Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/415b363a-8f59-46ca-baf4-e6cb4b8fdf20/8e2ccac0-0e93-358f-b614-8b16e9331725.roa
File:                     8e2ccac0-0e93-358f-b614-8b16e9331725.roa (raw, json)
Hash identifier:          ggDD+sezanysOopkXahTbNc7zgnFQKhMvkWqhsGbJHo=
Subject key identifier:   6D:F1:1D:3E:AC:C5:60:9E:21:6F:45:21:E8:CB:CB:9A:35:9A:3D:73
Certificate issuer:       /CN=415b363a-8f59-46ca-baf4-e6cb4b8fdf20
Certificate serial:       010D0C9F4328583B3F97517326CB991D7BEC5400
Authority key identifier: 39:D9:D1:A1:3D:AC:AE:DF:23:16:FE:9B:20:DD:D0:8A:E1:19:11:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/415b363a-8f59-46ca-baf4-e6cb4b8fdf20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/415b363a-8f59-46ca-baf4-e6cb4b8fdf20/8e2ccac0-0e93-358f-b614-8b16e9331725.roa
Signing time:             Fri 30 Apr 2021 04:00:00 +0000
ROA not before:           Fri 30 Apr 2021 04:00:00 +0000
ROA not after:            Mon 17 Dec 2029 05:00:00 +0000
asID:                     7018
IP address blocks:        23.142.16.0/24 maxlen: 24
                          158.51.100.0/24 maxlen: 24
                          158.51.101.0/24 maxlen: 24
                          158.51.102.0/24 maxlen: 24
                          158.51.103.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:3f:97:51:73:26:cb:99:1d:7b:ec:54:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=415b363a-8f59-46ca-baf4-e6cb4b8fdf20
        Validity
            Not Before: Apr 30 04:00:00 2021 GMT
            Not After : Dec 17 05:00:00 2029 GMT
        Subject: CN=8c57ed04-0821-45b7-a837-4355d8523f78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:02:bf:b3:fa:1f:c2:d8:6e:d0:26:87:48:d9:
                    cb:c7:4a:16:ca:cd:aa:a2:60:92:e5:45:11:25:e2:
                    8d:07:76:c4:95:ed:b2:23:9d:3e:8f:98:1c:63:ba:
                    c8:9c:4d:77:80:b9:99:46:26:37:61:6c:5e:18:99:
                    bb:60:1b:a8:d2:f8:4f:ab:6a:1b:f4:2d:e1:10:a3:
                    05:51:0a:32:2c:60:bc:2e:43:4b:59:b8:0d:32:3c:
                    c5:9c:d4:de:db:92:8a:b3:7e:70:ab:53:38:af:5a:
                    36:d0:59:e7:9d:3a:74:6e:71:c9:26:99:0e:15:bc:
                    55:e6:06:ba:57:fd:f1:5f:ad:95:4a:34:17:e9:1b:
                    bc:72:ee:7f:ce:fd:ae:c6:cf:1f:31:bf:53:31:b8:
                    c3:eb:4f:01:ea:b1:62:dc:84:bf:c7:60:77:88:b5:
                    7a:4a:33:b5:b6:79:7f:14:e6:6d:a3:71:1f:93:95:
                    9d:7a:fc:d9:f7:76:82:80:90:fc:53:ab:98:c4:0e:
                    3d:07:21:bd:75:57:bd:19:23:09:8f:3c:2f:42:1e:
                    49:be:a1:0e:ab:7c:44:99:20:17:7e:0f:4b:57:ce:
                    8f:27:b1:1f:c6:17:b7:ed:c8:69:2a:ac:3d:51:b9:
                    76:65:74:16:48:70:b7:02:3d:f2:12:21:d3:81:4e:
                    b6:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:F1:1D:3E:AC:C5:60:9E:21:6F:45:21:E8:CB:CB:9A:35:9A:3D:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/415b363a-8f59-46ca-baf4-e6cb4b8fdf20/8e2ccac0-0e93-358f-b614-8b16e9331725.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/415b363a-8f59-46ca-baf4-e6cb4b8fdf20/415b363a-8f59-46ca-baf4-e6cb4b8fdf20.crl

            X509v3 Authority Key Identifier:
                keyid:39:D9:D1:A1:3D:AC:AE:DF:23:16:FE:9B:20:DD:D0:8A:E1:19:11:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/415b363a-8f59-46ca-baf4-e6cb4b8fdf20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.142.16.0/24
                  158.51.100.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:15:1f:d8:c1:c6:63:f2:eb:af:c7:f3:9c:2e:c8:c4:d4:20:
         d7:4e:c2:02:d2:ad:42:df:cd:0a:17:fd:67:b1:b2:1c:04:bb:
         d0:24:52:be:2c:72:62:a8:e9:6d:34:7f:f0:9d:46:89:d9:11:
         00:74:fa:b0:df:f6:67:57:02:c4:19:76:83:a6:f2:53:4d:d5:
         32:a6:11:b0:f4:e9:fa:e3:b2:21:c8:26:6c:41:6a:a5:35:54:
         a4:8b:a2:1a:89:57:fd:a1:dc:c9:41:71:5a:23:91:14:15:07:
         b7:f1:a1:c4:1e:d5:1b:31:69:b4:89:df:1e:65:96:14:96:ff:
         db:ae:2e:01:5b:e7:0e:9d:ce:f5:51:30:4b:de:8b:c3:52:4f:
         eb:0f:04:0a:54:a1:da:f2:67:e1:a5:3e:ba:e8:e6:40:8f:00:
         0c:45:15:2b:f1:d0:e2:08:39:00:16:ff:a8:c3:9a:19:a3:93:
         60:23:ea:bf:14:22:89:4a:9d:62:4e:15:e8:9d:ee:16:05:1d:
         fc:be:bf:3a:7c:37:50:57:14:d6:ec:4f:a1:6f:a8:d0:ab:08:
         e1:2f:68:70:1f:47:68:77:a9:ac:2d:41:3b:dc:44:89:a6:7d:
         72:b8:ee:22:37:5e:8c:47:5b:6e:3a:1a:37:e7:70:ff:b0:c6:
         f4:27:4d:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:27 2023 by rpki-client on console-ams.rpki-client.org