Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2/ca230189-08e2-317f-bd7b-721d62924004.roa
File:                     ca230189-08e2-317f-bd7b-721d62924004.roa (raw, json)
Hash identifier:          z5QMJnc75qRiUrhppPuls6rz/q+qu36RQTn+UmWkKtU=
Subject key identifier:   1A:27:14:50:F9:17:25:C2:C6:62:E1:69:0E:4B:E6:EA:9B:BF:BC:77
Certificate issuer:       /CN=4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2
Certificate serial:       010D0C9F4328583DD2C811A42564FF7BEDCDD020
Authority key identifier: 60:0F:D3:65:07:64:FF:F3:F5:46:0E:22:26:D7:3B:5A:12:28:18:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2/ca230189-08e2-317f-bd7b-721d62924004.roa
Signing time:             Wed 16 Dec 2020 14:39:33 +0000
ROA not before:           Wed 16 Dec 2020 14:39:33 +0000
ROA not after:            Fri 09 Aug 2030 04:00:00 +0000
asID:                     56655
IP address blocks:        23.154.177.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:d2:c8:11:a4:25:64:ff:7b:ed:cd:d0:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2
        Validity
            Not Before: Dec 16 14:39:33 2020 GMT
            Not After : Aug  9 04:00:00 2030 GMT
        Subject: CN=337caf8c-d1b1-4482-8ec6-8c87edc92022
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:64:e8:e9:ff:cd:31:93:23:ef:d7:48:b2:5b:
                    60:43:be:f1:07:fd:87:81:3b:90:47:49:79:2f:78:
                    5a:dd:70:fe:e7:1b:8e:d9:e0:b6:dc:17:ea:7f:d7:
                    b6:11:cf:fc:62:0e:2a:0c:76:09:80:29:ed:0e:08:
                    80:af:17:9e:f1:1d:ff:7c:db:3f:b7:4a:c8:27:83:
                    3f:c9:44:6a:0f:6b:6a:02:d3:49:77:04:fd:8e:76:
                    67:b0:6e:4f:1d:7b:1f:64:ee:77:a6:dc:67:f6:e4:
                    c6:33:41:a1:48:46:aa:ab:d3:16:ca:ab:38:34:eb:
                    70:7a:56:c1:04:20:43:f4:be:0b:d6:e5:61:6b:63:
                    16:3d:62:1e:32:e3:20:fd:f7:51:d0:ec:02:ec:1e:
                    84:35:82:1a:29:96:46:c9:ee:a1:53:b8:32:1e:f5:
                    8a:42:27:c3:ac:9b:cb:92:dc:da:40:ea:62:5a:a6:
                    34:d1:aa:98:eb:f5:5e:77:0f:23:75:a4:30:8a:1d:
                    0a:82:bf:43:1f:08:6d:ac:d8:f4:31:e4:b0:66:3d:
                    61:eb:64:97:fe:06:55:24:62:56:ed:79:0a:99:c5:
                    b1:f1:61:ed:77:e9:82:e3:49:cd:79:11:85:8c:0b:
                    80:92:3d:83:f5:98:1c:29:72:25:94:8e:f1:65:b0:
                    90:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:27:14:50:F9:17:25:C2:C6:62:E1:69:0E:4B:E6:EA:9B:BF:BC:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2/ca230189-08e2-317f-bd7b-721d62924004.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2.crl

            X509v3 Authority Key Identifier:
                keyid:60:0F:D3:65:07:64:FF:F3:F5:46:0E:22:26:D7:3B:5A:12:28:18:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.154.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:0a:59:15:3d:9b:e9:3e:35:af:38:88:b4:25:e9:a3:8a:15:
         9d:5d:1d:7c:4a:b8:ba:8c:08:1a:50:63:ea:45:a2:ad:fe:55:
         92:f4:f0:06:4b:8e:82:7b:67:1c:2c:27:7b:a6:8b:88:2f:17:
         0a:b6:ca:a7:a4:d7:c9:73:01:92:ca:2c:07:55:25:f8:a1:da:
         cd:f1:9d:3d:91:6a:99:36:09:f1:8c:10:4a:c2:d7:05:35:c6:
         14:72:eb:aa:20:88:3d:84:1d:2d:b4:4a:25:ab:41:b8:eb:5f:
         92:0a:4b:b1:a5:5b:18:dd:87:b3:ff:b2:36:41:5c:2f:df:93:
         19:8c:fa:c1:12:11:42:35:0a:7a:ec:27:e1:d0:4f:a3:9c:99:
         b1:5e:70:34:c6:24:27:5a:ef:d7:a3:6a:0f:41:04:43:85:7a:
         d6:75:84:c3:6a:9a:df:5a:01:d7:35:8a:c9:d3:71:85:f0:a9:
         d3:01:a2:0e:99:5c:a7:ff:2d:48:1f:dd:fe:75:61:53:a2:2d:
         66:bf:69:ad:e1:cf:18:29:1f:ff:f1:25:8f:20:c2:80:f6:96:
         d6:53:be:96:54:6e:41:c5:a6:62:21:1f:9d:22:6b:51:dd:b9:
         7e:df:d4:2c:7c:7d:30:31:d9:70:90:15:fe:ce:53:06:95:7d:
         34:80:a5:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:08 2023 by rpki-client on console-fra.rpki-client.org