Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/1ba7aee9-cfb6-3fb0-8be7-2ef7f62ca040.roa
File:                     1ba7aee9-cfb6-3fb0-8be7-2ef7f62ca040.roa (raw, json)
Hash identifier:          gZ7imWBR3376nMca4XTJhgXMiPF/M6vvhJemFyXFZ4o=
Subject key identifier:   4E:DB:18:1F:28:46:C0:0B:22:51:87:55:A2:F1:E7:98:1C:A5:E2:63
Certificate issuer:       /CN=847c7608-e8de-46e4-803f-28e1912f24ed
Certificate serial:       010D0C9F4328583EEFF4196254C9E870BB18CF70
Authority key identifier: 0B:9B:C3:8A:0E:84:3B:6E:76:E3:2B:2A:7D:CD:08:3B:2F:EF:E5:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/1ba7aee9-cfb6-3fb0-8be7-2ef7f62ca040.roa
Signing time:             Wed 17 Aug 2022 18:41:16 +0000
ROA not before:           Wed 17 Aug 2022 18:41:16 +0000
ROA not after:            Tue 19 Nov 2024 05:00:00 +0000
asID:                     33139
IP address blocks:        66.49.252.0/23 maxlen: 23
                          66.49.254.0/24 maxlen: 24
                          67.55.2.0/23 maxlen: 23
                          69.57.208.0/21 maxlen: 21
                          69.57.216.0/22 maxlen: 22
                          69.57.220.0/23 maxlen: 23
                          69.57.223.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:ef:f4:19:62:54:c9:e8:70:bb:18:cf:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=847c7608-e8de-46e4-803f-28e1912f24ed
        Validity
            Not Before: Aug 17 18:41:16 2022 GMT
            Not After : Nov 19 05:00:00 2024 GMT
        Subject: CN=971ba601-c227-4ce0-ad95-5458452d89e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:63:4a:30:48:1b:8e:66:ae:5f:7c:fe:4f:63:
                    d1:21:89:b8:93:65:e1:cf:4c:f5:04:5d:ad:95:5f:
                    af:f8:29:ae:78:ad:ea:04:86:24:b4:15:cb:8c:7c:
                    89:03:5b:f2:28:97:aa:7e:42:b0:ce:dd:9a:3e:8a:
                    10:d8:42:e1:85:4c:3c:07:db:8a:33:a6:76:9f:b9:
                    24:52:dd:38:ce:6a:bc:87:e2:00:35:14:39:ed:87:
                    90:d9:e0:15:42:c8:9e:59:7f:9f:87:60:50:6c:60:
                    72:c3:4f:d5:30:3a:4a:59:e5:59:6b:c8:61:e9:43:
                    97:db:0b:6a:8f:d3:30:d4:4b:11:72:10:b5:07:a3:
                    19:fa:17:a5:31:ad:55:20:b8:ee:93:b3:2d:f5:ed:
                    61:6d:83:39:9a:87:40:43:19:1a:8a:d3:d8:ec:20:
                    62:c4:93:15:8f:87:17:ff:f7:b4:be:90:3a:2e:60:
                    1a:d3:8e:23:cf:e2:69:47:4f:57:1b:94:8f:4a:0b:
                    a7:92:6f:74:89:d3:41:9b:19:db:d6:0b:f3:25:b6:
                    81:fa:fc:26:8f:05:60:37:cf:9b:db:e4:a2:2a:bb:
                    30:51:a4:2c:bb:47:f2:c7:62:4f:2e:76:c7:bf:2a:
                    6a:61:92:06:75:61:68:49:a4:53:79:11:81:d1:74:
                    bd:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:DB:18:1F:28:46:C0:0B:22:51:87:55:A2:F1:E7:98:1C:A5:E2:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/1ba7aee9-cfb6-3fb0-8be7-2ef7f62ca040.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed/847c7608-e8de-46e4-803f-28e1912f24ed.crl

            X509v3 Authority Key Identifier:
                keyid:0B:9B:C3:8A:0E:84:3B:6E:76:E3:2B:2A:7D:CD:08:3B:2F:EF:E5:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/847c7608-e8de-46e4-803f-28e1912f24ed.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.49.252.0-66.49.254.255
                  67.55.2.0/23
                  69.57.208.0-69.57.221.255
                  69.57.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:42:62:f2:bc:ca:5b:4f:86:62:27:1e:71:ed:c7:95:ed:57:
         47:82:da:35:5f:50:de:6c:ea:61:22:a6:f9:38:2b:9b:08:ab:
         6d:4e:c8:f3:d4:8e:87:b3:46:1b:d9:cf:f3:3b:c6:cc:83:85:
         9e:36:07:11:d3:59:a7:14:5b:20:bb:39:4c:e4:6d:59:21:41:
         45:a7:8a:ca:b2:6b:cc:5d:08:4c:60:9c:e5:6c:8d:1c:c7:19:
         3b:66:30:a0:4f:8d:c5:56:b1:14:69:c5:83:dc:9f:e8:76:d4:
         25:95:dd:c7:bf:3c:56:11:c6:a8:56:16:b4:c3:35:af:6a:83:
         03:26:b4:bb:ff:96:2e:8b:ea:7e:28:55:ae:d8:9c:3b:51:3f:
         67:49:74:e9:b0:cb:9c:7f:11:f7:c7:4b:d5:37:76:5e:1a:45:
         1f:62:44:eb:5c:cf:23:f1:7f:8e:81:94:76:ba:55:ab:8b:d8:
         2b:61:18:c2:48:e9:bf:72:88:7f:49:5d:2d:c8:1e:a2:84:1f:
         61:f2:5c:a3:70:b3:ab:d3:65:22:b1:ed:ac:34:7d:39:49:81:
         4d:22:6f:16:03:39:40:2b:d1:e3:a1:8d:2e:16:39:95:88:4a:
         39:e3:0e:0d:4f:65:e1:84:03:9e:60:59:b0:b3:1a:84:b9:e1:
         25:2c:ac:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:38 2023 by rpki-client on console-ams.rpki-client.org