Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/9913deb3-57e6-32c7-9bae-f55667788630.roa
File:                     9913deb3-57e6-32c7-9bae-f55667788630.roa (raw, json)
Hash identifier:          IrjvyWE2YzlMarWRMP4/cYSp0UgWQmO9UrGEs2NNvl4=
Subject key identifier:   F8:2E:80:88:1E:B4:47:DD:CC:A7:94:F4:74:ED:09:82:8D:B7:B1:17
Certificate issuer:       /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial:       010D0C9F4328583D2B30E137595958700C477D00
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/9913deb3-57e6-32c7-9bae-f55667788630.roa
Signing time:             Tue 08 Mar 2022 05:00:00 +0000
ROA not before:           Tue 08 Mar 2022 05:00:00 +0000
ROA not after:            Fri 08 Mar 2030 05:00:00 +0000
asID:                     54004
IP address blocks:        65.51.80.0/20 maxlen: 20
                          65.51.32.0/19 maxlen: 19
                          65.51.64.0/20 maxlen: 20
                          65.51.30.0/24 maxlen: 24
                          65.51.0.0/20 maxlen: 20
                          65.51.16.0/21 maxlen: 21
                          65.51.24.0/22 maxlen: 22
                          65.51.32.0/20 maxlen: 20
                          65.51.48.0/20 maxlen: 20
                          65.51.64.0/18 maxlen: 18
                          65.51.96.0/20 maxlen: 20
                          65.51.112.0/20 maxlen: 20
                          65.51.128.0/17 maxlen: 17
                          65.51.128.0/20 maxlen: 20
                          65.51.144.0/20 maxlen: 20
                          65.51.160.0/20 maxlen: 20
                          65.51.176.0/20 maxlen: 20
                          65.51.192.0/20 maxlen: 20
                          65.51.208.0/20 maxlen: 20
                          65.51.224.0/20 maxlen: 20
                          65.51.240.0/20 maxlen: 20

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:2b:30:e1:37:59:59:58:70:0c:47:7d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
        Validity
            Not Before: Mar  8 05:00:00 2022 GMT
            Not After : Mar  8 05:00:00 2030 GMT
        Subject: CN=18024a57-b2ce-4dd2-8b0d-bf4cc83403e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:32:29:f8:99:d7:83:a1:ef:2f:e8:c6:bd:ff:
                    79:e4:24:ba:9e:c0:fb:55:b3:f3:d6:e7:2b:c4:7a:
                    7a:73:62:17:c2:20:de:b6:10:10:c9:02:42:3b:78:
                    a9:73:e2:3f:10:37:c7:92:48:7b:bc:25:ad:f0:5f:
                    79:f6:af:a5:63:e6:f7:29:40:6d:96:a8:d2:34:15:
                    42:2e:03:1a:9c:bd:58:38:14:37:84:4a:de:18:dd:
                    88:d3:2b:d3:b2:c5:ef:14:ea:f3:ec:c5:5e:b2:6e:
                    26:cc:72:0c:4e:e4:64:78:0b:45:e6:ab:9d:61:e8:
                    c9:93:9c:a7:65:2e:50:e0:72:c7:bc:10:d1:6b:6b:
                    a9:83:7f:98:d5:88:58:f0:85:00:7b:e7:b0:45:48:
                    10:cc:80:10:02:84:f6:11:45:22:83:4b:e2:f1:33:
                    b3:e2:b6:d5:65:c2:df:fb:13:da:72:1e:c4:b8:fa:
                    1a:e5:09:f0:27:d6:54:bf:54:d0:b5:26:4a:2f:dc:
                    76:11:bd:e4:85:46:17:38:38:5b:72:ba:41:f3:b2:
                    e3:cb:5b:84:1f:b5:ef:18:4b:77:dd:ce:78:0d:65:
                    57:55:10:41:66:45:9a:3a:3f:d5:9d:33:5c:5d:16:
                    9d:53:b0:d3:b7:c1:b8:f7:13:6f:9b:b4:57:af:e7:
                    61:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:2E:80:88:1E:B4:47:DD:CC:A7:94:F4:74:ED:09:82:8D:B7:B1:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/9913deb3-57e6-32c7-9bae-f55667788630.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl

            X509v3 Authority Key Identifier:
                keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.51.0.0-65.51.27.255
                  65.51.30.0/24
                  65.51.32.0-65.51.255.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:d1:b0:60:88:7a:69:90:fc:24:5c:a1:0c:b4:5f:80:3c:34:
         e2:a7:3e:31:82:d1:b3:3e:42:66:a6:5c:b2:af:c5:f9:5a:12:
         e2:57:a8:15:a5:23:7a:9a:c7:f5:e7:64:4f:d2:16:bb:fa:a0:
         aa:3f:74:3f:9b:9c:bb:11:38:8f:d6:9c:ea:ae:3a:02:53:52:
         c5:1c:52:78:cd:59:00:04:5e:9e:d5:94:20:9c:18:da:8e:c4:
         9e:04:f4:20:c7:89:7d:16:6f:a1:6a:37:63:87:74:13:d5:54:
         91:31:62:58:76:ab:cf:c8:9f:25:fb:d3:98:28:a2:01:4d:71:
         96:ee:98:99:83:eb:d6:c6:75:e1:93:26:2b:98:db:9a:6f:4b:
         c7:54:15:9e:e6:a0:93:c6:04:2f:06:c6:cf:d2:33:76:4a:04:
         2d:fc:4d:74:94:91:d0:4b:8e:6c:a4:39:53:06:3b:0c:43:6b:
         33:48:9c:bb:a2:e1:75:13:d0:5f:84:7a:42:a1:41:fa:b2:0e:
         d6:75:79:a4:a0:18:87:c5:fb:a4:15:9c:fd:ec:68:dc:16:e5:
         3a:b0:48:e2:82:86:91:f8:f0:9d:89:8c:ce:71:d0:0b:8a:17:
         86:6b:0d:18:02:a3:0b:df:51:1f:2a:b6:31:c4:37:95:a5:88:
         35:0c:8b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:24 2023 by rpki-client on console-ams.rpki-client.org