Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1644c04f-894c-44d1-90ce-41d05dc9483e/ffb77f33-bbb4-3145-aed3-4b44e589f2ba.roa
File:                     ffb77f33-bbb4-3145-aed3-4b44e589f2ba.roa (raw, json)
Hash identifier:          EqMC1GhFct+0MNJHQROMUci/2cnklFH37DpRNDFplUI=
Subject key identifier:   CB:BD:21:2D:F8:C8:95:9A:83:F5:F3:2D:6F:4B:2D:AF:1C:3A:EF:A7
Certificate issuer:       /CN=1644c04f-894c-44d1-90ce-41d05dc9483e
Certificate serial:       010D0C9F4328583A30E410D7DB6F4175B479D000
Authority key identifier: 5D:A5:5A:EA:A9:1D:E4:8B:75:47:95:89:23:A2:CA:04:1B:DB:74:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1644c04f-894c-44d1-90ce-41d05dc9483e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1644c04f-894c-44d1-90ce-41d05dc9483e/ffb77f33-bbb4-3145-aed3-4b44e589f2ba.roa
Signing time:             Wed 26 May 2021 04:00:00 +0000
ROA not before:           Wed 26 May 2021 04:00:00 +0000
ROA not after:            Mon 11 Sep 2023 04:00:00 +0000
asID:                     25885
IP address blocks:        208.85.66.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:30:e4:10:d7:db:6f:41:75:b4:79:d0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1644c04f-894c-44d1-90ce-41d05dc9483e
        Validity
            Not Before: May 26 04:00:00 2021 GMT
            Not After : Sep 11 04:00:00 2023 GMT
        Subject: CN=b7373a17-2f69-4d0e-b81b-652a01d6a92e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:8b:6c:08:19:7a:39:57:bc:3c:b3:25:36:ef:
                    9e:54:53:05:14:a6:39:39:a3:71:b9:cc:07:e3:41:
                    57:8a:87:1e:70:ef:ee:d7:8e:8d:cb:b9:2f:d2:de:
                    65:86:c6:0a:9c:54:ee:46:15:4c:2a:2e:e0:36:3d:
                    4e:e7:45:d6:0f:0b:8a:aa:91:df:3e:ed:3c:74:16:
                    3d:17:93:27:7d:36:54:a2:f8:72:b4:89:30:a9:69:
                    14:3f:ff:5c:0a:6b:00:82:eb:d0:fa:c1:17:a0:0d:
                    4a:ee:b4:e5:7a:0d:3d:48:e5:bf:e7:1c:d1:2a:c1:
                    2c:39:92:29:28:e1:6e:6b:9a:21:d9:13:c0:4f:48:
                    3e:cf:8b:7a:d5:63:bc:6a:de:57:40:a4:87:cf:14:
                    4c:3b:38:78:a2:2e:a0:6c:34:79:ab:b0:82:61:7f:
                    c7:21:2c:f0:67:33:3e:84:dd:39:33:0b:4f:cb:98:
                    13:4b:8b:7e:e5:81:f0:6c:17:2d:8e:a8:d6:3a:90:
                    ed:d0:ba:97:86:37:cf:fc:05:29:5c:a0:06:4b:68:
                    62:26:e5:0b:b1:30:bd:af:4e:0d:a3:70:37:72:be:
                    1d:a3:59:5b:97:57:d1:3c:34:48:e6:40:8b:78:bb:
                    05:72:92:aa:26:2b:d9:de:cc:ea:0d:c4:ff:a4:50:
                    bd:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:BD:21:2D:F8:C8:95:9A:83:F5:F3:2D:6F:4B:2D:AF:1C:3A:EF:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1644c04f-894c-44d1-90ce-41d05dc9483e/ffb77f33-bbb4-3145-aed3-4b44e589f2ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1644c04f-894c-44d1-90ce-41d05dc9483e/1644c04f-894c-44d1-90ce-41d05dc9483e.crl

            X509v3 Authority Key Identifier:
                keyid:5D:A5:5A:EA:A9:1D:E4:8B:75:47:95:89:23:A2:CA:04:1B:DB:74:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1644c04f-894c-44d1-90ce-41d05dc9483e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.85.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:6c:2f:57:c7:56:f0:17:33:29:c8:b1:84:26:0b:a0:4d:43:
         8e:77:10:0c:71:54:1d:58:9e:35:61:e3:03:89:91:83:f7:1b:
         8b:97:41:f9:d7:7d:04:6f:05:5c:b9:f8:cb:65:c4:ce:05:99:
         3f:c7:09:4f:6f:63:a7:6b:7a:66:a5:d8:2c:fc:f2:56:98:24:
         bf:61:23:60:d6:95:44:d6:a0:56:0c:70:e4:1b:53:3b:36:fe:
         b8:d6:ea:34:6d:da:06:8f:5b:ea:9b:c8:70:21:27:1a:d6:00:
         cd:b9:5a:e6:6d:be:59:cb:a2:21:2e:8b:98:d2:67:58:45:db:
         e2:c2:6d:ee:97:2a:65:10:b6:ea:c4:62:6f:d3:23:1a:a0:1f:
         f5:cd:b0:a1:a6:bd:67:12:97:d0:ce:d4:3c:74:a1:03:50:3d:
         01:76:39:6e:54:dd:02:29:72:36:d3:9f:ef:ff:a7:54:6d:44:
         4e:79:1d:93:36:14:76:0a:1a:8d:60:96:ac:74:24:d9:9d:2b:
         55:23:2b:a6:32:a0:4f:19:2f:02:1b:95:7d:10:a8:46:eb:47:
         13:63:63:f4:1d:38:eb:95:20:a5:12:53:c5:37:dd:0c:3e:8b:
         19:eb:62:53:e9:63:91:27:09:28:18:a8:a7:5f:d2:af:3e:84:
         4f:78:aa:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:31 2023 by rpki-client on console-fra.rpki-client.org