Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7afae497-a3f6-4f52-abeb-632cca8db94a/19164e45-264a-389f-8455-33f3a7a9140d.roa
File:                     19164e45-264a-389f-8455-33f3a7a9140d.roa (raw, json)
Hash identifier:          VXdn622KfaWfdMghNUA3ZiqAQjc95Yvd3888VsOkyVA=
Subject key identifier:   6A:32:8A:D3:E9:72:5B:74:93:6A:DC:B2:9D:EB:05:1F:19:38:21:06
Certificate issuer:       /CN=7afae497-a3f6-4f52-abeb-632cca8db94a
Certificate serial:       010D0C9F4328583B5006617B3B1C9EB12FD6ACC0
Authority key identifier: 4C:82:BD:2B:3F:94:20:83:FF:E4:68:4E:63:B7:64:55:C2:CB:79:A4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7afae497-a3f6-4f52-abeb-632cca8db94a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7afae497-a3f6-4f52-abeb-632cca8db94a/19164e45-264a-389f-8455-33f3a7a9140d.roa
Signing time:             Wed 07 Jul 2021 04:00:00 +0000
ROA not before:           Wed 07 Jul 2021 04:00:00 +0000
ROA not after:            Sat 23 Dec 2028 05:00:00 +0000
asID:                     7018
IP address blocks:        23.177.176.0/24 maxlen: 24
                          45.41.224.0/24 maxlen: 24
                          45.41.225.0/24 maxlen: 24
                          45.41.226.0/24 maxlen: 24
                          45.41.227.0/24 maxlen: 24
                          2606:40c0::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:50:06:61:7b:3b:1c:9e:b1:2f:d6:ac:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7afae497-a3f6-4f52-abeb-632cca8db94a
        Validity
            Not Before: Jul  7 04:00:00 2021 GMT
            Not After : Dec 23 05:00:00 2028 GMT
        Subject: CN=a42bea2f-7c0d-4486-ac07-e2da7354a71b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:8d:66:18:47:61:c0:55:c3:8b:47:28:eb:93:
                    08:e6:2e:1d:9a:8f:7d:80:5b:95:af:b5:a1:3b:b5:
                    65:f1:f6:f9:7e:94:ae:c6:af:2b:8a:fd:ea:71:80:
                    65:a6:38:7a:0d:40:2e:1a:e9:02:df:56:27:d3:f5:
                    78:7f:6f:e0:92:9a:e2:2a:e7:6c:63:c5:a9:8d:4c:
                    9f:3c:f4:86:e2:df:5d:2a:f9:c6:b9:d8:87:9e:97:
                    cc:52:44:d1:a0:38:5b:14:e4:3a:8e:a9:7f:1f:6a:
                    35:50:30:3c:0a:d7:eb:2b:4c:d7:37:f4:16:c5:74:
                    8b:a2:67:3e:d4:87:af:bd:5d:79:b1:ab:1e:f5:ee:
                    05:fa:e7:f2:b3:5d:d6:7d:70:fd:70:f3:5b:c9:b0:
                    27:91:f5:90:ec:fc:0f:50:48:de:3f:28:cf:d9:d9:
                    1f:ba:f6:9b:32:47:ac:f6:df:57:f8:ff:b0:03:cc:
                    3d:62:2b:8b:fe:00:14:6a:e7:e6:58:90:a3:f9:64:
                    f5:b1:58:6a:64:dc:7f:bb:25:e0:20:15:b4:ba:81:
                    ef:30:6b:b6:71:07:0c:24:25:16:97:ab:c3:d5:7a:
                    a1:05:30:12:6d:d7:6e:9f:e2:e7:84:1a:1d:00:bf:
                    21:29:be:e2:99:c4:ea:81:d3:84:59:58:db:51:41:
                    ca:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:32:8A:D3:E9:72:5B:74:93:6A:DC:B2:9D:EB:05:1F:19:38:21:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7afae497-a3f6-4f52-abeb-632cca8db94a/19164e45-264a-389f-8455-33f3a7a9140d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7afae497-a3f6-4f52-abeb-632cca8db94a/7afae497-a3f6-4f52-abeb-632cca8db94a.crl

            X509v3 Authority Key Identifier:
