Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/fc86456c-9fe9-3e46-9117-6ffaa0f4bc6d.roa
File:                     fc86456c-9fe9-3e46-9117-6ffaa0f4bc6d.roa (raw, json)
Hash identifier:          8MxFJXPFiRtiPkZPBUNDxd1sAzeFPF/DDKcbyMxyxFU=
Subject key identifier:   9D:2C:43:FD:6A:F8:EE:7D:BF:B6:EA:4B:96:16:55:14:77:91:C7:E2
Certificate issuer:       /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial:       010D0C9F4328583DD044031EE28DF20BDEC1BC00
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/fc86456c-9fe9-3e46-9117-6ffaa0f4bc6d.roa
Signing time:             Mon 07 Jun 2021 20:39:07 +0000
ROA not before:           Mon 07 Jun 2021 20:39:07 +0000
ROA not after:            Thu 08 Aug 2024 04:00:00 +0000
asID:                     64200
IP address blocks:        198.145.232.0/24 maxlen: 24
                          198.145.233.0/24 maxlen: 24
                          198.145.234.0/24 maxlen: 24
                          198.145.235.0/24 maxlen: 24
                          208.66.72.0/24 maxlen: 24
                          208.66.73.0/24 maxlen: 24
                          208.66.74.0/24 maxlen: 24
                          208.66.75.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:d0:44:03:1e:e2:8d:f2:0b:de:c1:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
        Validity
            Not Before: Jun  7 20:39:07 2021 GMT
            Not After : Aug  8 04:00:00 2024 GMT
        Subject: CN=ccd823da-6752-4bd1-9875-dc103c15069c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:54:d2:67:b5:f1:b7:75:cd:4e:bb:07:8a:79:
                    1b:70:8e:e1:a3:ce:a8:39:f5:e8:75:7c:0a:a6:99:
                    1c:55:77:25:01:90:32:b3:ec:b4:ff:f9:8d:af:31:
                    02:e7:c9:cf:e6:22:84:27:45:eb:0e:5e:3c:d7:4b:
                    46:59:33:78:07:5c:3a:fa:97:54:cf:d4:19:0d:44:
                    94:f7:2a:a7:2d:16:52:97:f3:78:f3:94:4c:f2:0a:
                    2a:be:7e:a6:7f:f9:77:35:75:d3:2d:54:47:54:01:
                    42:b3:f5:6c:b4:9a:96:54:1a:89:78:49:eb:7c:95:
                    0a:10:1a:ca:63:07:03:a0:5d:6a:82:22:d0:f7:6b:
                    76:89:70:a5:22:de:ac:e8:08:51:cf:56:cc:2c:3c:
                    8b:5a:0f:3e:89:0d:39:1d:f0:23:76:07:08:25:73:
                    68:44:76:00:26:fb:1b:94:b1:7a:11:0d:39:bf:6c:
                    8c:f9:e5:f9:0d:ec:b3:e2:2f:d6:e4:75:31:5c:fb:
                    c7:85:71:f0:8d:3d:56:b0:69:d8:77:6d:bd:29:49:
                    a8:d4:4b:85:7a:05:16:a1:0a:27:d9:97:9d:8c:bf:
                    85:f3:74:d6:46:54:cb:6f:41:dc:fb:9c:0c:0e:1e:
                    e9:0f:3e:c1:69:fe:da:07:98:8c:fa:5e:e7:d3:d8:
                    15:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:2C:43:FD:6A:F8:EE:7D:BF:B6:EA:4B:96:16:55:14:77:91:C7:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/fc86456c-9fe9-3e46-9117-6ffaa0f4bc6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl

            X509v3 Authority Key Identifier:
                keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.145.232.0/22
                  208.66.72.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:00:ee:72:5b:a6:23:8f:80:33:e8:9b:71:d1:7a:4c:d7:46:
         d2:2a:6b:c8:04:ef:ee:ff:9c:b8:00:85:c2:43:5a:5e:f2:13:
         b5:42:4d:08:91:79:85:11:f4:f4:90:4f:be:6e:bf:2c:0d:37:
         bf:a3:94:17:55:80:07:b6:48:d6:c5:06:52:0e:05:57:cc:69:
         55:eb:3e:f9:e6:50:06:b8:99:00:ce:33:59:d9:a4:da:d3:a2:
         0c:e2:ae:07:3f:48:c7:57:45:ae:c4:a5:7a:ab:bf:dc:36:61:
         7a:e0:b3:95:7d:bd:74:18:34:e1:fb:6c:18:69:d2:b7:10:aa:
         71:93:ce:ef:fb:14:c8:e0:2f:c4:45:15:21:35:6c:dd:4c:ae:
         4a:ef:c5:94:58:e4:85:99:d7:b2:cf:22:19:f1:94:28:04:81:
         5c:b2:3b:66:b0:5c:e3:4c:ad:c0:a5:d4:20:4b:72:38:7a:8a:
         93:c2:8e:04:e1:cb:77:f0:05:8c:dc:86:85:60:4d:c1:31:31:
         37:b0:fe:02:9c:25:78:55:8b:9c:e8:57:22:6e:e5:cf:e2:29:
         af:23:a0:41:c6:0f:4c:4a:39:c6:7d:6f:9d:99:6e:de:69:af:
         f8:be:d6:19:28:03:c6:a0:04:da:cb:2c:c0:c3:0d:c3:bb:9a:
         a6:67:93:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:36 2023 by rpki-client on console-fra.rpki-client.org