Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c18872e-4e90-4862-8069-3a53159075c1/f5320720-2b90-3d00-b590-983ddfc90746.roa
File:                     f5320720-2b90-3d00-b590-983ddfc90746.roa (raw, json)
Hash identifier:          ElK+tuSb7KNoq2j3DKrIk+d+PbGJoy5isJ74VUGYZkA=
Subject key identifier:   44:FE:75:33:96:4A:8A:BF:A1:5D:DE:8E:36:B9:F4:22:CF:68:8A:61
Certificate issuer:       /CN=0c18872e-4e90-4862-8069-3a53159075c1
Certificate serial:       010D0C9F4328583E88C8B34CD1359CB523957E80
Authority key identifier: B5:1B:2D:E9:54:09:D8:DB:7B:E4:4D:5C:6B:B9:7A:8F:B5:2A:16:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c18872e-4e90-4862-8069-3a53159075c1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c18872e-4e90-4862-8069-3a53159075c1/f5320720-2b90-3d00-b590-983ddfc90746.roa
Signing time:             Mon 11 Jul 2022 18:50:05 +0000
ROA not before:           Mon 11 Jul 2022 18:50:05 +0000
ROA not after:            Sun 13 Oct 2024 04:00:00 +0000
asID:                     31875
IP address blocks:        64.112.232.0/21 maxlen: 24
                          169.136.192.0/19 maxlen: 24
                          174.137.16.0/20 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:88:c8:b3:4c:d1:35:9c:b5:23:95:7e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c18872e-4e90-4862-8069-3a53159075c1
        Validity
            Not Before: Jul 11 18:50:05 2022 GMT
            Not After : Oct 13 04:00:00 2024 GMT
        Subject: CN=d8872411-f817-47d3-8599-dae58e18c869
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:fa:8e:cd:dc:25:1e:7c:ec:27:ee:2e:14:dd:
                    46:d4:1a:e1:ad:35:6e:f7:fb:11:07:9e:57:3c:38:
                    87:11:d1:b6:64:d2:77:e9:a0:ea:41:6b:34:58:f3:
                    97:27:53:4d:c3:67:ff:a8:ff:6e:94:fd:1b:ae:5f:
                    12:ce:77:92:1d:9f:04:bc:72:66:b2:fb:00:a0:fd:
                    4c:bf:43:3b:85:2c:b2:63:2f:fd:ac:17:77:89:00:
                    69:19:da:9e:26:70:7f:50:f2:20:e8:62:31:b6:80:
                    ec:06:63:4c:e7:9b:c8:cf:25:8e:52:5d:29:41:52:
                    6e:ab:6b:8f:8b:f8:ce:1d:1b:85:dd:ed:d1:c9:50:
                    20:75:55:e9:53:7c:c0:0b:2b:1d:f2:e7:20:83:f2:
                    75:44:16:26:50:21:08:10:6b:c1:59:af:8d:8d:2b:
                    5c:0e:77:ac:07:26:2e:28:4e:3e:2a:ab:3d:9d:32:
                    ba:8d:cf:06:f7:b7:4c:1c:eb:be:33:43:08:e1:32:
                    78:ef:3f:5e:14:72:51:f8:b3:a7:c7:ce:7d:c5:52:
                    12:d3:89:cf:f4:9c:86:d4:94:e2:e9:e8:7a:3c:6a:
                    71:e4:b7:c2:96:5a:dc:e0:29:5e:d6:e9:9f:ff:31:
                    74:c3:32:16:39:8d:b5:92:9c:9c:ea:86:56:f0:ed:
                    4d:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:FE:75:33:96:4A:8A:BF:A1:5D:DE:8E:36:B9:F4:22:CF:68:8A:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c18872e-4e90-4862-8069-3a53159075c1/f5320720-2b90-3d00-b590-983ddfc90746.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c18872e-4e90-4862-8069-3a53159075c1/0c18872e-4e90-4862-8069-3a53159075c1.crl

            X509v3 Authority Key Identifier:
