Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6719c5f2-5819-4972-b430-9d76eb88cb36/afbe5ae9-4ca3-3ae4-ac36-3687c6126a02.roa
File:                     afbe5ae9-4ca3-3ae4-ac36-3687c6126a02.roa (raw, json)
Hash identifier:          q4SyFhCZFoEfPfU0oYSvi/MbQ+fqsfK2FQf6mzeIOKc=
Subject key identifier:   FF:E4:9F:2D:E8:18:71:1F:62:C5:35:74:40:42:8F:03:83:C4:CF:A6
Certificate issuer:       /CN=6719c5f2-5819-4972-b430-9d76eb88cb36
Certificate serial:       010D0C9F432858429FD28352F46F1777DC46F800
Authority key identifier: D2:1B:81:45:14:AD:B5:ED:A9:8B:2D:BF:1E:FA:41:07:50:54:AA:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6719c5f2-5819-4972-b430-9d76eb88cb36.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6719c5f2-5819-4972-b430-9d76eb88cb36/afbe5ae9-4ca3-3ae4-ac36-3687c6126a02.roa
Signing time:             Fri 21 Jul 2023 21:22:57 +0000
ROA not before:           Fri 21 Jul 2023 21:22:57 +0000
ROA not after:            Thu 19 Oct 2023 21:22:57 +0000
asID:                     397735
IP address blocks:        198.175.20.0/24 maxlen: 24
                          198.175.21.0/24 maxlen: 24
                          198.175.22.0/24 maxlen: 24
                          198.175.23.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:9f:d2:83:52:f4:6f:17:77:dc:46:f8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6719c5f2-5819-4972-b430-9d76eb88cb36
        Validity
            Not Before: Jul 21 21:22:57 2023 GMT
            Not After : Oct 19 21:22:57 2023 GMT
        Subject: CN=cd46d725-f5ba-4713-8e8f-a877b6e3fab5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:a4:37:5c:89:e9:3f:74:fa:5f:db:79:8e:5a:
                    e6:5f:01:6c:8f:20:2e:2d:8f:32:8f:dc:49:15:19:
                    15:d5:e7:16:27:8d:f9:be:4d:4a:47:01:36:d7:09:
                    c4:57:f4:bc:df:42:a2:76:2b:ba:0e:80:e9:89:46:
                    c3:73:2c:a8:ae:65:19:27:c2:c1:cd:a9:b3:89:e8:
                    c7:4d:e7:17:09:33:2d:4a:9e:5e:db:7a:fb:13:30:
                    32:6d:9a:6f:d7:99:c1:c1:82:99:7d:7e:63:8f:d6:
                    f3:e6:ae:29:af:da:f5:1b:58:29:df:83:3a:a3:32:
                    38:bc:21:dc:31:1b:0e:f7:86:7a:41:88:bb:90:e6:
                    cb:2e:18:09:dd:e6:21:cc:e9:f6:60:c4:d2:8c:68:
                    97:35:7c:b7:e4:59:d0:a6:88:88:5d:6f:21:67:89:
                    2f:cf:f4:ad:8d:6d:e0:e1:60:7f:bb:da:80:b1:c5:
                    e5:52:3c:d4:fe:15:e7:20:b5:cf:c9:25:02:70:e5:
                    1f:d5:fd:37:6e:6e:61:0e:2a:82:b6:de:9a:07:7e:
                    d7:fb:a7:2b:da:f1:78:85:2d:68:d3:a0:b6:66:e8:
                    60:f9:3f:7c:4e:5d:21:72:9d:dc:59:40:20:f6:1c:
                    7d:37:85:55:e5:a7:36:b3:61:02:5c:9e:3f:97:bc:
                    a2:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:E4:9F:2D:E8:18:71:1F:62:C5:35:74:40:42:8F:03:83:C4:CF:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6719c5f2-5819-4972-b430-9d76eb88cb36/afbe5ae9-4ca3-3ae4-ac36-3687c6126a02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6719c5f2-5819-4972-b430-9d76eb88cb36/6719c5f2-5819-4972-b430-9d76eb88cb36.crl

            X509v3 Authority Key Identifier:
                keyid:D2:1B:81:45:14:AD:B5:ED:A9:8B:2D:BF:1E:FA:41:07:50:54:AA:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6719c5f2-5819-4972-b430-9d76eb88cb36.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.175.20.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:5e:87:7f:81:e1:1f:ac:8a:c1:6c:25:38:cb:ac:4b:d5:1d:
         07:23:eb:5a:21:7d:73:3f:81:11:b1:f2:fc:16:5e:33:64:a1:
         f2:fd:07:3e:27:1f:73:30:90:9d:24:cd:42:75:a6:d7:68:2a:
         ff:63:ed:b9:4c:52:46:3d:97:0a:19:dd:02:11:16:f9:7f:93:
         4d:ed:61:b9:2d:39:49:f3:d5:ae:64:3f:ad:bb:59:99:17:57:
         b9:01:af:b1:67:12:9b:23:37:2a:0a:c2:d0:ae:92:7b:35:56:
         ff:92:66:d1:89:6d:8e:99:89:1f:5f:b4:aa:e0:fc:0c:aa:f6:
         0f:1f:28:60:50:e2:08:d1:8a:34:bc:e7:16:d5:fa:11:bb:22:
         36:97:58:d1:ff:32:75:6e:e6:e8:06:54:72:8e:d5:76:68:41:
         66:74:37:ad:64:86:a6:73:01:61:12:9c:f3:14:c9:91:57:95:
         97:b1:6b:c5:1b:96:0c:1d:91:03:38:d1:f5:03:d2:d2:34:e0:
         d3:c1:d0:67:d1:1d:77:91:84:d4:95:21:82:ff:4a:30:13:53:
         d2:44:b3:0e:aa:2f:5e:01:8a:0c:a6:a1:9f:51:ff:64:3d:6f:
         fd:13:2a:d6:67:0b:2a:68:5c:08:1c:0a:9f:12:50:7a:22:91:
         49:f0:5c:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 21 22:19:13 2023 by rpki-client on console-fra.rpki-client.org