Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/841bf576-78ba-3421-aa4a-e05b4f5d9291.roa
File:                     841bf576-78ba-3421-aa4a-e05b4f5d9291.roa (raw, json)
Hash identifier:          vQznqXlGPJQqaecEIBOweCuVKqc+/QPaIn3V3NKfrw0=
Subject key identifier:   4B:AB:A1:FA:8F:57:03:A6:ED:C7:E9:D0:4C:AD:FB:C6:79:02:EF:97
Certificate issuer:       /CN=a6261878-5ef4-4f99-8d09-b6d2493444c5
Certificate serial:       010D0C9F43285839728FBB8D5AA6C77EC8457000
Authority key identifier: E4:38:00:B2:2B:D1:1D:44:66:B7:39:46:FF:3D:45:52:DC:BE:DC:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/841bf576-78ba-3421-aa4a-e05b4f5d9291.roa
Signing time:             Tue 22 Dec 2020 05:00:00 +0000
ROA not before:           Tue 22 Dec 2020 05:00:00 +0000
ROA not after:            Sat 21 Dec 2030 05:00:00 +0000
asID:                     399122
IP address blocks:        162.251.116.0/22 maxlen: 22
                          2602:fcd5::/36 maxlen: 36

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:72:8f:bb:8d:5a:a6:c7:7e:c8:45:70:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6261878-5ef4-4f99-8d09-b6d2493444c5
        Validity
            Not Before: Dec 22 05:00:00 2020 GMT
            Not After : Dec 21 05:00:00 2030 GMT
        Subject: CN=56fa514c-416e-4b41-b59d-cb7535e4e2d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:f6:5a:31:80:d9:a2:0c:0a:28:3b:e7:66:44:
                    77:f1:f5:b0:7f:6d:79:95:69:0d:57:72:76:7f:15:
                    e3:bd:85:a2:7e:a8:e4:cb:54:d8:41:5d:90:c2:68:
                    22:32:97:eb:6f:ed:6e:b9:20:22:24:fb:24:11:72:
                    54:f5:b6:41:c2:ba:00:2e:8c:50:24:a1:5f:eb:4e:
                    93:16:da:a6:b0:ff:92:c3:54:7f:89:48:85:bc:04:
                    fb:db:60:6b:d8:ca:a2:85:b7:14:66:d6:3d:5a:f6:
                    7f:3c:cf:55:da:15:43:50:1f:be:8e:91:44:0e:ab:
                    09:86:fa:61:05:f8:91:96:ac:63:a0:01:22:8c:5b:
                    74:6f:79:f2:18:0e:a4:20:1a:d5:fc:37:64:d8:1c:
                    df:dc:d1:a2:59:77:f7:91:0a:b2:13:08:8c:b6:96:
                    8e:e7:57:82:9b:83:85:fc:ba:88:78:19:ee:7c:39:
                    a2:0e:8c:83:68:40:d5:80:9f:07:c4:9b:14:e7:99:
                    95:49:8e:25:5f:5f:22:28:1b:01:b8:9a:67:b8:04:
                    61:ae:ae:c7:94:70:60:92:92:53:cb:a0:10:ce:1c:
                    87:16:f5:bf:29:fe:df:ad:83:63:14:cf:56:24:33:
                    50:27:1a:ee:4b:fd:02:6a:c1:12:46:9c:ab:2a:59:
                    cb:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:AB:A1:FA:8F:57:03:A6:ED:C7:E9:D0:4C:AD:FB:C6:79:02:EF:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/841bf576-78ba-3421-aa4a-e05b4f5d9291.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5/a6261878-5ef4-4f99-8d09-b6d2493444c5.crl

            X509v3 Authority Key Identifier:
                keyid:E4:38:00:B2:2B:D1:1D:44:66:B7:39:46:FF:3D:45:52:DC:BE:DC:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a6261878-5ef4-4f99-8d09-b6d2493444c5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.251.116.0/22
                IPv6:
                  2602:fcd5::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:80:e0:b4:20:9e:45:bf:d2:d5:62:fe:dc:19:0e:7d:1e:62:
         8d:a4:96:b9:48:f5:60:26:ac:39:79:3b:62:3e:50:ea:3a:e8:
         1c:88:36:3c:2e:f2:5a:2e:43:94:53:d3:8b:9d:f0:ba:90:14:
         81:6a:a1:51:3e:d7:b8:50:08:fb:ef:14:d6:5a:c0:de:94:99:
         ab:cf:6c:dd:d4:13:69:5a:b8:a0:31:26:38:63:f5:34:95:be:
         de:80:4f:1d:0e:db:73:1d:67:50:77:f1:98:80:a7:06:b5:c8:
         05:08:c7:d5:7e:2b:ee:f6:7a:30:d7:e9:f2:44:b5:01:98:a8:
         9e:25:c8:6e:30:63:4e:e3:d4:c1:59:c8:37:58:8d:09:ae:f2:
         cc:ff:94:29:ac:36:b2:3d:a7:66:93:5a:46:8e:63:d3:c7:ea:
         0c:cc:82:f6:92:71:e6:b3:5a:d2:16:71:2a:d0:64:96:65:de:
         61:87:0b:b9:4e:b5:bc:c9:23:0c:7a:a5:74:fc:c8:24:42:60:
         4e:3d:0f:57:96:ad:c9:64:6d:75:58:4d:dc:59:84:d7:2d:10:
         2c:db:4c:2a:3a:22:b9:73:65:4b:59:99:e0:85:da:f2:8e:da:
         88:83:22:11:66:c0:9e:72:7e:e8:8a:8a:c7:3a:20:d5:f9:b2:
         e4:7b:b6:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:20 2023 by rpki-client on console-fra.rpki-client.org