                keyid:B5:1B:2D:E9:54:09:D8:DB:7B:E4:4D:5C:6B:B9:7A:8F:B5:2A:16:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0c18872e-4e90-4862-8069-3a53159075c1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.112.232.0/21
                  169.136.192.0/19
                  174.137.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:6b:d9:6b:72:d9:b1:e8:b7:45:e4:e7:5f:79:8a:59:f3:80:
         0f:d3:bc:10:6d:cc:a7:e1:cf:2d:51:7b:89:8b:06:3f:f3:b5:
         9e:4b:0f:b8:01:7e:51:41:d8:12:b7:53:2c:f4:a2:35:7d:7e:
         89:fb:70:1d:af:49:b5:8b:a3:38:f2:9c:5c:06:b8:b5:6a:cb:
         39:92:f0:f2:b4:4d:7b:bf:f9:af:34:48:57:45:48:5e:fc:f9:
         67:39:d7:e7:b0:a3:80:20:50:44:63:27:f6:7e:58:bd:35:cd:
         1e:24:c4:56:b5:13:65:5b:bc:b4:10:7a:2d:45:c0:1c:39:c5:
         41:f2:11:50:4e:94:2a:67:d1:6c:af:0e:0a:b5:b3:27:77:37:
         16:9f:ac:b6:2b:73:fa:d3:79:91:48:d5:fe:4d:9b:e4:84:b5:
         55:32:82:b5:71:79:3a:c2:29:e1:da:b2:10:3a:60:1a:00:fe:
         85:7b:00:07:86:72:35:cc:04:df:52:91:19:73:73:88:33:92:
         09:eb:98:c0:db:21:fb:eb:3e:4b:22:76:5b:7d:26:cc:09:c6:
         22:0b:37:b7:5c:81:03:33:6a:e9:3e:85:87:bb:ab:f1:98:64:
         34:d3:48:19:f2:35:23:b5:94:d1:4c:e3:2b:e1:61:da:6e:17:
         1d:ae:cd:cc
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWD6IyLNM0TWctSOVfoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGMxODg3MmUtNGU5MC00ODYyLTgwNjktM2E1MzE1OTA3
NWMxMB4XDTIyMDcxMTE4NTAwNVoXDTI0MTAxMzA0MDAwMFowLzEtMCsGA1UEAxMk
ZDg4NzI0MTEtZjgxNy00N2QzLTg1OTktZGFlNThlMThjODY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgvqOzdwlHnzsJ+4uFN1G1BrhrTVu9/sRB55X
PDiHEdG2ZNJ36aDqQWs0WPOXJ1NNw2f/qP9ulP0brl8SzneSHZ8EvHJmsvsAoP1M
v0M7hSyyYy/9rBd3iQBpGdqeJnB/UPIg6GIxtoDsBmNM55vIzyWOUl0pQVJuq2uP
i/jOHRuF3e3RyVAgdVXpU3zACysd8ucgg/J1RBYmUCEIEGvBWa+NjStcDnesByYu
KE4+Kqs9nTK6jc8G97dMHOu+M0MI4TJ47z9eFHJR+LOnx859xVIS04nP9JyG1JTi
6eh6PGpx5LfCllrc4Cle1umf/zF0wzIWOY21kpyc6oZW8O1NSQIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFET+dTOWSoq/oV3ejja59CLPaIphMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wYzE4
ODcyZS00ZTkwLTQ4NjItODA2OS0zYTUzMTU5MDc1YzEvZjUzMjA3MjAtMmI5MC0z
ZDAwLWI1OTAtOTgzZGRmYzkwNzQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGMxODg3MmUtNGU5MC00ODYyLTgw
NjktM2E1MzE1OTA3NWMxLzBjMTg4NzJlLTRlOTAtNDg2Mi04MDY5LTNhNTMxNTkw
NzVjMS5jcmwwHwYDVR0jBBgwFoAUtRst6VQJ2Nt75E1ca7l6j7UqFs8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wYzE4ODcyZS00ZTkwLTQ4NjItODA2OS0zYTUz
MTU5MDc1YzEuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDQHDoAwQF
qYjAAwQErokQMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBACFr2Wty2bHot0Xk5195ilnzgA/TvBBtzKfhzy1R
e4mLBj/ztZ5LD7gBflFB2BK3Uyz0ojV9fon7cB2vSbWLozjynFwGuLVqyzmS8PK0
TXu/+a80SFdFSF78+Wc51+ewo4AgUERjJ/Z+WL01zR4kxFa1E2VbvLQQei1FwBw5
xUHyEVBOlCpn0WyvDgq1syd3NxafrLYrc/rTeZFI1f5Nm+SEtVUygrVxeTrCKeHa
shA6YBoA/oV7AAeGcjXMBN9SkRlzc4gzkgnrmMDbIfvrPksidlt9JswJxiILN7dc
gQMzauk+hYe7q/GYZDTTSBnyNSO1lNFM4yvhYdpuFx2uzcw=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:48 2023 by rpki-client on console-ams.rpki-client.org