Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/b3b7e7fc-29ea-36e0-98e8-d075ba89acd1.roa
File:                     b3b7e7fc-29ea-36e0-98e8-d075ba89acd1.roa (raw, json)
Hash identifier:          N2fvHR9CFz2aAYs0lIBbhuSli4r7RwPohPt+V+IW4LU=
Subject key identifier:   0E:07:A7:F2:62:C9:C6:A6:4A:4F:D0:62:D9:CE:F6:44:38:CF:EA:7C
Certificate issuer:       /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial:       010D0C9F4328583A31FAC1F77CE4C74F4F509E80
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/b3b7e7fc-29ea-36e0-98e8-d075ba89acd1.roa
Signing time:             Mon 07 Jun 2021 04:00:00 +0000
ROA not before:           Mon 07 Jun 2021 04:00:00 +0000
ROA not after:            Mon 11 Sep 2023 04:00:00 +0000
asID:                     3356
IP address blocks:        198.145.128.0/19 maxlen: 19
                          198.145.160.0/20 maxlen: 20
                          198.145.224.0/20 maxlen: 20
                          208.66.72.0/21 maxlen: 21

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:31:fa:c1:f7:7c:e4:c7:4f:4f:50:9e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
        Validity
            Not Before: Jun  7 04:00:00 2021 GMT
            Not After : Sep 11 04:00:00 2023 GMT
        Subject: CN=a7ee53c2-671e-45f1-acca-9a14688df9d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:2a:cc:0e:3b:9b:cd:75:00:9c:7d:d1:c2:61:
                    d6:64:d6:11:3c:05:d7:27:17:fe:d3:3c:dd:84:c7:
                    24:ee:27:50:3f:e8:6f:af:47:f0:f0:d1:18:f7:24:
                    f0:c7:73:cf:0a:30:d1:69:fb:35:83:24:c0:4f:bb:
                    96:e2:df:18:2a:5f:94:22:59:ae:78:ad:2b:74:2f:
                    0d:cd:55:9d:18:ab:53:23:71:19:76:4a:8f:b5:d9:
                    ef:a2:bc:10:ed:f9:b1:6a:ac:93:f2:7a:71:ea:db:
                    8b:09:0a:75:f9:76:32:09:64:ce:7a:fe:c6:e0:64:
                    cb:42:26:33:60:4a:ba:06:f0:f2:6d:3a:24:0c:7b:
                    6e:ba:38:a4:ba:e8:8d:93:76:b4:ef:19:3b:ee:5c:
                    82:ed:dc:4e:51:a1:16:7c:4d:93:1e:36:84:10:75:
                    f9:b5:26:8d:32:51:62:86:b4:4d:03:8f:df:c3:09:
                    3d:86:42:dd:27:ba:89:bf:33:60:c5:a0:94:8f:4d:
                    fa:27:c0:a3:4d:ed:e5:0f:a4:ec:1a:4f:95:1b:99:
                    94:ce:50:9a:16:dc:2b:73:cc:17:92:18:64:20:43:
                    5a:66:f9:f3:86:d1:0e:bb:a7:b2:7c:2e:15:cd:7c:
                    1e:96:38:91:03:a6:de:eb:16:76:ee:56:59:36:28:
                    22:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:07:A7:F2:62:C9:C6:A6:4A:4F:D0:62:D9:CE:F6:44:38:CF:EA:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/b3b7e7fc-29ea-36e0-98e8-d075ba89acd1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl

            X509v3 Authority Key Identifier:
                keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.145.128.0-198.145.175.255
                  198.145.224.0/20
