Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/654fbbab-11f5-4ada-bd8c-77eec4615c91/dcd3f782-f58f-3c3c-b235-70b4c74e25ed.roa
File:                     dcd3f782-f58f-3c3c-b235-70b4c74e25ed.roa (raw, json)
Hash identifier:          AFziEdJSPIodDgsdjRn2TSk64WgW6Uqb4PJAZuyhjq8=
Subject key identifier:   EE:1C:E6:E3:2F:06:F7:2E:38:7A:BF:20:5D:C5:E0:78:0E:FF:07:FE
Certificate issuer:       /CN=654fbbab-11f5-4ada-bd8c-77eec4615c91
Certificate serial:       010D0C9F4328584250FDA19C619E683B41867400
Authority key identifier: A2:E1:81:0E:2E:B5:14:6A:80:75:C4:0B:2E:F9:56:3C:30:D2:39:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/654fbbab-11f5-4ada-bd8c-77eec4615c91.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/654fbbab-11f5-4ada-bd8c-77eec4615c91/dcd3f782-f58f-3c3c-b235-70b4c74e25ed.roa
Signing time:             Fri 23 Jun 2023 15:40:58 +0000
ROA not before:           Fri 23 Jun 2023 15:40:58 +0000
ROA not after:            Thu 21 Sep 2023 15:40:58 +0000
asID:                     46475
IP address blocks:        63.143.32.0/19 maxlen: 19
                          64.31.0.0/18 maxlen: 18
                          69.162.64.0/18 maxlen: 18
                          74.63.192.0/18 maxlen: 18
                          162.253.40.0/22 maxlen: 22
                          192.169.80.0/20 maxlen: 20
                          208.115.192.0/18 maxlen: 18
                          216.144.240.0/20 maxlen: 20
                          216.245.192.0/19 maxlen: 19
                          2607:ff68::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:50:fd:a1:9c:61:9e:68:3b:41:86:74:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=654fbbab-11f5-4ada-bd8c-77eec4615c91
        Validity
            Not Before: Jun 23 15:40:58 2023 GMT
            Not After : Sep 21 15:40:58 2023 GMT
        Subject: CN=962c0585-18e4-4d38-92b9-876fca35a518
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:28:27:c5:2b:93:72:bb:45:9a:3d:32:c1:40:
                    fc:15:36:5c:54:d6:1c:ad:0a:a3:18:35:c0:c8:2b:
                    99:35:9a:3f:ae:95:21:4a:4e:60:c5:51:c2:a2:b8:
                    10:f7:a4:58:31:8f:f5:86:e1:72:ea:46:30:6a:6d:
                    d1:2b:60:fc:db:1d:41:f6:67:9d:2b:c0:25:cf:c6:
                    bc:5e:51:84:42:45:c4:6c:cb:f1:bf:67:26:b9:9b:
                    e0:5e:75:b6:61:18:eb:61:6f:af:0f:5a:f1:2a:45:
                    a9:01:04:22:66:25:a4:6b:51:03:16:e7:5c:cc:c3:
                    91:66:8d:a5:76:17:cc:37:0c:28:54:3b:8e:08:6d:
                    b7:a3:61:51:53:09:15:6b:0b:ae:b0:66:32:4f:13:
                    d0:a9:c3:45:47:20:e8:bc:02:8c:3d:87:82:6c:82:
                    7e:fc:8a:83:62:5b:7d:9c:69:69:b8:09:7f:c8:cc:
                    82:d7:eb:b8:45:0a:5b:54:86:96:df:a3:fe:fe:96:
                    2e:78:7c:59:7f:4b:07:1f:97:0d:9e:ed:e9:89:79:
                    d0:4e:a1:1a:a7:e5:f3:c8:29:1c:4e:05:52:4a:41:
                    ce:08:28:a1:59:49:9e:fc:25:f5:c8:40:71:70:7c:
                    96:54:f9:8a:6e:aa:cf:fa:1e:6c:b9:9d:99:b6:76:
                    fe:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:1C:E6:E3:2F:06:F7:2E:38:7A:BF:20:5D:C5:E0:78:0E:FF:07:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/654fbbab-11f5-4ada-bd8c-77eec4615c91/dcd3f782-f58f-3c3c-b235-70b4c74e25ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/654fbbab-11f5-4ada-bd8c-77eec4615c91/654fbbab-11f5-4ada-bd8c-77eec4615c91.crl

            X509v3 Authority Key Identifier:
                keyid:A2:E1:81:0E:2E:B5:14:6A:80:75:C4:0B:2E:F9:56:3C:30:D2:39:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/654fbbab-11f5-4ada-bd8c-77eec4615c91.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.143.32.0/19
                  64.31.0.0/18
                  69.162.64.0/18
                  74.63.192.0/18
                  162.253.40.0/22
                  192.169.80.0/20
                  208.115.192.0/18
                  216.144.240.0/20
                  216.245.192.0/19
                IPv6:
                  2607:ff68::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:18:84:4a:ef:9a:60:ce:3d:47:ea:42:e3:7b:bf:5a:df:b1:
         ac:1a:9e:91:99:7e:46:72:8a:74:c3:a5:e4:5e:aa:d4:df:62:
         55:6c:c8:c5:10:5e:a6:e9:10:27:be:ac:dc:7d:e1:92:85:a3:
         88:56:8b:0b:6c:7b:a8:42:7b:65:e7:cb:0d:0f:ba:4f:60:48:
         5f:37:67:76:9c:98:8f:16:2f:14:06:ee:e9:db:cd:bc:03:b8:
         e4:78:11:af:a6:c8:ae:9a:2d:53:1f:00:38:7d:94:ce:bd:36:
         8f:81:d5:72:c7:3e:ac:a8:07:f3:6e:02:84:e2:94:fa:db:31:
         36:62:66:37:75:c4:d5:76:12:37:bc:5f:ea:46:c3:5c:6f:49:
         68:a2:20:ba:7c:5c:a0:29:67:c0:44:f2:09:d5:63:b5:b6:51:
         4c:cd:39:b8:b3:33:04:5b:1d:99:54:f6:8d:0f:d6:f8:e4:08:
         e2:22:81:f2:0a:c5:1d:a1:0a:54:58:2b:11:52:47:2c:f6:9f:
         b0:8b:97:0f:69:bd:aa:db:50:aa:d1:f2:0e:67:66:01:42:73:
         bb:53:c5:70:b5:a0:02:12:dd:05:3b:da:7c:01:0b:94:e4:90:
         1c:6c:be:45:97:92:d6:e6:ae:f8:49:86:15:fd:38:86:82:88:
         bb:83:90:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:47 2023 by rpki-client on console-ams.rpki-client.org