c6:1e:dd:e6:a1:85:5f:c0:e5:6a:3e:
                    0f:df:e0:06:82:b9:33:70:c1:3f:53:87:d2:4c:38:
                    24:73:86:41:10:14:22:bd:8f:eb:6b:1d:98:8b:c3:
                    1c:1e:97:28:ac:64:1f:89:27:1f:ce:28:0e:77:8b:
                    00:02:0c:69:bd:63:99:4e:a4:89:b8:12:80:aa:c1:
                    cf:14:6e:3b:98:0f:06:0f:2e:99:74:11:32:66:b3:
                    82:54:18:37:69:26:ab:de:e7:f3:54:f4:17:5d:79:
                    a5:95:10:58:83:c2:7b:ef:c9:d7:20:12:63:0f:6c:
                    23:cf:7f:f7:a9:29:ce:68:5d:4e:54:b7:8b:cc:3b:
                    70:52:9d:4a:bd:99:b0:d3:40:30:58:fe:f2:5c:8a:
                    e8:06:3a:58:c3:79:26:1a:78:35:e2:bc:63:23:46:
                    87:ac:fc:4f:94:18:7a:02:e1:41:c0:5b:c6:45:f8:
                    8d:13:43:10:56:bf:b3:de:29:06:d5:3b:d3:0b:5c:
                    e1:18:75:01:2d:c9:c3:c2:9f:13:68:00:6a:8e:df:
                    5a:01:4e:4e:04:ba:e8:d4:9c:74:1d:5f:c2:10:16:
                    57:98:b9:68:76:36:46:c4:1f:4d:d0:e5:e0:7a:f8:
                    91:23:83:42:53:93:88:f6:5f:84:81:97:57:a6:de:
                    c4:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:E2:42:5B:7D:74:8C:AD:EC:AB:7B:16:B3:98:95:55:FD:72:C6:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/b29d1676-633e-30ab-9dea-e42821dc4758.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl

            X509v3 Authority Key Identifier:
                keyid:0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.158.198.0/24
                  216.158.210.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:73:3c:58:9a:b0:54:3f:06:ab:03:ed:a5:cb:da:ee:d5:7f:
         0c:79:0b:74:46:5f:e8:b9:2e:02:0e:72:e3:b4:92:c3:c2:4b:
         f9:87:5d:fa:32:ec:cb:19:1f:4b:5a:ba:c3:38:bc:22:1f:c2:
         1d:67:5a:de:3a:38:12:6f:58:dd:0f:bd:7b:87:56:bf:83:f8:
         71:c9:0d:97:bc:65:1e:7b:9e:2e:29:54:c8:d1:51:e7:87:1a:
         da:08:b0:74:78:7f:88:94:84:bb:e4:c2:28:21:48:b3:47:f6:
         a8:57:c6:82:44:50:46:00:d8:c1:db:5c:c4:63:f2:11:0a:03:
         4a:9e:3f:0f:c2:b1:31:95:f3:12:a7:f3:05:28:b6:b1:92:8b:
         1c:4d:bd:cd:57:1b:03:8e:44:8e:c9:12:e2:3b:e5:8f:85:46:
         14:f3:0e:00:da:2b:71:d4:4b:98:8e:64:ef:22:62:f0:ec:ae:
         9a:ce:db:27:e2:a9:b3:a2:54:9e:cd:3b:a2:57:fb:ec:1e:1f:
         58:b3:fb:33:fb:4e:d7:9d:66:8f:ce:1d:3c:24:22:8a:24:18:
         5f:71:30:65:f9:23:4d:bd:2b:95:c4:32:d0:40:04:c8:9a:3f:
         57:22:ab:4d:eb:ce:ea:06:51:42:e2:84:9f:d1:87:67:e2:db:
         e8:92:39:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:38:38 2023 by rpki-client on console-fra.rpki-client.org