Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b52fb4bb-bc3a-38e4-8c13-995ffb48d1d7.roa
File:                     b52fb4bb-bc3a-38e4-8c13-995ffb48d1d7.roa (raw, json)
Hash identifier:          V8yiZgHo8eb2ZmEJIIar3LOYHs6J+NfYq2WMrFeVPJY=
Subject key identifier:   ED:DB:CF:25:3F:2A:FA:DF:A1:B1:DC:06:2E:63:73:7A:A9:E4:03:06
Certificate issuer:       /CN=b1898100-f40c-4002-b68a-8a97b548e69d
Certificate serial:       010D0C9F4328584338F8887C5B13DC3B6E472AE0
Authority key identifier: 89:4C:F8:BD:0D:34:34:87:18:70:33:F9:00:70:4A:CB:0F:78:52:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b52fb4bb-bc3a-38e4-8c13-995ffb48d1d7.roa
Signing time:             Thu 14 Sep 2023 17:58:14 +0000
ROA not before:           Thu 14 Sep 2023 17:58:14 +0000
ROA not after:            Wed 13 Dec 2023 18:58:14 +0000
asID:                     31867
IP address blocks:        74.113.97.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:38:f8:88:7c:5b:13:dc:3b:6e:47:2a:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1898100-f40c-4002-b68a-8a97b548e69d
        Validity
            Not Before: Sep 14 17:58:14 2023 GMT
            Not After : Dec 13 18:58:14 2023 GMT
        Subject: CN=bffd24db-9561-4e89-a1aa-31372330fb8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:d9:00:60:cf:e6:01:41:de:4a:04:5c:c1:91:
                    a0:ae:e5:e0:40:93:f1:b2:5f:96:22:91:61:56:a4:
                    c2:80:18:1a:65:32:62:4f:33:70:5d:76:79:64:ee:
                    e5:db:92:c3:fc:58:da:66:bb:8c:ea:f6:37:c3:83:
                    b9:3a:39:38:4f:6e:18:68:89:a8:11:e5:e7:c9:05:
                    93:56:4b:a7:90:60:3c:ff:c0:02:1a:76:39:00:51:
                    3a:1d:9b:bc:ff:e5:f7:b4:53:29:6b:dd:90:dc:8d:
                    7e:2d:b8:d9:e5:c9:57:36:14:70:e6:b5:37:35:84:
                    8a:78:c9:fd:4e:d7:60:da:ac:c5:37:2c:b0:21:c5:
                    13:91:bc:0f:3f:08:00:1d:70:a9:33:fc:f5:ba:bb:
                    29:4e:ec:63:9d:94:ea:fb:db:12:6c:e7:96:9a:d9:
                    de:b3:57:b9:e3:57:57:07:35:9b:55:83:17:9f:ad:
                    6f:cd:90:c9:72:1c:8e:63:f5:48:fc:ea:91:00:ad:
                    ef:b2:52:8f:b4:49:3c:d6:ff:bd:49:b9:1f:eb:f8:
                    5f:f6:92:97:6d:4d:20:80:83:59:ee:39:92:8e:d0:
                    e1:e2:bc:24:02:85:ad:ac:34:d9:b7:a0:dc:57:e3:
                    57:4e:f5:69:c4:62:15:43:86:60:4a:f5:11:22:2d:
                    1f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:DB:CF:25:3F:2A:FA:DF:A1:B1:DC:06:2E:63:73:7A:A9:E4:03:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b52fb4bb-bc3a-38e4-8c13-995ffb48d1d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d/b1898100-f40c-4002-b68a-8a97b548e69d.crl

            X509v3 Authority Key Identifier:
                keyid:89:4C:F8:BD:0D:34:34:87:18:70:33:F9:00:70:4A:CB:0F:78:52:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b1898100-f40c-4002-b68a-8a97b548e69d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.113.97.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:2e:a5:38:70:be:36:f8:80:a2:7d:77:51:b2:c6:12:cb:c7:
         b4:fd:40:83:c4:2a:1a:1c:4b:ad:e3:d5:db:00:82:3c:10:9c:
         17:52:e4:01:6a:3b:b2:43:a2:a3:f0:b0:31:30:be:f0:83:27:
         4e:94:5b:23:06:61:71:0e:53:87:5b:12:85:97:c0:73:e2:43:
         34:98:f7:47:fc:3d:a2:58:1e:f5:09:09:34:4d:a4:b8:b0:b7:
         8e:f1:51:17:ab:72:0a:f8:7d:0f:cf:ef:ee:e0:2e:81:2c:42:
         b1:78:af:2b:ae:38:ca:92:85:6c:40:48:0b:da:6c:1f:c9:a3:
         a7:c0:4d:76:2a:b8:e1:bc:d9:7f:4c:ec:be:ea:6f:46:c1:0a:
         72:c6:e2:5c:fd:fe:37:e8:3c:28:fa:01:02:57:cc:ca:4f:5e:
         d3:16:17:9f:f9:b4:fe:97:c7:f1:ad:42:33:0b:ae:97:d5:3f:
         16:ee:94:0e:98:39:a4:1c:a9:75:48:9e:dd:fc:83:7f:5e:a3:
         03:4d:bb:b3:68:a7:55:9b:39:0f:91:af:58:7e:bb:5d:fb:b0:
         6a:8b:5b:a7:d8:25:e7:69:0c:76:b4:6e:12:4f:15:81:b7:0e:
         3a:7a:23:fd:9f:ba:66:cc:66:ae:90:7b:bd:70:e9:df:74:88:
         af:e8:71:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 14 19:46:08 2023 by rpki-client on console-ams.rpki-client.org