                  208.66.72.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:59:99:e2:56:d8:45:37:08:74:20:b8:63:56:a7:9d:01:d8:
         ee:44:85:90:d3:18:d3:53:e2:24:4f:cb:c5:cf:1d:64:19:62:
         77:61:38:86:a4:9c:38:dd:3b:10:d4:d0:17:fd:c4:7b:bf:b3:
         91:72:8a:70:6b:da:3d:1c:f5:82:5e:e7:e4:e5:73:ce:2d:51:
         43:39:ac:2d:7d:3a:b1:8a:05:80:dd:9c:b2:71:c8:57:20:d4:
         1d:cb:2c:59:ff:4f:24:a4:14:4f:f6:50:e3:4e:29:38:ba:0a:
         e6:a4:84:6f:1b:80:6f:e3:4b:97:e7:ba:a8:50:d2:b2:06:87:
         0e:50:c6:70:1d:3d:3e:13:19:7f:3d:63:4c:3d:ab:ee:81:48:
         a6:6a:bc:7c:e9:e8:f2:a4:3c:a1:de:67:0c:2f:bd:87:6f:db:
         61:a6:91:fc:ed:eb:65:cb:4a:04:95:11:7a:2a:7f:da:5c:13:
         c4:22:8c:08:a1:b1:8b:f2:da:11:dc:01:0f:d2:cd:06:ba:a1:
         06:ac:c2:48:8c:10:67:2b:ae:5f:98:2f:f8:cf:a0:16:13:e9:
         7b:6e:af:d8:c1:28:09:d2:59:bd:71:74:64:46:95:18:73:92:
         b3:cc:bf:3c:21:7e:81:0b:12:49:7f:1a:28:35:50:bd:0c:bc:
         b0:7e:0a:b0
-----BEGIN CERTIFICATE-----
MIIGVzCCBT+gAwIBAgIUAQ0Mn0MoWDox+sH3fOTHT09QnoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmQ5MWNjYzEtNDIxNy00Y2RlLTk2ODctMjYwYTVmMDAz
NjFiMB4XDTIxMDYwNzA0MDAwMFoXDTIzMDkxMTA0MDAwMFowLzEtMCsGA1UEAxMk
YTdlZTUzYzItNjcxZS00NWYxLWFjY2EtOWExNDY4OGRmOWQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8irMDjubzXUAnH3RwmHWZNYRPAXXJxf+0zzd
hMck7idQP+hvr0fw8NEY9yTwx3PPCjDRafs1gyTAT7uW4t8YKl+UIlmueK0rdC8N
zVWdGKtTI3EZdkqPtdnvorwQ7fmxaqyT8npx6tuLCQp1+XYyCWTOev7G4GTLQiYz
YEq6BvDybTokDHtuujikuuiNk3a07xk77lyC7dxOUaEWfE2THjaEEHX5tSaNMlFi
hrRNA4/fwwk9hkLdJ7qJvzNgxaCUj036J8CjTe3lD6TsGk+VG5mUzlCaFtwrc8wX
khhkIENaZvnzhtEOu6eyfC4VzXweljiRA6be6xZ27lZZNigiKwIDAQABo4IDaTCC
A2UwHQYDVR0OBBYEFA4Hp/JiycamSk/QYtnO9kQ4z+p8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkx
Y2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBhNWYwMDM2MWIvYjNiN2U3ZmMtMjllYS0z
NmUwLTk4ZTgtZDA3NWJhODlhY2QxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmQ5MWNjYzEtNDIxNy00Y2RlLTk2
ODctMjYwYTVmMDAzNjFiLzZkOTFjY2MxLTQyMTctNGNkZS05Njg3LTI2MGE1ZjAw
MzYxYi5jcmwwHwYDVR0jBBgwFoAUdmxvfCjsNiaUUb/Sen6ZVikimvwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkxY2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBh
NWYwMDM2MWIuY2VyMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBAfGkYAD
BATGkaADBATGkeADBAPQQkgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG
CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j
cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAV1mZ4lbYRTcIdCC4Y1annQHY7kSF
kNMY01PiJE/Lxc8dZBlid2E4hqScON07ENTQF/3Ee7+zkXKKcGvaPRz1gl7n5OVz
zi1RQzmsLX06sYoFgN2csnHIVyDUHcssWf9PJKQUT/ZQ404pOLoK5qSEbxuAb+NL
l+e6qFDSsgaHDlDGcB09PhMZfz1jTD2r7oFIpmq8fOno8qQ8od5nDC+9h2/bYaaR
/O3rZctKBJUReip/2lwTxCKMCKGxi/LaEdwBD9LNBrqhBqzCSIwQZyuuX5gv+M+g
FhPpe26v2MEoCdJZvXF0ZEaVGHOSs8y/PCF+gQsSSX8aKDVQvQy8sH4KsA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:36 2023 by rpki-client on console-fra.rpki-client.org