Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c18872e-4e90-4862-8069-3a53159075c1/13acb5a9-1f50-313c-9d11-aa1d3a5bac8e.roa
File:                     13acb5a9-1f50-313c-9d11-aa1d3a5bac8e.roa (raw, json)
Hash identifier:          Mvid/fbX3TxJlHLg3ArAhJ5XlxG8pOqcEfFTZok8wDo=
Subject key identifier:   82:32:48:5D:84:08:7B:B0:A6:17:8F:0C:18:2D:51:32:07:14:5F:26
Certificate issuer:       /CN=0c18872e-4e90-4862-8069-3a53159075c1
Certificate serial:       010D0C9F4328584359E4FD93FEEE75E864E85C00
Authority key identifier: B5:1B:2D:E9:54:09:D8:DB:7B:E4:4D:5C:6B:B9:7A:8F:B5:2A:16:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c18872e-4e90-4862-8069-3a53159075c1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c18872e-4e90-4862-8069-3a53159075c1/13acb5a9-1f50-313c-9d11-aa1d3a5bac8e.roa
Signing time:             Tue 26 Sep 2023 13:00:26 +0000
ROA not before:           Tue 26 Sep 2023 13:00:26 +0000
ROA not after:            Mon 25 Dec 2023 14:00:26 +0000
asID:                     31875
IP address blocks:        66.33.40.0/21 maxlen: 24
                          169.136.192.0/19 maxlen: 24
                          174.137.16.0/20 maxlen: 24
                          64.112.232.0/21 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:59:e4:fd:93:fe:ee:75:e8:64:e8:5c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c18872e-4e90-4862-8069-3a53159075c1
        Validity
            Not Before: Sep 26 13:00:26 2023 GMT
            Not After : Dec 25 14:00:26 2023 GMT
        Subject: CN=5348ab02-ad12-4209-8abe-9acaf8b8c40c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:47:17:ec:82:8d:9a:fa:68:21:16:75:16:af:
                    ab:a0:99:aa:6f:56:f4:e7:f0:54:03:0b:11:89:7d:
                    34:26:0e:41:75:30:b6:45:90:1f:f0:61:55:14:4b:
                    16:30:b4:94:76:a7:b5:92:99:3e:64:e6:32:e3:1c:
                    25:ea:ec:ba:41:34:14:05:74:3b:cf:e8:d5:ad:ab:
                    50:f1:03:52:5b:14:b3:a7:02:be:de:10:4b:27:d7:
                    26:7d:39:33:47:17:38:2f:32:fa:05:cc:5d:3c:6e:
                    43:43:66:a9:8c:90:ff:76:2e:58:01:30:34:a1:23:
                    6b:34:70:31:aa:2a:c5:14:63:c4:4e:08:38:64:5b:
                    17:6b:d3:42:2e:7f:ae:a1:c0:19:a7:39:61:49:c1:
                    c1:bf:de:02:de:a4:68:6a:98:06:c7:79:84:f0:9d:
                    05:40:b5:8c:35:17:5f:f2:a0:34:00:d7:0e:3d:5b:
                    0c:49:1f:be:c3:9e:03:c8:3e:ed:32:c8:a5:7a:ef:
                    44:40:0e:28:ed:a0:c2:80:06:f3:b7:53:f4:8d:8e:
                    46:7e:56:19:da:18:ed:df:91:6d:c0:7a:7f:43:d7:
                    1f:25:0c:88:bb:a4:fe:7a:dd:b6:03:0d:04:12:4a:
                    3a:ca:b6:75:f7:7c:24:6e:be:0a:5e:80:78:2e:b0:
                    b5:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:32:48:5D:84:08:7B:B0:A6:17:8F:0C:18:2D:51:32:07:14:5F:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c18872e-4e90-4862-8069-3a53159075c1/13acb5a9-1f50-313c-9d11-aa1d3a5bac8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c18872e-4e90-4862-8069-3a53159075c1/0c18872e-4e90-4862-8069-3a53159075c1.crl

            X509v3 Authority Key Identifier:
                keyid:B5:1B:2D:E9:54:09:D8:DB:7B:E4:4D:5C:6B:B9:7A:8F:B5:2A:16:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c18872e-4e90-4862-8069-3a53159075c1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.112.232.0/21
                  66.33.40.0/21
                  169.136.192.0/19
                  174.137.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d4:75:d3:1a:3f:72:9b:9e:39:ad:f9:71:45:b5:a2:76:a0:40:
         2b:b1:19:fd:e9:da:6f:60:06:ef:d9:c1:45:60:04:75:de:77:
         98:a9:33:f2:47:ad:e9:bf:b0:13:0e:16:92:1a:58:0a:8c:e2:
         ae:2e:07:10:b8:eb:c1:e3:f9:d6:1f:5b:b8:90:79:8d:cf:50:
         14:eb:22:e4:51:b3:6c:fc:0d:6b:5a:8c:7f:2b:2d:b6:88:5f:
         28:c2:07:24:d1:bf:18:99:18:93:43:cd:85:a9:0a:f0:bf:58:
         42:57:22:ec:1e:f7:d7:a6:37:e8:17:d6:2c:82:57:91:8c:bc:
         ca:d3:3e:8e:dd:84:08:0a:80:15:6c:e1:cf:a4:d6:87:73:08:
         83:81:c0:38:c9:fc:57:5d:38:38:7c:96:e1:96:d1:f5:b2:0d:
         c4:06:1f:6c:23:85:8a:b4:db:76:a8:f2:67:9d:db:04:b3:a4:
         50:47:31:67:45:14:cf:ca:55:74:c1:03:14:66:c9:e7:72:3a:
         6d:0e:49:29:26:94:1e:ec:4b:f0:3c:73:44:06:f0:8b:74:b0:
         7d:79:1c:3f:1e:d6:d4:83:d7:fa:a0:ae:00:f5:c7:ed:70:49:
         a1:00:8d:c2:48:ac:bb:89:05:b9:08:eb:a4:ce:a1:33:81:ea:
         1a:a6:11:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 3 12:58:57 2023 by rpki-client on console-fra.rpki-client.org