Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/827d1434-859e-3658-b5f1-1bc7da8cfd3f.roa
File:                     827d1434-859e-3658-b5f1-1bc7da8cfd3f.roa (raw, json)
Hash identifier:          HWTFnH6S0hMLAfGMF5QiQ3yJBqO8Bl5+w4SlH9Hubv8=
Subject key identifier:   78:23:C0:69:F1:E6:46:77:FF:BE:F9:FD:54:73:3B:2C:75:40:96:73
Certificate issuer:       /CN=bc307e5d-cfa4-4304-8b29-ef289d4a387d
Certificate serial:       010D0C9F4328583B80A7A934CE6EBD85A2E07960
Authority key identifier: EB:62:07:A4:44:45:33:61:8F:64:3A:0C:2D:1D:BA:B9:6F:6E:D1:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/827d1434-859e-3658-b5f1-1bc7da8cfd3f.roa
Signing time:             Wed 06 Oct 2021 04:00:00 +0000
ROA not before:           Wed 06 Oct 2021 04:00:00 +0000
ROA not after:            Wed 01 Jan 2031 05:00:00 +0000
asID:                     62880
IP address blocks:        64.147.212.0/23 maxlen: 24
                          64.147.214.0/24 maxlen: 24
                          64.147.215.0/24 maxlen: 24
                          72.27.236.0/24 maxlen: 24
                          72.27.237.0/24 maxlen: 24
                          72.27.238.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:80:a7:a9:34:ce:6e:bd:85:a2:e0:79:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc307e5d-cfa4-4304-8b29-ef289d4a387d
        Validity
            Not Before: Oct  6 04:00:00 2021 GMT
            Not After : Jan  1 05:00:00 2031 GMT
        Subject: CN=4eb3156a-08b8-454b-8957-18a85eeeebcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:5e:18:6c:23:10:54:84:3a:94:45:bb:ae:15:
                    75:86:91:e6:f4:de:07:70:aa:8b:8c:ad:c1:75:c5:
                    b8:bc:45:e5:56:5e:5c:be:40:76:a8:e0:1f:a9:c3:
                    c6:cf:cd:36:aa:c1:d5:5d:ba:f4:4e:64:bd:9e:2e:
                    5f:59:cb:e4:01:33:50:48:24:8b:5d:1a:06:0f:73:
                    7c:4f:6c:b1:6c:ac:f3:39:d0:ae:7e:86:ac:0f:d5:
                    91:02:65:c4:25:1b:12:d6:81:91:3a:42:00:9b:9a:
                    13:da:a5:45:4f:ad:96:b0:54:80:30:ad:d5:4b:63:
                    47:ce:b3:13:b4:85:e0:6d:0d:73:bd:cd:cb:83:24:
                    dc:c1:70:68:f7:21:b6:d8:17:19:54:1c:bb:5d:0b:
                    49:45:d2:9f:f5:c9:da:1c:a4:17:9d:ab:3c:83:e0:
                    d1:cb:6b:fa:6d:83:2a:86:6b:ad:43:16:0d:e7:2d:
                    4a:94:16:1a:f6:54:0e:77:2d:69:c1:4f:ca:5c:ea:
                    95:2c:fa:a8:10:27:0e:68:7f:18:67:91:58:8f:74:
                    6d:aa:f0:5c:53:46:e4:5b:c6:53:c3:1a:85:67:8e:
                    d3:08:f2:db:be:43:78:7f:5f:4f:24:77:84:10:cc:
                    5e:74:45:06:27:ae:42:63:db:09:20:c6:58:ed:9f:
                    1d:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:23:C0:69:F1:E6:46:77:FF:BE:F9:FD:54:73:3B:2C:75:40:96:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/827d1434-859e-3658-b5f1-1bc7da8cfd3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.crl

            X509v3 Authority Key Identifier:
                keyid:EB:62:07:A4:44:45:33:61:8F:64:3A:0C:2D:1D:BA:B9:6F:6E:D1:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.147.212.0/22
                  72.27.236.0-72.27.238.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:1f:43:8c:2e:40:23:02:5b:5b:a7:9b:e7:1e:ab:97:3f:f8:
         95:97:68:f4:17:8f:48:39:b8:46:16:ff:47:69:90:6b:d0:3d:
         f5:fe:b1:0c:ba:e3:8f:15:ac:97:c7:a8:34:f2:78:2b:99:75:
         5c:6a:7f:f5:3f:38:a8:13:ef:88:af:0c:ee:fd:8c:95:fd:0a:
         7e:22:03:22:5b:05:3d:db:98:b5:65:08:7e:d4:3f:cb:cf:8f:
         65:3d:46:f3:ea:65:51:80:ed:88:34:b5:89:c5:57:a0:4b:4f:
         20:a4:22:ed:96:21:23:e1:61:17:86:42:58:de:c3:6b:f7:8b:
         69:39:49:0a:0e:a7:42:89:a5:68:b1:a0:d5:e1:81:8b:19:83:
         3a:ca:77:bb:84:cc:4c:51:f0:23:ab:95:d0:c9:89:e5:55:a2:
         a6:bf:79:9d:0f:94:4e:3b:e9:44:02:b4:ee:8d:90:0c:b5:64:
         cf:1e:83:bd:45:e6:6f:17:47:1e:a7:45:91:f6:6c:b7:8f:45:
         05:79:c8:d1:a2:fb:ee:e7:ab:60:a0:6b:a2:53:fb:de:27:a9:
         b3:69:f9:3c:f3:5a:bb:29:43:ee:c7:8a:9f:de:76:77:fe:ad:
         8c:ca:02:47:62:53:eb:1e:1c:2a:86:8c:b1:2f:80:fd:31:c1:
         9d:29:71:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:39 2023 by rpki-client on console-ams.rpki-client.org