Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/dcc6c1bc-e7af-3af6-bbf0-d512c7efb4a6.roa
File:                     dcc6c1bc-e7af-3af6-bbf0-d512c7efb4a6.roa (raw, json)
Hash identifier:          bdQ4hsgr4khH6gE8Zp4roF7d6KdZSZpbPQHH4/HBFAk=
Subject key identifier:   BC:30:6F:59:3F:18:88:60:E0:0E:D3:1E:30:AF:A6:00:CA:D1:CC:75
Certificate issuer:       /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Certificate serial:       010D0C9F43285843D63E22B10F54CF4EC0B7B640
Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/dcc6c1bc-e7af-3af6-bbf0-d512c7efb4a6.roa
Signing time:             Fri 10 Nov 2023 02:00:15 +0000
ROA not before:           Fri 10 Nov 2023 02:00:15 +0000
ROA not after:            Thu 08 Feb 2024 02:00:15 +0000
asID:                     55293
IP address blocks:        64.4.160.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:d6:3e:22:b1:0f:54:cf:4e:c0:b7:b6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
        Validity
            Not Before: Nov 10 02:00:15 2023 GMT
            Not After : Feb  8 02:00:15 2024 GMT
        Subject: CN=8b8e9fbf-5de0-4416-ae89-9c175e0d0e82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:5c:f7:c4:4a:ed:d3:f7:9f:73:14:fd:35:74:
                    42:a1:0c:5d:f0:6b:be:f1:12:66:75:5f:5d:11:84:
                    0a:a7:26:82:e8:e9:0e:cc:80:90:c4:21:96:1a:65:
                    d8:85:79:ad:17:6d:a0:24:97:78:f9:10:27:f7:da:
                    9d:ed:37:63:da:07:dd:fa:ba:d0:8d:55:ae:a2:26:
                    f7:27:34:bd:af:0e:0f:5c:bd:04:77:9d:8f:71:07:
                    e4:0d:7a:41:6e:40:3f:da:97:0a:1d:52:36:15:b4:
                    ba:56:80:4f:7f:14:05:59:30:dd:8b:97:22:27:9f:
                    f4:c5:f8:0d:13:ce:c2:84:7e:cf:72:da:2c:0f:6d:
                    a0:35:b7:f6:66:c8:43:b6:38:37:32:cf:72:3c:44:
                    bb:b6:b8:fe:11:8a:33:10:fd:96:4f:41:80:d0:59:
                    2b:96:d6:39:73:47:3c:39:43:ac:54:ed:89:0b:15:
                    23:41:83:a5:a7:01:58:f7:15:2a:d9:e8:d1:a4:69:
                    93:35:f9:e6:f2:61:b9:3d:42:4f:d9:da:8c:fd:27:
                    97:54:cc:ab:fd:57:19:1f:b3:14:4f:e1:62:a2:26:
                    c9:84:be:51:6d:15:f4:13:cb:f0:a8:a3:22:0b:07:
                    80:5e:f5:72:9c:9c:6d:03:08:54:b2:92:c8:cf:fe:
                    05:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:30:6F:59:3F:18:88:60:E0:0E:D3:1E:30:AF:A6:00:CA:D1:CC:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/dcc6c1bc-e7af-3af6-bbf0-d512c7efb4a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl

            X509v3 Authority Key Identifier:
                keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.4.160.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:ab:f3:ab:27:47:86:1a:48:14:54:bb:57:76:b1:64:dc:0d:
         7a:83:d0:71:a0:2f:db:8b:8a:97:12:2d:70:c1:d0:44:d9:a7:
         66:64:60:a4:10:50:d8:ba:aa:fe:17:51:07:a1:a6:f1:5f:a8:
         7a:b9:45:6b:71:9f:17:dd:bd:25:a4:80:c9:fd:0e:f9:a6:15:
         94:d3:42:9a:16:10:2b:1c:3b:7d:8e:5d:d5:22:cc:29:19:a4:
         cc:02:5d:80:13:fe:13:f1:4a:17:19:1a:e2:96:61:9f:0f:a1:
         67:14:fa:7f:d5:36:50:9e:bf:f3:0e:11:35:5e:bc:6c:e8:a3:
         bf:c7:a8:28:df:39:9b:26:af:d8:c5:bc:db:03:b0:fc:00:99:
         0b:da:ad:03:85:a7:da:15:bf:28:36:ed:78:8b:01:20:55:18:
         0b:50:e7:5d:55:78:f7:3f:10:07:ba:dd:d0:43:12:fa:d4:7c:
         a9:d0:c1:47:9b:f4:95:6b:e2:fc:0b:01:b2:2e:f3:9d:83:bf:
         f1:5d:10:c0:1e:a9:53:f3:87:75:d3:24:77:79:43:ba:64:04:
         d7:8e:98:7a:3d:4a:48:dd:d7:f7:11:16:e8:28:d2:df:05:6f:
         79:8d:d9:7f:b9:cf:05:ad:66:35:1f:a6:ff:43:c1:5c:61:ce:
         0c:2a:9a:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:19:17 2024 by rpki-client on console-ams.rpki-client.org