Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d/ae23f97b-c2cb-305b-80ff-fbc5dc2a824e.roa
File:                     ae23f97b-c2cb-305b-80ff-fbc5dc2a824e.roa (raw, json)
Hash identifier:          8x13AiAbEIBreWZrgYTiUR3Mm/3WqHRdrIQsAfCnDqE=
Subject key identifier:   E0:4E:D1:A1:D0:88:8F:B6:08:13:9C:9C:02:52:82:5F:8F:80:74:78
Certificate issuer:       /CN=7e4eda42-1b89-4124-8a06-63381278375d
Certificate serial:       010D0C9F43285842655482BBD86B1CF4976444C0
Authority key identifier: 8A:4F:5E:F7:FA:39:D8:47:50:32:90:17:1C:E3:C3:CB:E6:D3:B0:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d/ae23f97b-c2cb-305b-80ff-fbc5dc2a824e.roa
Signing time:             Fri 30 Jun 2023 22:32:11 +0000
ROA not before:           Fri 30 Jun 2023 22:32:11 +0000
ROA not after:            Thu 28 Sep 2023 22:32:11 +0000
asID:                     398646
IP address blocks:        45.41.214.0/24 maxlen: 24
                          162.253.214.0/24 maxlen: 24
                          162.253.215.0/24 maxlen: 24
                          209.160.97.0/24 maxlen: 24
                          209.160.99.0/24 maxlen: 24
                          2602:fe6b:1020::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:65:54:82:bb:d8:6b:1c:f4:97:64:44:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e4eda42-1b89-4124-8a06-63381278375d
        Validity
            Not Before: Jun 30 22:32:11 2023 GMT
            Not After : Sep 28 22:32:11 2023 GMT
        Subject: CN=98d3e11b-382b-46f4-bc11-c9b30d3da077
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:6b:c5:4f:2e:2d:cc:e9:c0:d6:7c:3a:df:07:
                    46:76:8e:f8:80:cb:81:29:53:22:9f:df:6e:ef:f3:
                    25:fe:b4:6a:93:62:9d:03:82:1b:52:06:94:a8:d3:
                    28:3b:60:24:3b:56:1c:b1:85:1a:2d:67:f5:10:f4:
                    3e:31:27:52:4b:40:23:b8:a3:ce:7d:fd:c5:ba:11:
                    18:46:f3:a1:95:6e:be:a3:48:da:c2:85:62:bd:c0:
                    0e:c5:07:8c:b4:1a:6c:6f:36:1d:11:56:9a:62:d2:
                    a1:f4:31:ac:4f:b9:fa:c3:b7:7d:94:10:dd:d9:7f:
                    d6:9e:86:b9:17:4b:8d:b8:05:b3:0f:90:7e:47:e9:
                    d6:22:49:40:1e:f9:fd:9d:24:78:71:65:9a:db:19:
                    35:f8:4c:ed:0b:85:17:ea:6a:a4:31:0d:38:66:13:
                    d1:0c:06:b2:23:59:e3:d6:20:43:ee:ce:91:34:e3:
                    32:83:f0:58:44:1b:f8:75:73:be:24:ed:62:8c:fa:
                    34:ad:a0:2e:00:ba:ca:1f:c5:13:a5:99:db:c9:ce:
                    5f:c4:61:39:86:d7:6b:87:ae:fe:c0:72:ec:90:83:
                    dc:49:66:b3:f0:36:39:8d:f6:ea:04:b7:23:cd:4b:
                    dc:b5:0a:6a:e9:cd:2d:d5:c9:f7:68:d8:44:57:5f:
                    9d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:4E:D1:A1:D0:88:8F:B6:08:13:9C:9C:02:52:82:5F:8F:80:74:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d/ae23f97b-c2cb-305b-80ff-fbc5dc2a824e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d/7e4eda42-1b89-4124-8a06-63381278375d.crl

            X509v3 Authority Key Identifier:
                keyid:8A:4F:5E:F7:FA:39:D8:47:50:32:90:17:1C:E3:C3:CB:E6:D3:B0:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e4eda42-1b89-4124-8a06-63381278375d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.41.214.0/24
                  162.253.214.0/23
                  209.160.97.0/24
                  209.160.99.0/24
                IPv6:
                  2602:fe6b:1020::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:1a:2b:f9:a9:e1:b6:24:ed:57:5a:6c:8f:70:52:62:c9:34:
         4f:1c:8d:ef:58:bf:cf:70:9f:80:fd:54:1e:c4:b9:0b:b2:0a:
         bd:1c:8b:0d:c4:9f:e2:55:ea:f3:3c:e2:81:b9:8a:37:5b:12:
         89:4c:31:4d:2a:dc:5c:a8:bd:db:75:d8:ff:45:8a:cc:f3:b0:
         c1:40:60:62:46:03:45:d4:a2:31:0e:83:92:e0:3f:c9:6c:06:
         37:c6:de:cc:c2:49:ec:96:88:e8:d7:db:ad:77:ea:72:45:d5:
         16:73:6b:01:bb:64:0e:a8:d6:b4:58:44:27:90:16:1d:35:e0:
         e0:d5:c6:5c:9f:70:c9:28:7a:3f:39:3a:b9:2c:90:98:87:2f:
         6c:8d:25:40:7f:ec:7b:d8:e5:39:13:89:3c:a9:15:05:db:b2:
         e0:9b:f2:d1:e0:6c:96:bf:cb:66:a1:7c:88:cc:99:21:1a:7e:
         0e:a9:fb:58:94:f7:5e:3c:05:8d:4a:5b:0c:e8:43:9d:ea:90:
         af:26:7f:7d:74:e4:30:1b:f2:66:45:63:ac:fa:24:08:57:e7:
         b5:a4:8a:78:68:96:7e:ee:65:a4:e1:d6:7e:3d:f4:57:ee:c6:
         99:c4:df:73:9c:a6:44:ac:9b:d1:a5:57:b7:f6:e9:a9:b3:1f:
         b6:47:14:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 17 17:08:51 2023 by rpki-client on console-ams.rpki-client.org