Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/58fedfbe-563c-41d3-9fd2-fcf22dac7493/e0111c02-0186-30cd-98f1-5af836d4b8fb.roa
File:                     e0111c02-0186-30cd-98f1-5af836d4b8fb.roa (raw, json)
Hash identifier:          OmEWD889u3PN0py7u++G1GZkHYt9IoM0iYBlkxQI9qU=
Subject key identifier:   71:DF:02:DD:0D:45:82:B8:EC:63:62:40:8E:8B:CE:87:91:A5:F8:82
Certificate issuer:       /CN=58fedfbe-563c-41d3-9fd2-fcf22dac7493
Certificate serial:       010D0C9F43285844743BC572BE5A258E8BA4BF00
Authority key identifier: 0D:6A:57:88:BA:55:F4:4C:DA:9E:9E:0A:E3:6D:89:83:E5:8A:9B:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/58fedfbe-563c-41d3-9fd2-fcf22dac7493.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/58fedfbe-563c-41d3-9fd2-fcf22dac7493/e0111c02-0186-30cd-98f1-5af836d4b8fb.roa
Signing time:             Fri 05 Jan 2024 16:13:20 +0000
ROA not before:           Fri 05 Jan 2024 16:13:20 +0000
ROA not after:            Thu 04 Apr 2024 15:13:20 +0000
asID:                     23393
IP address blocks:        199.167.64.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:74:3b:c5:72:be:5a:25:8e:8b:a4:bf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58fedfbe-563c-41d3-9fd2-fcf22dac7493
        Validity
            Not Before: Jan  5 16:13:20 2024 GMT
            Not After : Apr  4 15:13:20 2024 GMT
        Subject: CN=5f783e99-000b-45e5-8dde-d20af4089ce1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:3b:96:82:67:84:48:f0:6f:0c:85:4f:c2:10:
                    98:76:14:41:c8:f5:1a:03:7f:5b:99:83:e1:09:36:
                    4e:79:80:4d:54:74:37:03:10:62:7e:8c:6e:31:dd:
                    f5:a3:81:3e:38:8b:93:ff:e1:2f:ce:5d:1a:9a:26:
                    40:25:1f:3d:c1:ac:cc:31:2b:20:17:d6:5f:92:68:
                    54:23:ab:0c:7b:93:5e:d8:18:36:ff:3e:b7:bd:2e:
                    c7:0a:97:0a:e6:2a:7d:c7:da:f7:97:48:8f:f6:3b:
                    2a:d3:78:f4:e0:36:e8:3e:60:26:4a:1b:cd:a5:9b:
                    b8:93:67:56:79:21:b0:04:7b:f5:38:93:5e:35:6a:
                    a6:5f:4f:e3:c5:c3:ad:26:1a:c6:b9:5a:5e:71:8d:
                    2d:6e:24:d7:06:1f:a4:ac:21:46:e6:5c:b6:77:b2:
                    07:ed:dc:71:1f:fb:cd:4b:27:a8:0a:37:3b:5e:42:
                    47:0d:50:32:06:07:0f:ac:b3:b5:77:5f:ad:27:c2:
                    a3:06:ed:75:51:fc:83:9f:d0:dc:13:47:98:30:e1:
                    4a:fa:79:53:ef:4a:35:47:f2:32:22:ae:52:c7:3c:
                    92:d0:d1:52:ba:12:f9:96:c4:ca:90:be:a9:6c:e6:
                    76:90:15:7e:f8:ba:a8:43:2d:13:30:b9:14:6d:0d:
                    8f:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:DF:02:DD:0D:45:82:B8:EC:63:62:40:8E:8B:CE:87:91:A5:F8:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/58fedfbe-563c-41d3-9fd2-fcf22dac7493/e0111c02-0186-30cd-98f1-5af836d4b8fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/58fedfbe-563c-41d3-9fd2-fcf22dac7493/58fedfbe-563c-41d3-9fd2-fcf22dac7493.crl

            X509v3 Authority Key Identifier:
                keyid:0D:6A:57:88:BA:55:F4:4C:DA:9E:9E:0A:E3:6D:89:83:E5:8A:9B:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/58fedfbe-563c-41d3-9fd2-fcf22dac7493.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.167.64.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:86:44:c5:80:da:b9:f7:46:72:9e:65:db:e0:f2:d1:fc:16:
         37:72:c1:a1:d7:12:bb:07:d0:86:bf:62:7e:f1:47:ea:19:3c:
         6d:44:df:c0:d6:88:54:de:a7:c5:dd:f5:40:86:30:61:1e:e9:
         5d:2d:9f:d3:ab:4d:88:20:20:3e:23:1f:d7:37:de:9e:a8:08:
         18:97:78:b5:a3:b5:a6:2d:99:7b:f2:3a:09:19:eb:ab:90:e4:
         ce:f4:cf:20:b9:3b:6a:ba:18:92:23:16:17:da:35:fa:db:f4:
         24:e8:55:ed:3a:11:a1:9d:69:90:a9:52:4c:4c:16:21:f0:66:
         2b:c7:ef:2b:c0:2c:95:13:01:87:52:de:88:12:11:eb:9c:24:
         0d:ae:85:b3:85:14:7c:45:a5:01:cc:28:52:81:31:9e:77:2f:
         4c:6e:2c:3d:4e:da:39:8b:ae:1a:c5:ac:53:48:a6:c5:37:0c:
         0c:bf:90:6d:80:c8:f9:76:4c:54:f4:2b:a1:4d:7a:b4:e1:c9:
         59:3f:45:f0:8b:5b:9b:f2:58:2e:d5:a3:33:c7:4b:14:fb:39:
         75:a8:24:70:42:6d:18:b9:7a:33:b8:25:25:bb:2d:19:63:03:
         9f:af:c2:38:97:63:0f:7d:28:1b:1d:3f:f4:0a:64:cc:31:f6:
         3d:08:01:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 5 21:07:48 2024 by rpki-client on console-ams.rpki-client.org