Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4994aff-79e3-4800-875a-f4a951d7af28/9ca7eeef-a254-30c9-90f5-6962078a3422.roa
File:                     9ca7eeef-a254-30c9-90f5-6962078a3422.roa (raw, json)
Hash identifier:          gNswmSG7+Dy7jbVbb1FrIPe7RX70v4dm0lgph/jxXzA=
Subject key identifier:   71:33:14:4D:AC:85:07:ED:7A:EF:2C:06:13:69:CB:87:21:A1:C3:FC
Certificate issuer:       /CN=a4994aff-79e3-4800-875a-f4a951d7af28
Certificate serial:       010D0C9F43285841E4470B8809A8FED0BCDBC640
Authority key identifier: 4A:41:44:C2:37:55:32:9B:82:E2:88:2B:51:8A:93:7E:E6:74:AF:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4994aff-79e3-4800-875a-f4a951d7af28.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4994aff-79e3-4800-875a-f4a951d7af28/9ca7eeef-a254-30c9-90f5-6962078a3422.roa
Signing time:             Mon 15 May 2023 17:04:52 +0000
ROA not before:           Mon 15 May 2023 17:04:52 +0000
ROA not after:            Tue 01 Aug 2023 22:31:10 +0000
asID:                     7040
IP address blocks:        199.68.219.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:47:0b:88:09:a8:fe:d0:bc:db:c6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4994aff-79e3-4800-875a-f4a951d7af28
        Validity
            Not Before: May 15 17:04:52 2023 GMT
            Not After : Aug  1 22:31:10 2023 GMT
        Subject: CN=4bcb5163-0580-4b00-9ad1-bd2b5d9bee88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:10:7d:e2:dd:54:6d:82:ce:b1:88:68:d5:94:
                    f2:da:92:18:32:5d:d7:b6:5f:68:3f:8d:61:b9:54:
                    cb:a7:a4:76:e6:d3:cd:da:44:c0:26:6f:f8:2f:0e:
                    63:66:39:af:31:2b:d0:61:55:6a:1c:4b:78:ba:81:
                    95:d6:3b:65:06:fd:fd:0c:aa:ec:9d:26:de:f9:f4:
                    19:ea:4b:f1:dd:f5:f1:99:80:94:de:ea:68:d3:10:
                    a5:0d:02:6d:5b:7d:56:53:79:83:5a:8b:c3:91:5e:
                    45:ec:91:98:67:a8:14:9c:bd:ed:34:0f:77:6d:c9:
                    0d:1b:91:ed:50:39:82:47:d3:03:80:34:c9:61:2b:
                    c7:6e:46:ca:47:76:d6:cf:ed:f3:ab:4c:fc:5a:8b:
                    ea:7a:11:34:e8:7f:80:a5:2b:46:77:f3:19:1e:85:
                    5e:84:c2:a9:43:1e:b8:bf:14:8a:35:d6:d3:62:2c:
                    b0:75:d4:2f:4b:2e:38:21:ff:34:c4:5a:47:98:0f:
                    38:a3:d2:bb:a9:6b:7a:ca:1f:db:9a:8b:c8:fc:ea:
                    5d:b4:b0:f9:28:56:c7:f4:2c:8a:e0:0d:30:d8:b9:
                    80:03:d2:e6:34:af:4f:85:34:71:78:e8:a8:d5:63:
                    c5:66:50:53:79:25:68:44:e2:15:5d:4b:64:4b:9b:
                    74:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:33:14:4D:AC:85:07:ED:7A:EF:2C:06:13:69:CB:87:21:A1:C3:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4994aff-79e3-4800-875a-f4a951d7af28/9ca7eeef-a254-30c9-90f5-6962078a3422.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4994aff-79e3-4800-875a-f4a951d7af28/a4994aff-79e3-4800-875a-f4a951d7af28.crl

            X509v3 Authority Key Identifier:
                keyid:4A:41:44:C2:37:55:32:9B:82:E2:88:2B:51:8A:93:7E:E6:74:AF:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4994aff-79e3-4800-875a-f4a951d7af28.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.68.219.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:b7:eb:52:57:ce:c8:c3:0b:2f:99:66:a0:9a:b4:a0:d8:51:
         85:ee:59:64:7e:3d:34:37:7f:f1:da:46:8e:4f:d2:02:f3:82:
         eb:8d:22:fa:8a:a4:a8:38:6c:80:6e:ee:e2:65:ea:16:7e:56:
         f5:75:ee:35:1a:47:92:7c:e2:27:d6:e6:53:26:2e:c5:b5:55:
         2c:d6:a0:ff:80:36:45:f4:ec:e8:c5:08:40:fa:49:ca:e4:6b:
         66:24:0e:39:5e:fd:8c:a2:21:e3:66:30:10:20:6f:d4:4c:f3:
         66:97:50:28:af:61:67:80:ba:5d:2c:43:ce:2e:4d:ef:90:d2:
         3a:b1:17:ab:2b:9d:1b:2a:e1:a7:7c:08:2a:70:5f:4a:ed:f8:
         15:ca:d3:46:99:a3:55:7f:d9:e0:40:9b:c2:97:97:f0:87:68:
         aa:99:ac:75:f7:d4:8e:fa:ab:0d:c7:0f:70:37:cd:b5:ba:b4:
         22:8d:51:0f:c1:03:d5:72:7e:86:f9:ad:d2:17:7a:03:48:a8:
         bd:59:6d:46:7e:34:42:4a:42:22:27:86:9f:71:1c:4a:69:40:
         fd:3b:c8:c4:64:7d:dc:31:8f:03:f9:64:7c:0c:bf:76:d5:39:
         30:2b:ea:27:d5:42:ce:42:b3:79:89:79:77:4a:5b:af:07:80:
         58:b0:20:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:20 2023 by rpki-client on console-fra.rpki-client.org