Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6dabfd0c-f982-470b-a430-b95c3c76868d/703a1693-7882-3efe-8213-4647d262ac86.roa
File:                     703a1693-7882-3efe-8213-4647d262ac86.roa (raw, json)
Hash identifier:          8ItRAzggjtccPGV0syW4U8B11Px15GqeqLLHe7DIfU0=
Subject key identifier:   16:50:2D:A1:D2:77:C0:33:04:6A:EE:70:87:DC:7D:CC:13:62:37:F3
Certificate issuer:       /CN=6dabfd0c-f982-470b-a430-b95c3c76868d
Certificate serial:       010D0C9F43285842ADA0E3B7906061704E2E9D80
Authority key identifier: 70:FC:7D:6F:B5:3D:A7:80:D2:95:D3:4B:99:39:96:C9:8A:63:D6:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6dabfd0c-f982-470b-a430-b95c3c76868d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6dabfd0c-f982-470b-a430-b95c3c76868d/703a1693-7882-3efe-8213-4647d262ac86.roa
Signing time:             Wed 26 Jul 2023 20:04:17 +0000
ROA not before:           Wed 26 Jul 2023 20:04:17 +0000
ROA not after:            Tue 24 Oct 2023 20:04:17 +0000
asID:                     20101
IP address blocks:        199.192.180.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:ad:a0:e3:b7:90:60:61:70:4e:2e:9d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dabfd0c-f982-470b-a430-b95c3c76868d
        Validity
            Not Before: Jul 26 20:04:17 2023 GMT
            Not After : Oct 24 20:04:17 2023 GMT
        Subject: CN=95eab261-2891-4772-a514-34d9b0e92bac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:e3:40:98:15:28:aa:7f:5a:0a:93:50:09:65:
                    05:73:ff:4d:47:75:2a:06:32:7c:d0:51:7b:cb:78:
                    9f:fb:a1:96:09:10:89:f2:7a:8a:0f:16:b6:1c:a6:
                    eb:24:41:c8:c2:7a:23:39:79:1d:d4:84:4b:9b:c6:
                    31:5b:a2:a6:13:54:57:00:25:70:ca:46:12:4c:b3:
                    85:24:ac:d4:6a:eb:b6:bb:0c:79:79:a7:90:a2:51:
                    b8:8d:b0:6b:cc:be:da:52:4a:f7:4d:ff:fc:60:54:
                    92:04:5e:e3:10:48:20:5c:86:3d:9b:1e:32:7c:b2:
                    7e:4e:0a:9a:9f:65:0b:35:47:8e:ff:00:07:63:86:
                    a9:09:56:35:e3:de:5e:13:cd:39:18:ae:36:46:4a:
                    06:89:1a:47:45:c6:63:92:2a:41:16:48:a3:6b:e5:
                    a1:bb:31:ff:57:89:13:f3:19:2f:51:8f:8c:d4:97:
                    ea:cf:4f:45:c7:d6:c4:40:38:1a:0d:f2:31:74:38:
                    b6:4d:f2:cc:de:42:9b:44:ad:98:27:56:1e:33:37:
                    44:24:c7:e2:a1:3a:44:2d:c5:ed:dd:1d:06:20:14:
                    37:eb:10:28:65:45:d7:e0:30:12:15:cd:51:5d:cc:
                    41:2b:70:f7:20:d2:8f:d2:d6:f4:d5:ba:fa:2d:f5:
                    57:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:50:2D:A1:D2:77:C0:33:04:6A:EE:70:87:DC:7D:CC:13:62:37:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6dabfd0c-f982-470b-a430-b95c3c76868d/703a1693-7882-3efe-8213-4647d262ac86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6dabfd0c-f982-470b-a430-b95c3c76868d/6dabfd0c-f982-470b-a430-b95c3c76868d.crl

            X509v3 Authority Key Identifier:
                keyid:70:FC:7D:6F:B5:3D:A7:80:D2:95:D3:4B:99:39:96:C9:8A:63:D6:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6dabfd0c-f982-470b-a430-b95c3c76868d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.192.180.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:f3:c6:84:30:dd:fa:64:ac:0e:6e:3d:34:1b:35:a9:ca:a2:
         78:3b:56:15:a7:fc:0f:98:27:47:b2:ad:b0:76:6f:a4:ba:1a:
         4e:43:44:22:44:43:ac:3a:80:ee:bc:de:9a:96:d8:e5:90:49:
         a1:f5:cc:56:ee:ae:cb:8a:9e:2b:51:5c:0e:f3:af:a3:6e:4f:
         89:e8:ef:64:78:58:05:21:75:1c:b3:1f:80:25:30:f0:ef:90:
         1f:b0:ae:ac:4b:08:74:76:15:db:ab:c0:44:bd:b7:68:52:ea:
         cc:f2:b1:5b:ba:66:1a:e0:d0:44:e0:1b:94:7c:b1:27:b2:58:
         e2:3c:9a:af:57:c6:44:32:57:df:51:a0:04:c7:1c:92:ac:07:
         ed:a6:60:b6:50:5c:c8:b6:1b:60:82:75:6c:17:48:d1:aa:77:
         8b:44:26:ff:d7:47:dd:f7:e4:8d:aa:c3:c5:db:a0:fd:57:15:
         1f:18:63:c7:30:57:01:44:c1:b1:97:de:4e:d3:db:5b:16:bc:
         45:1d:9d:09:d4:a3:8c:6d:67:73:ad:41:7a:dc:25:d8:eb:c8:
         01:bf:7b:ba:2e:b4:3a:f4:23:61:db:78:5b:8d:44:b5:4a:5c:
         38:70:9a:29:2c:03:96:41:46:18:09:9f:d2:f9:26:17:e9:db:
         f6:0b:c8:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 26 21:48:31 2023 by rpki-client on console-fra.rpki-client.org