Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/705ee0a4-d0b9-38b9-9480-83675bcd64e1.roa
File:                     705ee0a4-d0b9-38b9-9480-83675bcd64e1.roa (raw, json)
Hash identifier:          y7iXPz1OwXwDMVb3hioMdY07KAQieuiL959z4F5k0SM=
Subject key identifier:   F9:98:FF:2A:00:E0:06:66:01:40:48:D1:EF:BB:7D:98:DA:74:08:9D
Certificate issuer:       /CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
Certificate serial:       010D0C9F43285843B036E861F84079457E53CC20
Authority key identifier: 80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/705ee0a4-d0b9-38b9-9480-83675bcd64e1.roa
Signing time:             Fri 27 Oct 2023 11:05:06 +0000
ROA not before:           Fri 27 Oct 2023 11:05:06 +0000
ROA not after:            Thu 25 Jan 2024 12:05:06 +0000
asID:                     9009
IP address blocks:        116.206.150.0/24 maxlen: 24
                          139.5.22.0/24 maxlen: 24
                          139.5.23.0/24 maxlen: 24
                          103.207.45.0/24 maxlen: 24
                          103.216.1.0/24 maxlen: 24
                          103.216.3.0/24 maxlen: 24
                          45.123.144.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:b0:36:e8:61:f8:40:79:45:7e:53:cc:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
        Validity
            Not Before: Oct 27 11:05:06 2023 GMT
            Not After : Jan 25 12:05:06 2024 GMT
        Subject: CN=75c9065c-1396-4cd3-a123-525f73ec1c46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:9a:c8:91:19:db:95:00:0e:73:96:07:d1:4b:
                    ff:b0:23:48:08:d4:9d:44:d1:87:9e:6e:d8:4a:cc:
                    3b:e2:7e:8b:31:ae:41:f1:ef:f0:a8:36:35:ff:0f:
                    24:ae:1b:ea:36:f2:4c:7d:c7:a1:8f:a3:1a:36:43:
                    5a:69:d6:3b:51:c2:43:f7:63:f9:87:22:cf:9a:bf:
                    bf:f4:6c:2d:0b:bd:77:9a:95:9e:44:ec:50:f9:1e:
                    c6:0e:89:eb:79:8a:98:12:a6:3a:97:09:e7:36:4e:
                    dc:b6:7d:a2:76:aa:38:4a:48:55:44:29:0a:10:f4:
                    0f:50:03:ef:46:f7:ee:fe:af:9b:42:f4:77:10:1b:
                    a2:46:32:79:48:92:9d:8c:e1:62:e7:d2:cc:d1:72:
                    d0:00:20:68:78:f7:c2:fd:75:3c:9a:47:45:7d:1a:
                    82:a1:40:73:b9:46:67:8e:56:45:b3:97:b5:cb:8b:
                    41:99:d2:51:f7:13:a6:50:20:73:29:f0:af:73:5a:
                    c6:6b:ba:f0:bb:75:01:e9:38:5a:c6:59:90:7c:85:
                    60:9b:e5:f6:0d:d7:a4:18:89:9e:79:1f:63:58:c3:
                    5f:a1:b2:26:e2:11:b6:ad:d0:c7:36:04:3e:24:70:
                    33:63:3d:69:cc:44:0b:f5:04:63:7c:b8:2e:21:95:
                    d2:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:98:FF:2A:00:E0:06:66:01:40:48:D1:EF:BB:7D:98:DA:74:08:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/705ee0a4-d0b9-38b9-9480-83675bcd64e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.crl

            X509v3 Authority Key Identifier:
                keyid:80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.123.144.0/24
                  103.207.45.0/24
                  103.216.1.0/24
                  103.216.3.0/24
                  116.206.150.0/24
                  139.5.22.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:fa:98:54:5e:34:33:b9:87:65:b1:ad:04:3e:4b:ec:ea:bd:
         9c:a6:db:f8:9d:e4:c7:82:75:2a:ca:d7:90:19:40:d2:f1:9e:
         7e:b8:7c:86:28:a5:5d:da:a7:a6:d2:b6:16:95:d5:c9:96:77:
         ba:c0:e2:10:3e:01:5d:a8:a8:9e:64:1e:9c:05:54:99:72:06:
         b4:89:94:41:72:36:09:4e:c7:9f:f7:f0:72:04:a2:79:15:b8:
         35:57:78:03:1e:74:5e:c6:66:f9:43:25:b9:51:6f:bb:c3:79:
         ef:92:e2:41:ce:47:6f:88:5d:9d:db:21:c4:cd:1e:a6:55:d5:
         44:2f:8d:88:62:ea:9d:a8:e5:0a:af:78:2c:3c:3e:b7:19:f2:
         a8:9d:64:02:69:83:43:97:98:ff:ce:fb:07:f8:12:23:01:b6:
         6e:bd:01:35:fa:42:b2:68:07:14:1e:85:6a:9c:43:b1:a5:68:
         3b:9b:06:b1:d9:a8:c9:42:c2:3a:64:52:75:26:0f:19:f2:53:
         00:0f:91:bb:57:47:ea:ba:ac:aa:bb:4f:df:dc:97:d4:17:f0:
         7c:3f:06:ed:a9:12:42:d1:7b:9d:28:14:6c:ce:27:83:90:aa:
         02:2c:05:c8:0f:86:59:68:e9:78:d5:16:97:38:7a:9f:f5:bf:
         92:95:a3:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 28 08:27:55 2023 by rpki-client on console-fra.rpki-client.org