                keyid:4C:82:BD:2B:3F:94:20:83:FF:E4:68:4E:63:B7:64:55:C2:CB:79:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7afae497-a3f6-4f52-abeb-632cca8db94a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.177.176.0/24
                  45.41.224.0/22
                IPv6:
                  2606:40c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:68:c8:cd:ac:c9:ed:44:97:2b:ab:43:4f:73:61:d6:03:b3:
         82:56:0c:ad:b5:83:ef:22:4c:c4:7d:3b:ef:81:88:7b:e1:ea:
         6c:0d:ed:dd:cb:28:6d:c8:de:ef:bb:be:93:fb:78:86:1b:e3:
         fb:8d:ba:fd:c0:a8:e0:8f:93:0a:1d:a6:7e:d0:83:8b:c3:c7:
         de:52:90:01:91:e6:f6:e4:80:c8:c6:72:e9:b4:02:e7:30:23:
         83:56:5e:4f:49:00:2c:98:88:29:fc:64:ee:6f:d3:de:65:2e:
         9d:db:55:b0:a9:17:20:4f:dc:d8:2c:11:8a:23:d2:e0:01:a5:
         a7:ba:d5:3f:8f:e3:54:bf:e4:0a:8c:58:a0:10:ee:98:3a:4e:
         1b:59:a2:02:01:0c:89:15:29:69:67:60:05:ea:a9:cc:41:c2:
         ba:21:6e:b3:90:02:6a:6b:9b:bc:bc:7b:e3:7f:be:5b:31:bc:
         8c:b9:11:03:28:d3:d3:3c:33:9a:2b:f0:50:b3:a3:93:d4:49:
         f9:5a:02:7b:59:57:23:31:f0:e4:05:0d:d4:00:30:14:d9:cb:
         13:34:f5:6d:1e:a0:4c:5a:61:f7:b0:ea:7c:d7:12:23:3d:ff:
         a3:57:14:ad:99:5e:6d:94:4e:5a:66:60:31:fc:77:a9:cb:4e:
         19:60:f3:d0
-----BEGIN CERTIFICATE-----
MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWDtQBmF7OxyesS/WrMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2FmYWU0OTctYTNmNi00ZjUyLWFiZWItNjMyY2NhOGRi
OTRhMB4XDTIxMDcwNzA0MDAwMFoXDTI4MTIyMzA1MDAwMFowLzEtMCsGA1UEAxMk
YTQyYmVhMmYtN2MwZC00NDg2LWFjMDctZTJkYTczNTRhNzFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwI1mGEdhwFXDi0co65MI5i4dmo99gFuVr7Wh
O7Vl8fb5fpSuxq8riv3qcYBlpjh6DUAuGukC31Yn0/V4f2/gkpriKudsY8WpjUyf
PPSG4t9dKvnGudiHnpfMUkTRoDhbFOQ6jql/H2o1UDA8CtfrK0zXN/QWxXSLomc+
1IevvV15sase9e4F+ufys13WfXD9cPNbybAnkfWQ7PwPUEjePyjP2dkfuvabMkes
9t9X+P+wA8w9YiuL/gAUaufmWJCj+WT1sVhqZNx/uyXgIBW0uoHvMGu2cQcMJCUW
l6vD1XqhBTASbddun+LnhBodAL8hKb7imcTqgdOEWVjbUUHKZQIDAQABo4IDajCC
A2YwHQYDVR0OBBYEFGoyitPpclt0k2rcsp3rBR8ZOCEGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83YWZh
ZTQ5Ny1hM2Y2LTRmNTItYWJlYi02MzJjY2E4ZGI5NGEvMTkxNjRlNDUtMjY0YS0z
ODlmLTg0NTUtMzNmM2E3YTkxNDBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvN2FmYWU0OTctYTNmNi00ZjUyLWFi
ZWItNjMyY2NhOGRiOTRhLzdhZmFlNDk3LWEzZjYtNGY1Mi1hYmViLTYzMmNjYThk
Yjk0YS5jcmwwHwYDVR0jBBgwFoAUTIK9Kz+UIIP/5GhOY7dkVcLLeaQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83YWZhZTQ5Ny1hM2Y2LTRmNTItYWJlYi02MzJj
Y2E4ZGI5NGEuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAF7GwAwQC
LSngMA0EAgACMAcDBQAmBkDAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4
BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv
Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHdoyM2sye1ElyurQ09zYdYDs4JW
DK21g+8iTMR9O++BiHvh6mwN7d3LKG3I3u+7vpP7eIYb4/uNuv3AqOCPkwodpn7Q
g4vDx95SkAGR5vbkgMjGcum0AucwI4NWXk9JACyYiCn8ZO5v095lLp3bVbCpFyBP
3NgsEYoj0uABpae61T+P41S/5AqMWKAQ7pg6ThtZogIBDIkVKWlnYAXqqcxBwroh
brOQAmprm7y8e+N/vlsxvIy5EQMo09M8M5or8FCzo5PUSflaAntZVyMx8OQFDdQA
MBTZyxM09W0eoExaYfew6nzXEiM9/6NXFK2ZXm2UTlpmYDH8d6nLThlg89A=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:37 2023 by rpki-client on console-ams.rpki-client.org