Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c2a7225-dfea-460d-aa69-804ae5740036/95ae2a8e-3106-3e07-a66a-4282d5f2d2bb.roa
File:                     95ae2a8e-3106-3e07-a66a-4282d5f2d2bb.roa (raw, json)
Hash identifier:          0SXKAk9YQPCXzR/qNiiFsBYVZPnhK3juV0IGouvLqW0=
Subject key identifier:   B8:0E:92:D5:21:B7:A3:78:87:EE:60:62:AD:7D:BA:E1:E3:17:C3:B0
Certificate issuer:       /CN=9c2a7225-dfea-460d-aa69-804ae5740036
Certificate serial:       010D0C9F432858429878F7E0E1111C7CC34E0E80
Authority key identifier: 95:8A:FE:C6:C8:33:09:58:81:3E:90:E8:EF:9E:C9:2C:3A:DB:77:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c2a7225-dfea-460d-aa69-804ae5740036.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c2a7225-dfea-460d-aa69-804ae5740036/95ae2a8e-3106-3e07-a66a-4282d5f2d2bb.roa
Signing time:             Wed 19 Jul 2023 06:11:52 +0000
ROA not before:           Wed 19 Jul 2023 06:11:52 +0000
ROA not after:            Tue 17 Oct 2023 06:11:52 +0000
asID:                     30221
IP address blocks:        63.247.144.0/20 maxlen: 24
                          68.68.192.0/20 maxlen: 24
                          68.68.208.0/21 maxlen: 24
                          68.68.216.0/24 maxlen: 24
                          68.68.218.0/24 maxlen: 24
                          68.68.220.0/24 maxlen: 24
                          208.122.112.0/20 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:98:78:f7:e0:e1:11:1c:7c:c3:4e:0e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c2a7225-dfea-460d-aa69-804ae5740036
        Validity
            Not Before: Jul 19 06:11:52 2023 GMT
            Not After : Oct 17 06:11:52 2023 GMT
        Subject: CN=b4150d75-92cd-4e7a-bf84-d3f9f821ac30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:86:08:cd:c9:d8:ba:f3:1a:f5:07:60:07:6c:
                    e0:d4:12:59:fa:f1:ef:46:b2:ab:41:38:a7:0f:18:
                    d8:31:33:51:ba:ed:a7:4e:cc:59:27:3e:3b:fb:10:
                    9c:25:1e:22:1a:d5:a9:40:2a:46:23:a5:29:84:a5:
                    ca:31:19:93:36:ef:1a:4b:da:0e:fe:7d:f8:75:0e:
                    02:33:36:aa:a8:ba:4f:91:65:9a:b8:28:ef:26:c6:
                    db:c2:05:55:f4:14:d0:6b:c0:1b:c3:05:c4:7a:4f:
                    26:6c:1e:6e:00:bd:2d:77:80:b9:81:26:e1:1f:eb:
                    08:22:be:07:d0:23:95:f5:d4:a4:e0:4b:89:48:bb:
                    f7:f5:23:97:31:24:34:46:9a:c2:75:9d:0a:a5:9c:
                    ff:0c:b5:8d:03:59:c5:7d:fd:cf:be:47:93:82:44:
                    63:40:34:96:1d:12:3c:de:61:f9:8a:ee:00:14:94:
                    4a:38:eb:6f:35:69:61:15:9c:52:e2:cb:0b:68:23:
                    25:20:16:98:36:37:1a:c9:b2:75:df:2a:87:9d:d3:
                    6e:fb:35:9e:21:3f:5d:af:0b:89:8f:2c:86:43:68:
                    b5:44:12:2c:7a:ff:29:3c:e1:e2:a9:7d:ce:08:44:
                    0f:c0:6f:bc:44:f9:ba:74:37:4e:c9:3f:dd:34:97:
                    b5:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:0E:92:D5:21:B7:A3:78:87:EE:60:62:AD:7D:BA:E1:E3:17:C3:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c2a7225-dfea-460d-aa69-804ae5740036/95ae2a8e-3106-3e07-a66a-4282d5f2d2bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c2a7225-dfea-460d-aa69-804ae5740036/9c2a7225-dfea-460d-aa69-804ae5740036.crl

            X509v3 Authority Key Identifier:
                keyid:95:8A:FE:C6:C8:33:09:58:81:3E:90:E8:EF:9E:C9:2C:3A:DB:77:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c2a7225-dfea-460d-aa69-804ae5740036.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.247.144.0/20
                  68.68.192.0-68.68.216.255
                  68.68.218.0/24
                  68.68.220.0/24
                  208.122.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:8f:86:79:08:84:fc:86:ed:e2:fb:fb:7f:8a:2f:b7:55:61:
         73:89:84:a4:05:65:4d:34:e3:e9:28:2d:64:f9:45:c2:65:0b:
         72:f1:d0:3c:29:1c:a7:3c:5c:f2:97:0c:0c:55:75:94:d1:6e:
         bd:f6:eb:f8:be:d8:82:7a:ab:fb:b4:89:48:ed:91:f3:38:d1:
         d3:aa:89:29:c7:4f:de:82:21:ee:dc:ee:d7:ba:b0:c7:0f:dd:
         08:84:a6:cc:93:a4:26:2a:5c:68:1a:26:7d:af:b9:e2:1a:c1:
         fc:28:53:a0:98:48:76:99:ce:97:3f:47:27:ce:07:91:ad:8d:
         da:c2:71:31:99:38:54:a0:14:5d:f1:eb:7d:74:2a:5c:78:70:
         50:ac:da:70:06:fd:16:69:c6:d0:08:29:12:d2:c9:c8:2d:cd:
         29:20:d4:2f:21:bc:01:b1:7b:59:66:e0:87:af:96:7c:9e:d6:
         d1:3d:67:16:65:a8:6a:67:e5:4f:64:40:77:78:99:d3:7a:68:
         87:15:36:38:b7:26:80:dd:78:30:48:2e:e1:e2:30:e6:d8:88:
         ec:a2:f1:76:c8:e8:af:c8:a5:cd:f2:f3:57:72:a0:00:43:b8:
         e2:ba:01:bf:46:55:59:31:41:38:01:9b:31:ca:ad:75:40:2f:
         73:91:bf:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:46 2023 by rpki-client on console-ams.rpki-client.org