Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/97639b15-215a-4881-b1a4-731e046bf51c/ece8d8c3-3fcf-32c0-9d73-d82467aae605.roa
File:                     ece8d8c3-3fcf-32c0-9d73-d82467aae605.roa (raw, json)
Hash identifier:          ERpiJvenxh1lSxiSDiTFYhi4RJ8Zkrqzo0bFs9LJJ7U=
Subject key identifier:   A3:DF:10:4A:70:A8:78:A6:C3:FA:78:BC:B7:EA:58:84:27:36:06:4B
Certificate issuer:       /CN=97639b15-215a-4881-b1a4-731e046bf51c
Certificate serial:       010D0C9F43285842D07987C9882EFD891C8E2900
Authority key identifier: B7:48:95:F0:25:43:9D:22:CB:80:9B:0B:9B:6A:1C:DC:07:B8:D7:7B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/97639b15-215a-4881-b1a4-731e046bf51c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/97639b15-215a-4881-b1a4-731e046bf51c/ece8d8c3-3fcf-32c0-9d73-d82467aae605.roa
Signing time:             Tue 08 Aug 2023 07:38:16 +0000
ROA not before:           Tue 08 Aug 2023 07:38:16 +0000
ROA not after:            Mon 06 Nov 2023 08:38:16 +0000
asID:                     834
IP address blocks:        208.99.9.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:d0:79:87:c9:88:2e:fd:89:1c:8e:29:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97639b15-215a-4881-b1a4-731e046bf51c
        Validity
            Not Before: Aug  8 07:38:16 2023 GMT
            Not After : Nov  6 08:38:16 2023 GMT
        Subject: CN=5db064f7-2812-4a2d-9639-f6823e43d5ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:e8:f4:09:98:7b:58:f1:50:00:ae:0b:c8:fd:
                    7a:2d:1c:38:21:75:e9:55:c6:0a:f7:77:c2:f2:16:
                    5c:ce:a0:56:71:4c:c5:ae:b9:c9:8f:57:be:8a:e6:
                    23:a2:87:f2:49:23:ef:f2:89:f0:bb:80:46:14:54:
                    f0:17:4c:3e:b8:45:7d:a4:ec:f2:92:cd:f4:7b:a5:
                    85:55:4a:f0:09:3f:e7:24:4b:d1:57:7c:bd:f9:69:
                    3c:57:87:33:55:5e:1d:21:ef:15:21:0b:ed:62:af:
                    99:22:fb:1a:76:fc:67:22:f9:eb:a5:39:59:f6:97:
                    cf:b4:9a:e2:42:b9:ac:01:6c:fe:3c:43:a1:2e:cb:
                    c6:6d:6c:b5:33:c7:33:db:92:6e:7f:55:c2:f1:2b:
                    ae:c1:2b:99:14:43:a1:04:f5:a3:c9:f8:63:92:17:
                    3e:a2:f5:17:1e:67:88:96:88:c6:8d:d3:39:c8:d3:
                    f9:ce:5f:7c:22:66:95:2e:07:bc:ae:d5:80:8f:12:
                    8e:14:ce:c3:f8:9d:a1:09:92:1a:66:b6:75:53:76:
                    c8:ea:c5:b2:13:59:e0:19:06:dd:57:a0:a9:77:5e:
                    ec:1c:0a:8c:be:7b:d3:c6:81:60:06:81:a9:00:90:
                    64:f4:9d:f4:bf:1b:3c:df:d0:4b:4a:85:0d:10:76:
                    93:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:DF:10:4A:70:A8:78:A6:C3:FA:78:BC:B7:EA:58:84:27:36:06:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/97639b15-215a-4881-b1a4-731e046bf51c/ece8d8c3-3fcf-32c0-9d73-d82467aae605.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/97639b15-215a-4881-b1a4-731e046bf51c/97639b15-215a-4881-b1a4-731e046bf51c.crl

            X509v3 Authority Key Identifier:
                keyid:B7:48:95:F0:25:43:9D:22:CB:80:9B:0B:9B:6A:1C:DC:07:B8:D7:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/97639b15-215a-4881-b1a4-731e046bf51c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.99.9.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:c3:d5:52:30:41:f2:fa:ee:e9:95:56:08:fe:7e:3f:51:b0:
         3c:30:51:76:1f:f1:86:19:97:dd:59:63:65:50:af:1f:3a:9e:
         47:bd:ca:04:72:6b:0a:14:5b:41:91:9d:cd:2d:38:cf:60:58:
         18:aa:9a:7c:fe:32:4c:09:b8:e2:15:2d:5c:5d:b0:72:33:46:
         b9:c6:ec:2b:78:60:48:be:d7:30:20:b3:26:05:df:10:1f:a8:
         5c:1b:8a:09:87:68:2b:0a:78:96:f3:dd:d1:49:2e:b4:ff:f7:
         a4:79:2e:cf:fb:35:ba:05:02:81:05:79:19:e2:63:e4:80:44:
         0b:60:ef:a7:bf:13:a3:0b:98:97:3e:4b:52:79:cf:1d:84:72:
         07:f3:1b:3a:96:4e:82:31:50:e8:17:31:41:ba:11:e6:3f:d1:
         42:66:3b:07:4e:3c:e5:5e:d1:04:52:41:06:f4:b9:79:3e:f8:
         a6:95:4c:eb:a1:e2:b9:48:a1:7b:18:80:48:75:d3:00:37:ef:
         4d:ab:20:be:4c:9a:e8:d1:b8:f8:61:3c:7f:a2:a5:98:bc:25:
         80:d0:3d:8e:99:10:b7:24:de:44:b9:bf:1b:7b:cc:0a:42:42:
         1b:f8:37:d5:75:eb:8b:02:43:2d:d9:55:ed:68:cd:61:29:aa:
         33:c5:5f:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 9 12:23:07 2023 by rpki-client on console-ams.rpki-client.org