Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/aa85f8a7-2cc2-3c0c-9899-6ab5b2cedda5.roa
File:                     aa85f8a7-2cc2-3c0c-9899-6ab5b2cedda5.roa (raw, json)
Hash identifier:          9MgPoDUJ8m507bG7LXT0oeAPGC/3OnMOzBMEtGtcHM8=
Subject key identifier:   85:B2:55:13:BD:EB:2C:90:86:17:E2:59:C6:AA:B5:C9:EF:5F:44:15
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F4328583E1BC9F451C610D83C8B23CA80
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/aa85f8a7-2cc2-3c0c-9899-6ab5b2cedda5.roa
Signing time:             Wed 01 Jun 2022 12:00:00 +0000
ROA not before:           Wed 01 Jun 2022 12:00:00 +0000
ROA not after:            Thu 25 May 2028 04:00:00 +0000
asID:                     11404
IP address blocks:        208.53.96.0/19 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:1b:c9:f4:51:c6:10:d8:3c:8b:23:ca:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Jun  1 12:00:00 2022 GMT
            Not After : May 25 04:00:00 2028 GMT
        Subject: CN=8f6845ef-13ed-4cb6-9eed-de9dd336b5f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:4f:6c:41:fb:e8:37:36:7e:64:d8:31:d1:0d:
                    ca:8b:94:54:ee:a0:23:fc:16:e0:eb:2b:59:11:40:
                    72:7e:3b:1f:dd:5c:0f:18:05:0e:7f:94:e3:33:b6:
                    55:3f:3c:04:23:cd:00:09:35:1e:6d:0c:0e:eb:30:
                    2a:19:f1:9e:46:5d:94:ed:85:61:50:ee:2d:94:94:
                    64:40:3e:c4:b4:4a:d8:9d:d7:c1:a9:88:0a:b3:00:
                    d9:35:ef:7b:95:81:05:17:70:f5:6b:6f:3e:37:a3:
                    0f:c6:45:70:ae:fc:f0:38:a7:32:2a:75:1d:73:44:
                    21:ce:0a:85:bb:a6:16:f7:73:fa:d0:00:b5:51:59:
                    51:89:d5:0f:ab:58:55:76:b7:88:8e:b9:0b:e6:7b:
                    07:b6:6b:81:76:f4:7d:8e:82:70:ae:5a:7a:03:16:
                    dc:31:02:59:ba:bb:06:0b:2a:f3:ee:5a:19:fe:49:
                    99:2e:fb:cd:19:97:1f:66:bf:76:2b:93:dd:07:c0:
                    63:31:bd:02:2a:9d:c4:6a:bf:d1:4c:3c:75:8e:69:
                    81:c1:f7:76:a9:d2:c4:20:69:45:89:7c:4b:d7:e9:
                    82:66:5f:ea:5b:33:91:6c:63:bd:5d:28:4c:92:1e:
                    e1:d8:d0:9d:05:11:79:92:22:2b:23:6e:48:c7:d8:
                    c7:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:B2:55:13:BD:EB:2C:90:86:17:E2:59:C6:AA:B5:C9:EF:5F:44:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/aa85f8a7-2cc2-3c0c-9899-6ab5b2cedda5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.53.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:93:32:d5:a2:a7:c9:14:7f:33:bf:02:03:d1:8d:93:8d:11:
         31:0f:9c:a7:42:44:a3:bb:d5:3c:a8:c8:51:30:c1:01:27:fe:
         41:7d:14:d8:22:fc:0d:f7:e8:be:6b:4b:66:65:28:c3:2c:6f:
         9f:d2:8d:5a:f9:58:63:04:83:70:1f:4d:60:0b:f6:cd:d3:e6:
         ac:25:18:97:2f:d8:8b:7f:66:42:87:6f:5a:54:5e:58:38:13:
         65:de:3b:85:f9:c8:c0:3f:7b:9f:cf:42:de:e0:80:ed:98:79:
         ff:23:37:4a:11:f0:fa:3b:c4:37:3f:03:f6:33:5b:26:5e:b1:
         10:26:de:1a:ee:3a:1c:89:d1:ee:70:8b:28:f8:bc:fc:c5:10:
         bb:92:77:1e:45:c9:9f:5b:32:a2:8a:c9:92:8e:d5:da:34:34:
         3b:17:c2:7a:ae:d9:cc:ab:1c:e9:70:0a:af:aa:cc:9a:67:c1:
         5a:75:69:b7:cc:0e:bc:84:c8:c0:22:41:f7:12:fe:c7:7f:5d:
         31:3a:04:44:76:57:16:12:d7:e1:82:2f:0f:c4:a1:52:78:10:
         35:56:cb:2b:8a:c9:14:bf:08:32:4e:84:26:21:68:24:99:0f:
         82:c0:4a:0f:2b:b1:79:b7:a6:3a:1c:da:a2:1c:03:de:a2:04:
         6d:6f:8b:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:46 2023 by rpki-client on console-fra.rpki-client.org