Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/d642e49f-4092-3b29-8e9e-dd83173eca5b.roa
File:                     d642e49f-4092-3b29-8e9e-dd83173eca5b.roa (raw, json)
Hash identifier:          m6a1uJj5urXmmo+YxMlA8ipHfwRotWvV89J3TgLOhg8=
Subject key identifier:   56:CE:5F:4E:DE:FB:1A:A6:27:A8:05:F2:2F:2C:80:36:0F:4D:8F:B4
Certificate issuer:       /CN=6876d5a8-5dd6-440a-97e2-5e20b9e00f5c
Certificate serial:       010D0C9F4328583D50F40F68CE33786810D3DC0C
Authority key identifier: A1:27:6E:C4:CF:90:E9:A7:8A:38:DD:8C:B9:B8:D1:1C:F0:17:9A:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/d642e49f-4092-3b29-8e9e-dd83173eca5b.roa
Signing time:             Fri 11 Jun 2021 04:00:00 +0000
ROA not before:           Fri 11 Jun 2021 04:00:00 +0000
ROA not after:            Sun 23 Jun 2024 04:00:00 +0000
asID:                     3223
IP address blocks:        66.63.168.0/23 maxlen: 23
                          66.63.188.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Mon 16 May 2022 23:08:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:50:f4:0f:68:ce:33:78:68:10:d3:dc:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6876d5a8-5dd6-440a-97e2-5e20b9e00f5c
        Validity
            Not Before: Jun 11 04:00:00 2021 GMT
            Not After : Jun 23 04:00:00 2024 GMT
        Subject: CN=d2ebb8aa-2c5c-44e3-98f8-1b1d97cffd6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:17:14:e0:ab:d5:31:13:82:d9:14:b5:16:55:
                    8c:1c:e6:32:e2:8e:ed:de:b6:04:69:7a:37:fe:02:
                    3d:50:b5:3e:cc:41:7d:26:7c:da:92:c2:3c:79:e4:
                    31:1a:10:fb:59:8e:81:aa:12:05:0a:1d:a3:3b:84:
                    65:fc:7a:07:4d:aa:cf:cf:6a:70:94:3b:1c:62:b6:
                    94:28:15:80:49:3b:1c:68:40:39:9f:93:84:de:2a:
                    5b:e9:13:c3:23:9c:11:11:fc:a8:0f:64:f7:6d:fb:
                    65:92:6e:22:ab:71:f7:1f:ae:1c:36:c8:a9:df:bb:
                    a9:da:69:f5:68:0d:f8:6b:34:41:1d:79:9a:a5:95:
                    88:7b:5d:79:ea:da:ed:0d:63:52:ef:ab:4f:2f:87:
                    87:55:19:71:19:f3:2a:6c:b0:94:cc:3b:b4:9e:88:
                    13:60:fd:51:03:6e:e5:50:89:0b:92:03:64:d5:16:
                    21:b3:fe:44:65:c8:b1:ae:48:cf:d2:9c:77:65:3b:
                    53:15:17:83:fa:e2:59:81:a6:c6:99:c0:1d:fc:a1:
                    f9:5a:71:d5:a2:a4:da:08:22:23:28:a6:35:55:a7:
                    ec:de:0d:58:5e:28:e0:d1:2d:74:8c:74:5f:85:72:
                    c7:11:dc:80:42:e6:b4:b9:e5:e4:1f:fd:03:d2:e9:
                    7c:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:CE:5F:4E:DE:FB:1A:A6:27:A8:05:F2:2F:2C:80:36:0F:4D:8F:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/d642e49f-4092-3b29-8e9e-dd83173eca5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.crl

            X509v3 Authority Key Identifier:
                keyid:A1:27:6E:C4:CF:90:E9:A7:8A:38:DD:8C:B9:B8:D1:1C:F0:17:9A:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6876d5a8-5dd6-440a-97e2-5e20b9e00f5c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.63.168.0/23
                  66.63.188.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:8e:2f:90:28:d8:f3:66:e2:53:e1:6b:27:ef:1b:ef:11:b5:
         35:8a:79:31:cc:e4:81:77:c0:47:49:f3:7d:55:af:6c:42:4c:
         35:60:fb:2c:6d:9d:7d:3e:5a:46:ab:b9:eb:9d:9e:74:30:9b:
         89:f5:02:34:03:fe:24:ac:47:eb:f7:bd:d0:ee:84:66:d9:63:
         26:41:09:ce:ac:88:f4:50:bf:5f:e1:46:e2:19:74:c5:a5:fd:
         93:2c:7f:4d:03:6d:cd:7f:d4:49:bf:80:85:1f:93:b5:0a:a3:
         93:48:d3:43:0f:2a:55:a0:88:74:a7:77:d2:cb:13:95:d4:43:
         ad:04:40:a3:3a:a6:4e:b4:c5:e6:fc:9d:a6:d9:0a:0e:5b:0a:
         fa:ee:ec:cb:7a:e7:26:cd:62:30:f7:66:3d:2e:ac:0d:38:9b:
         42:17:31:9c:f7:69:10:98:8f:a8:26:50:cd:9f:3e:0a:12:ad:
         14:92:c6:2c:86:65:05:46:d0:34:c0:08:6d:66:7f:8a:bb:1a:
         08:da:20:ca:aa:51:a6:62:7e:f8:35:9a:39:0b:61:12:4b:c4:
         36:c1:2b:f7:8c:8d:8f:90:02:3b:f9:a9:e1:1f:dd:35:3e:84:
         78:fe:11:89:08:ac:55:55:22:5a:16:42:8c:38:95:8f:13:d2:
         b1:89:bb:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:46:25 2024 by rpki-client on console-ams.rpki-client.org