Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/35342562-4b31-4754-a32b-c5eec744d4a2/54a78e7b-7f12-3280-8687-05404dd7625a.roa
File:                     54a78e7b-7f12-3280-8687-05404dd7625a.roa (raw, json)
Hash identifier:          2zyBhQnHD5XytgSNNwfgoz5V0pg7LbLQma6DGUacfy4=
Subject key identifier:   1E:92:DC:5E:BE:41:FF:7D:7B:C1:9E:0D:F6:9E:D4:35:F9:F4:3C:85
Certificate issuer:       /CN=35342562-4b31-4754-a32b-c5eec744d4a2
Certificate serial:       010D0C9F4328584288E881B6CE01CB1FCA288D00
Authority key identifier: ED:DE:39:DE:CF:88:EE:83:2E:4A:66:51:06:B4:E3:36:AB:86:0B:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/35342562-4b31-4754-a32b-c5eec744d4a2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/35342562-4b31-4754-a32b-c5eec744d4a2/54a78e7b-7f12-3280-8687-05404dd7625a.roa
Signing time:             Thu 13 Jul 2023 16:23:40 +0000
ROA not before:           Thu 13 Jul 2023 16:23:40 +0000
ROA not after:            Wed 11 Oct 2023 16:23:40 +0000
asID:                     399970
IP address blocks:        149.112.155.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:88:e8:81:b6:ce:01:cb:1f:ca:28:8d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35342562-4b31-4754-a32b-c5eec744d4a2
        Validity
            Not Before: Jul 13 16:23:40 2023 GMT
            Not After : Oct 11 16:23:40 2023 GMT
        Subject: CN=666f54df-e2b7-4400-ad92-f043300f8aa0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:3f:1a:c0:a2:f7:16:42:f2:b6:f3:22:2f:dd:
                    1c:e0:b0:20:04:1c:f2:39:8e:6d:da:5f:4c:67:ce:
                    7e:8b:b5:0b:5c:12:00:01:46:b5:e5:1b:83:bc:fd:
                    11:34:c6:bf:aa:bd:35:c1:e7:ed:69:fb:95:62:8e:
                    5e:9c:ab:36:4c:46:8c:2b:73:74:85:21:cb:13:b6:
                    bb:f7:6b:ac:0d:07:83:04:d2:52:59:22:f5:37:a1:
                    0f:e9:fc:38:94:e7:30:21:a3:8d:78:fc:da:9a:9e:
                    a0:65:eb:23:57:35:06:ba:c0:d8:c1:6c:f4:13:8d:
                    a6:2a:58:5a:ce:45:fb:21:47:50:50:0d:78:3d:48:
                    72:e0:d5:7b:ce:6e:d0:1c:16:d9:a4:68:80:dc:f7:
                    21:a3:8b:c4:80:1d:b6:d9:73:af:02:5e:8d:3d:9e:
                    41:05:63:41:88:29:6a:fa:2f:cb:7a:4d:d4:e5:44:
                    c1:3c:67:7e:a2:66:36:fc:f3:da:26:48:cd:bc:10:
                    36:11:5d:e4:e7:11:e5:05:ea:9e:9b:e0:91:a1:03:
                    9b:ef:42:69:72:57:af:cb:ea:6b:a0:26:c6:ef:8c:
                    6a:6d:6e:33:d4:4b:7d:fb:2c:32:f7:82:5c:2b:ca:
                    af:0c:a0:06:dc:34:ef:67:e1:14:93:80:4b:fc:85:
                    fb:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:92:DC:5E:BE:41:FF:7D:7B:C1:9E:0D:F6:9E:D4:35:F9:F4:3C:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/35342562-4b31-4754-a32b-c5eec744d4a2/54a78e7b-7f12-3280-8687-05404dd7625a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/35342562-4b31-4754-a32b-c5eec744d4a2/35342562-4b31-4754-a32b-c5eec744d4a2.crl

            X509v3 Authority Key Identifier:
                keyid:ED:DE:39:DE:CF:88:EE:83:2E:4A:66:51:06:B4:E3:36:AB:86:0B:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/35342562-4b31-4754-a32b-c5eec744d4a2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:ce:bb:64:e1:fe:61:0b:15:06:52:10:b4:e1:20:5c:60:b0:
         f1:9e:34:bc:f8:52:0a:47:ed:d5:8c:32:e7:df:dc:c0:13:06:
         14:6a:88:4d:2b:67:5f:2d:cc:0a:f8:cd:17:af:01:cd:1c:ca:
         8b:84:90:db:35:44:c0:27:d2:36:7d:d0:f0:1e:60:41:bf:41:
         4e:20:04:aa:1d:26:a3:ce:83:a2:32:2f:11:51:24:00:ea:b4:
         fb:bf:59:bb:8f:8e:a0:50:45:db:e4:a8:e8:8b:b8:b8:e3:6c:
         d7:09:bf:92:40:0d:16:4f:04:31:05:4d:3c:bc:4d:15:f8:5c:
         e1:fe:ea:62:dd:17:02:f1:0c:10:bf:e3:87:38:1b:c7:50:ba:
         0f:f1:49:c4:a1:63:ac:e0:3a:2a:0b:89:db:65:40:a4:8c:95:
         7f:09:fe:42:2b:de:c1:a4:10:72:db:a3:8e:a4:f9:68:1f:00:
         e3:16:36:58:84:f1:5c:16:a5:47:7c:8c:ff:22:f6:0f:a6:b4:
         fa:d4:10:7b:c4:72:24:33:96:2d:cf:82:fa:ea:90:57:1a:64:
         7a:35:22:2b:52:c1:ad:10:48:0c:40:ca:00:7d:db:c3:6d:9f:
         0e:ed:67:f7:52:81:f1:b4:85:d8:bb:e9:e8:01:00:4a:97:2a:
         cb:f2:74:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 2 21:53:19 2023 by rpki-client on console-fra.rpki-client.org