Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5/633e4894-5cdd-36cd-9e5f-1a047226f762.roa
File:                     633e4894-5cdd-36cd-9e5f-1a047226f762.roa (raw, json)
Hash identifier:          0lNx+Qx/orCw4tHplJIqP1NfqBfLKSoSLOYT0z8Wol8=
Subject key identifier:   19:9B:5D:FA:8F:B3:4F:9E:0F:70:E9:37:74:AF:1E:0E:BB:8B:85:EC
Certificate issuer:       /CN=c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5
Certificate serial:       010D0C9F4328583DEEB4C52ED5C4310DA8680600
Authority key identifier: 9E:38:09:5E:28:4A:C7:3E:24:49:4E:E9:86:9E:61:4A:42:0F:ED:CA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5/633e4894-5cdd-36cd-9e5f-1a047226f762.roa
Signing time:             Thu 20 Aug 2020 16:04:58 +0000
ROA not before:           Thu 20 Aug 2020 16:04:58 +0000
ROA not after:            Mon 19 Aug 2024 04:00:00 +0000
asID:                     62456
IP address blocks:        169.197.188.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:ee:b4:c5:2e:d5:c4:31:0d:a8:68:06:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5
        Validity
            Not Before: Aug 20 16:04:58 2020 GMT
            Not After : Aug 19 04:00:00 2024 GMT
        Subject: CN=86ba1e8a-f668-4fd8-96d4-eb5435845254
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a3:2f:0d:37:eb:ed:23:cd:aa:69:2d:a6:af:
                    14:5f:47:62:a3:f1:7e:07:64:1a:78:81:39:9d:70:
                    6e:ed:ca:b4:1f:fa:d0:09:85:cb:f0:82:3a:45:af:
                    df:b2:12:9f:3e:4c:df:b2:f7:cc:2c:7e:17:1c:87:
                    45:e2:b1:d4:4f:4c:df:64:7a:45:b4:fd:50:85:44:
                    8e:39:39:57:ff:18:a3:43:96:43:9b:6a:44:a8:c7:
                    81:48:85:7b:5f:0d:c5:87:42:eb:5d:d9:03:c7:ef:
                    ff:77:8c:7f:97:ec:21:4d:9b:c5:57:00:47:be:42:
                    6c:35:f4:9e:97:0b:8e:8a:f1:7e:b8:13:e0:1e:ef:
                    86:c9:6b:03:d5:95:c2:6d:27:98:6c:9c:b8:35:2c:
                    30:45:20:d3:f9:6b:0d:f4:8e:2e:3c:c3:4e:0d:dd:
                    30:a2:8b:82:a5:bc:0d:0d:68:a8:a9:4d:23:68:f9:
                    85:d6:46:4b:dc:c7:08:27:65:d5:85:43:0d:6c:4e:
                    eb:1d:3a:47:41:38:8d:be:a8:7a:d6:52:8b:bb:23:
                    0f:1a:f1:f2:cb:83:41:71:d6:ab:ea:2e:2a:12:5e:
                    16:ca:6f:f3:04:20:df:3d:96:f9:90:e9:f4:24:0f:
                    44:58:24:28:1c:da:aa:f5:c6:a2:7c:94:45:6c:2f:
                    a0:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:9B:5D:FA:8F:B3:4F:9E:0F:70:E9:37:74:AF:1E:0E:BB:8B:85:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5/633e4894-5cdd-36cd-9e5f-1a047226f762.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5.crl

            X509v3 Authority Key Identifier:
                keyid:9E:38:09:5E:28:4A:C7:3E:24:49:4E:E9:86:9E:61:4A:42:0F:ED:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.197.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:6c:60:be:d3:7d:03:98:25:31:d1:40:7a:1e:29:73:a7:6b:
         3a:77:47:d3:d5:84:fa:a6:92:19:35:26:ed:4b:48:31:9f:9a:
         30:c9:6f:24:73:8b:bb:ff:c4:4e:cc:66:a8:71:d4:66:4d:50:
         98:79:79:e0:24:23:59:df:d2:66:b3:84:9d:f1:65:88:28:3a:
         98:e0:e1:bd:ab:82:9b:78:63:f3:b0:3b:27:bd:31:66:7d:f6:
         72:d2:c1:60:bf:e1:55:14:47:da:78:6c:53:05:73:5c:73:ee:
         5c:3e:5c:82:6b:40:1b:48:9c:13:7f:db:2a:b1:b2:cd:75:50:
         75:2a:60:5f:34:17:09:78:2f:68:09:7e:be:2b:ee:33:e5:5d:
         12:8a:f5:ee:a7:91:be:e8:ec:18:09:58:7d:23:fa:1c:88:10:
         de:03:c7:32:a7:33:70:ba:92:b4:3f:3b:07:37:2c:e1:d6:3e:
         47:49:36:80:fd:e5:02:58:9a:53:4e:60:6b:cb:77:50:85:3e:
         d0:3d:41:75:53:86:10:14:6c:9a:f4:44:68:15:61:b4:53:87:
         f9:97:6a:d5:89:aa:55:e4:36:c9:9a:00:19:84:c9:3c:44:f7:
         be:89:20:b5:85:b9:62:a8:fb:cc:eb:63:0a:af:fb:67:db:e1:
         39:e2:00:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:21 2023 by rpki-client on console-fra.rpki-client.org