Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/40d13056-ef98-3540-86c1-1467b7aeef4e.roa
File:                     40d13056-ef98-3540-86c1-1467b7aeef4e.roa (raw, json)
Hash identifier:          3lUb02P0DTyjBzcdS7zgm9A8D89cTCKdztG5kDxheIk=
Subject key identifier:   D0:86:AC:2A:61:18:92:A2:35:3E:D8:F2:B0:B1:AE:EF:41:ED:D0:93
Certificate issuer:       /CN=5fab6378-e15d-4471-b01f-be15fc5bfa04
Certificate serial:       010D0C9F432858436039C225B928C7A371664480
Authority key identifier: 61:40:43:BF:E2:50:B3:47:64:FC:D1:73:0F:62:98:03:50:32:18:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/40d13056-ef98-3540-86c1-1467b7aeef4e.roa
Signing time:             Thu 28 Sep 2023 19:26:11 +0000
ROA not before:           Thu 28 Sep 2023 19:26:11 +0000
ROA not after:            Wed 27 Dec 2023 20:26:11 +0000
asID:                     3561
IP address blocks:        207.170.156.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:60:39:c2:25:b9:28:c7:a3:71:66:44:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fab6378-e15d-4471-b01f-be15fc5bfa04
        Validity
            Not Before: Sep 28 19:26:11 2023 GMT
            Not After : Dec 27 20:26:11 2023 GMT
        Subject: CN=c8eeddcb-0bab-47e7-b0f5-8a1e8db3ea68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:36:5c:5a:21:55:f5:35:33:27:94:6b:6d:a6:
                    42:0b:b8:1d:5f:b6:78:f8:54:a8:52:a8:3a:3d:87:
                    d2:37:af:af:c0:f4:9c:c5:99:60:a7:2e:ac:65:ae:
                    f1:64:72:76:cd:6f:52:8b:d6:ff:69:a0:60:a4:99:
                    67:c4:3f:4b:f0:67:9e:cb:2d:ea:09:78:50:dd:35:
                    a2:8f:a4:ee:e9:36:41:01:46:61:cd:68:db:5e:0d:
                    c1:41:66:6f:ff:26:4a:ea:e7:e2:c4:ae:3c:f4:9a:
                    22:9a:1e:d0:e6:2a:d0:39:0d:92:08:a9:10:ad:fc:
                    9d:50:2f:93:c4:d4:63:be:d8:8b:ec:fe:32:fd:93:
                    6e:59:46:cf:d0:60:e2:6a:f8:5a:00:f6:60:3f:0d:
                    d1:54:56:7b:0d:23:c5:68:f1:cc:60:40:78:98:0b:
                    7e:c2:06:74:bf:f5:4b:d9:21:12:82:10:1a:65:e8:
                    39:ba:8d:7b:d2:60:ab:e2:62:1a:0f:86:1e:3c:be:
                    e9:4c:d0:af:62:e0:35:6b:51:ac:70:cf:98:43:01:
                    87:a2:56:13:c4:ae:51:e2:79:66:b7:5a:c3:dc:55:
                    7f:fe:b2:ce:1a:42:1d:f6:c3:bc:c9:1a:24:0a:d6:
                    62:fc:d9:f0:e4:19:8c:ed:0d:3f:6d:4e:e9:b6:1d:
                    f5:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:86:AC:2A:61:18:92:A2:35:3E:D8:F2:B0:B1:AE:EF:41:ED:D0:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/40d13056-ef98-3540-86c1-1467b7aeef4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/5fab6378-e15d-4471-b01f-be15fc5bfa04.crl

            X509v3 Authority Key Identifier:
                keyid:61:40:43:BF:E2:50:B3:47:64:FC:D1:73:0F:62:98:03:50:32:18:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.170.156.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:24:c8:59:f1:9b:56:df:0d:b4:19:29:46:53:1a:05:4e:fe:
         1d:dd:42:89:74:9b:22:f8:af:4c:e2:fb:22:0b:98:da:d6:65:
         33:54:a0:a1:00:19:d2:00:22:ee:d2:d4:45:c0:d2:08:bb:90:
         91:89:a7:07:a1:72:f2:88:3f:88:77:c0:e1:4c:b0:5f:fa:64:
         83:c4:ee:16:eb:ab:9c:9d:90:99:d1:1a:6e:6c:7b:aa:52:f2:
         b7:13:ae:c2:1b:f8:1b:3b:d1:01:02:2f:9e:28:41:39:d5:94:
         58:a2:e9:10:0a:f5:82:dd:43:84:1f:71:48:9b:2b:be:17:b6:
         a3:a6:60:a3:6b:c5:99:68:db:89:81:26:df:94:cd:08:b0:14:
         d0:50:82:1f:17:f4:36:98:92:b5:69:11:a5:db:09:d8:bf:5c:
         1e:f7:c6:85:e1:30:1c:bc:02:b0:15:e1:f1:09:bd:7f:03:f1:
         44:aa:d8:c4:c2:a4:64:13:57:cc:60:9e:be:f8:11:d5:1c:40:
         a4:de:3b:d0:34:b4:28:dc:05:30:a7:91:88:ae:46:32:79:f6:
         8d:80:2e:fc:13:de:5c:17:22:68:94:77:5f:f6:cb:43:8f:e4:
         4f:3b:94:15:c0:e0:32:82:8a:84:32:95:11:7b:29:cc:24:be:
         16:c2:54:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 11 18:50:24 2023 by rpki-client on console-fra.rpki-client.org