Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/8fdd929c-42a4-30d4-a673-c52af45a96de.roa
File:                     8fdd929c-42a4-30d4-a673-c52af45a96de.roa (raw, json)
Hash identifier:          egWN6a9iJWvgjhhbqQS63uynUGoD4WsW7HaEKrb5B9E=
Subject key identifier:   21:81:FC:C8:4B:9A:77:18:08:9C:B4:8B:9E:45:59:A6:84:5B:AE:33
Certificate issuer:       /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Certificate serial:       010D0C9F4328583DB9834E36D122A31B35723380
Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/8fdd929c-42a4-30d4-a673-c52af45a96de.roa
Signing time:             Wed 27 Apr 2022 12:00:00 +0000
ROA not before:           Wed 27 Apr 2022 12:00:00 +0000
ROA not after:            Thu 20 Apr 2028 04:00:00 +0000
asID:                     55293
IP address blocks:        69.48.136.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:b9:83:4e:36:d1:22:a3:1b:35:72:33:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
        Validity
            Not Before: Apr 27 12:00:00 2022 GMT
            Not After : Apr 20 04:00:00 2028 GMT
        Subject: CN=05752403-d103-4162-a5ca-92c74e9ccc1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:48:d4:47:a1:ef:6f:df:54:da:a5:99:85:88:
                    65:f4:1e:16:2d:ab:90:e7:c8:0e:2e:ee:85:47:61:
                    57:17:66:c6:2a:6f:0b:d5:aa:84:68:06:d5:51:f0:
                    79:56:61:d1:7a:19:03:46:14:06:a4:8a:bc:d5:e4:
                    df:a6:e5:ba:24:64:3d:2f:de:cf:b1:be:30:4d:78:
                    33:a7:06:54:88:e9:21:53:f0:92:9c:80:47:c9:44:
                    31:b7:b3:d1:c3:8a:51:9c:9f:09:91:aa:f0:35:9f:
                    7e:8d:8a:ea:89:3f:69:9e:9d:cb:34:e5:64:ff:43:
                    1d:36:d6:4b:54:30:80:7f:a7:83:ff:d3:ee:6d:34:
                    ba:7e:01:86:9a:a7:19:d5:83:1a:e0:45:de:b3:e8:
                    12:c0:4f:d0:8a:96:cf:2a:5c:fb:86:25:dc:34:9b:
                    5a:0a:4e:86:79:55:5d:bb:60:a7:09:8f:c4:1f:b6:
                    89:a6:c8:7d:3c:dd:f1:92:9f:cb:62:76:f4:9d:4f:
                    05:26:59:53:59:21:61:6d:cf:eb:34:61:0b:4e:20:
                    fe:9e:1d:83:96:5c:a5:a8:d9:8d:e9:be:4c:fa:c4:
                    5e:58:a1:f8:7d:e5:0d:fd:51:a6:03:20:0a:9c:04:
                    e7:f5:e9:34:10:02:3e:71:2f:b4:a0:7d:a8:f6:4f:
                    52:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:81:FC:C8:4B:9A:77:18:08:9C:B4:8B:9E:45:59:A6:84:5B:AE:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/8fdd929c-42a4-30d4-a673-c52af45a96de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl

            X509v3 Authority Key Identifier:
                keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.48.136.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:ce:12:91:3c:5f:df:b1:e1:7e:fa:a9:34:10:e3:15:a4:d4:
         c7:c3:9d:a0:fb:cd:f9:32:75:a7:24:7c:4a:d5:80:a1:9e:50:
         fd:0f:02:d1:45:17:00:66:41:97:3d:87:82:0c:fe:67:56:b2:
         05:f0:c4:14:1a:54:90:68:08:6e:62:8c:14:d2:a0:ff:b9:99:
         30:e0:2c:1a:72:46:7c:d9:b1:5c:2c:47:1f:b1:df:a9:fe:a7:
         07:99:01:56:4b:f1:2c:f2:4c:0e:c3:e4:2e:e7:c1:99:97:64:
         89:b6:c5:ad:54:6c:dc:21:12:3e:41:dd:61:e1:16:11:4f:5a:
         12:5e:38:16:30:13:97:0c:ab:1e:40:4c:27:10:ec:e4:1a:de:
         78:35:07:68:2a:45:0e:f8:b2:24:c4:0e:fc:9a:4b:ce:be:73:
         04:a5:09:9f:75:d8:11:81:ea:63:38:c6:68:cc:f0:8a:ba:ff:
         6f:91:3e:6e:ad:f1:75:60:e0:e8:67:02:29:41:00:60:7d:35:
         25:c4:0a:13:72:74:6a:0e:39:c5:40:45:c2:59:8f:52:35:1a:
         f6:2f:59:90:18:7f:a2:a5:8a:9e:f8:7d:c8:c2:b0:27:d8:4e:
         b9:5e:60:72:62:0d:5c:a5:b6:da:ad:55:39:23:ed:71:b9:72:
         67:d6:d6:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:35:44 2024 by rpki-client on console-fra.rpki-client.org