Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e8988d3c-b8ca-3398-8edf-70de95dc1f23.roa
File:                     e8988d3c-b8ca-3398-8edf-70de95dc1f23.roa (raw, json)
Hash identifier:          eawZINDmSzJBdpABpV3VdfB/Jr9vdZv/euIaCjZL5dk=
Subject key identifier:   36:68:3E:E3:B1:C0:1C:B7:13:D3:67:29:A5:33:89:60:9A:1A:71:FB
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F432858432909FAF1F00ECB2393AC8300
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e8988d3c-b8ca-3398-8edf-70de95dc1f23.roa
Signing time:             Sat 09 Sep 2023 01:00:22 +0000
ROA not before:           Sat 09 Sep 2023 01:00:22 +0000
ROA not after:            Fri 08 Dec 2023 02:00:22 +0000
asID:                     212238
IP address blocks:        172.111.181.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:29:09:fa:f1:f0:0e:cb:23:93:ac:83:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Sep  9 01:00:22 2023 GMT
            Not After : Dec  8 02:00:22 2023 GMT
        Subject: CN=9bb50706-b5e4-4ba5-9cba-8a9cfdf9012e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:3f:be:e8:32:53:f1:59:9d:9d:ee:fc:00:1f:
                    86:ea:67:29:a7:cd:3a:6c:f1:7d:9a:83:18:71:c5:
                    c0:20:0c:fe:ab:e0:df:2a:87:2d:68:82:61:bb:a1:
                    17:68:11:cc:65:5e:4f:d2:79:90:e5:f8:fd:11:75:
                    8f:ad:7e:7d:84:e3:3c:35:a0:2a:89:94:9f:6a:b5:
                    d3:22:d5:28:45:33:e7:e3:75:76:59:36:04:7a:e8:
                    ca:cc:bb:1d:7e:b8:ef:f8:ce:de:90:66:35:ae:90:
                    d8:a3:e2:c6:fa:21:11:a0:70:13:87:3c:ac:77:e2:
                    da:74:fd:6e:5c:b5:d2:e7:77:68:1c:b7:e3:c0:c4:
                    7d:58:c4:18:a4:8d:64:ea:ed:0d:5a:65:74:c1:d7:
                    62:83:33:a2:1f:09:70:64:d6:86:49:24:c3:78:ef:
                    d2:cc:92:d0:d7:c4:6f:09:64:f5:3e:1d:2a:41:02:
                    7d:ad:47:84:08:8e:00:50:8e:f3:76:80:1e:13:b4:
                    b4:05:c6:8c:e7:14:f1:31:a1:61:85:74:e1:d2:18:
                    a5:e8:3d:2b:08:fb:16:29:01:98:ff:07:9c:94:dd:
                    9d:a5:97:9d:43:d3:88:8d:45:66:ff:39:b6:e9:c5:
                    7c:e4:d8:1c:a2:0f:4d:f8:c6:b2:11:d3:55:93:93:
                    e6:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:68:3E:E3:B1:C0:1C:B7:13:D3:67:29:A5:33:89:60:9A:1A:71:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e8988d3c-b8ca-3398-8edf-70de95dc1f23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.181.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:3a:42:48:de:62:5f:d7:3d:2e:ca:f8:fe:de:15:84:a4:84:
         9d:13:84:db:1e:37:b5:62:ba:4c:0d:76:2b:14:b1:50:bd:be:
         6a:77:62:35:25:a8:7d:1e:ba:97:41:02:ce:6e:1c:b9:5c:c7:
         d4:87:be:6d:8d:33:a2:43:77:02:19:76:5b:5e:44:63:cf:73:
         0b:41:f2:e9:7b:cf:3e:3b:55:59:85:a2:0a:c1:79:48:8b:ae:
         97:ae:d7:9e:c3:c7:7f:e9:9e:a4:5f:34:ce:80:57:fc:a7:bb:
         93:81:32:5b:ee:d2:8a:be:d5:a2:09:d1:e4:b1:96:38:98:05:
         0f:6d:75:c2:bf:1a:3b:bb:39:f6:7e:5e:04:59:1d:af:d3:22:
         99:9e:fa:1c:95:44:93:e4:28:de:0a:11:d4:44:5b:f5:8e:fc:
         a0:7d:ff:95:7c:ef:c3:34:1d:ca:ff:09:04:d6:74:7f:31:72:
         8f:6a:9e:65:8d:fa:ea:eb:b8:83:f9:6d:8b:01:20:b8:1c:ad:
         b9:a8:6b:47:48:17:27:b9:99:be:4e:aa:1c:54:86:23:97:a9:
         53:b2:0e:52:06:c5:b5:8d:95:4a:7a:e1:ff:a1:7d:a5:bf:93:
         36:59:e4:54:0c:2d:80:25:ea:47:8b:f0:09:2b:97:c7:17:43:
         6b:6c:59:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 20 15:19:22 2023 by rpki-client on console-fra.rpki-client.org