Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/64957937-0dd1-36a9-a522-ee806c903ff0.roa
File:                     64957937-0dd1-36a9-a522-ee806c903ff0.roa (raw, json)
Hash identifier:          II9h7DZIXvkcHF0j3w5Yx46mcbvzgf8hMirCpJpvAiA=
Subject key identifier:   6E:BC:93:D4:8A:2C:C1:B5:DF:FD:86:5B:19:3A:A0:3C:D2:76:4F:DB
Certificate issuer:       /CN=5e3e99cc-7992-4ac1-a256-917cce07532e
Certificate serial:       010D0C9F432858417426F803D8416DF9FA8C0080
Authority key identifier: D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/64957937-0dd1-36a9-a522-ee806c903ff0.roa
Signing time:             Thu 02 Mar 2023 19:48:12 +0000
ROA not before:           Thu 02 Mar 2023 19:48:12 +0000
ROA not after:            Tue 08 Jul 2025 04:00:00 +0000
asID:                     3507
IP address blocks:        74.80.188.0/24 maxlen: 24
                          74.80.189.0/24 maxlen: 24
                          74.80.152.0/24 maxlen: 24
                          74.80.153.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:74:26:f8:03:d8:41:6d:f9:fa:8c:00:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e3e99cc-7992-4ac1-a256-917cce07532e
        Validity
            Not Before: Mar  2 19:48:12 2023 GMT
            Not After : Jul  8 04:00:00 2025 GMT
        Subject: CN=b5826f0a-86bb-4ea6-9fa9-0c95f6cae1ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:21:40:a8:6c:63:ef:e8:e0:40:6a:e0:04:2d:
                    a6:ca:cd:88:23:66:86:67:f3:47:4c:42:18:28:f0:
                    35:4d:10:cb:cb:e5:7a:c3:ad:f1:2d:1b:d8:47:de:
                    a1:91:61:0f:d6:23:1b:6b:56:63:40:d3:d4:f2:e9:
                    ff:e1:29:73:2b:4e:c9:d6:a8:47:c6:44:4b:9b:86:
                    16:19:30:9d:1b:44:6a:73:6d:5f:ce:ba:65:87:04:
                    0a:e3:31:03:a6:d4:e7:a2:5b:8c:b4:ff:6b:2a:fd:
                    ef:45:b0:6e:fe:0b:2e:c8:41:86:db:08:d1:da:ba:
                    e7:b6:ef:8d:ec:a2:92:b5:66:a0:8d:fa:cb:d0:2c:
                    c9:87:da:57:6e:2e:0e:f4:42:49:f2:fd:bb:70:20:
                    64:7a:66:ca:f9:68:58:f2:e8:3f:b4:42:0e:e9:b9:
                    6b:e2:92:52:32:ce:22:aa:1f:ab:07:ae:4f:0e:4d:
                    90:9a:a7:01:4b:05:c0:7b:a6:e2:c8:07:e1:5c:50:
                    39:62:c9:23:38:90:f4:25:8b:f3:7e:54:82:16:ed:
                    af:b9:60:14:85:bf:a8:03:5a:aa:3c:fc:7b:68:ae:
                    c1:c2:4d:50:47:7e:b6:06:77:0b:f0:31:30:59:a6:
                    17:42:a2:e8:b1:3f:3c:b5:8d:4c:79:56:bb:7b:7c:
                    04:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:BC:93:D4:8A:2C:C1:B5:DF:FD:86:5B:19:3A:A0:3C:D2:76:4F:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/64957937-0dd1-36a9-a522-ee806c903ff0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.crl

            X509v3 Authority Key Identifier:
                keyid:D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.80.152.0/23
                  74.80.188.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:c9:cd:54:82:4c:e6:0f:a4:c4:4c:7e:3a:d7:56:03:32:fd:
         0a:98:a3:b3:6c:65:ff:e8:9a:97:4e:0f:08:42:8e:d1:25:18:
         69:67:7f:fb:59:e4:9b:57:df:c0:f8:7c:35:d6:ae:79:43:14:
         14:92:c3:fa:6b:6d:58:9b:b4:d2:70:2b:5b:c4:2d:7d:e4:f8:
         dd:7d:0e:9d:47:d2:fc:c4:3a:7d:e1:02:a0:79:8e:65:55:0a:
         3c:cc:e7:a8:27:16:d5:1f:c4:fe:29:f7:19:cd:df:ea:81:dc:
         1c:7c:29:00:c9:38:14:8c:5b:7e:61:a7:14:06:7d:78:3e:f1:
         3c:31:2f:dd:e3:2e:1e:35:d8:59:16:5e:50:0b:25:cc:af:80:
         28:5b:aa:f6:80:75:80:2c:b5:23:1c:45:31:7a:91:9d:05:a4:
         30:02:72:51:9c:83:78:1f:58:4a:dc:b4:ad:91:b8:d2:4a:79:
         ab:b8:f1:12:ea:8f:e4:8c:e5:02:cc:65:ef:bb:eb:cb:ef:70:
         f8:a0:b1:c0:21:aa:61:58:aa:61:35:23:62:3d:81:a2:83:4c:
         e9:b8:71:cc:af:cc:c4:ab:4d:df:c0:9c:d5:19:e8:a8:6c:08:
         c1:9c:59:8f:52:65:d3:a2:fd:dc:03:76:de:e3:3e:1c:e9:eb:
         94:04:c7:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:25 2023 by rpki-client on console-ams.rpki-client.org