Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/5e247053-2029-3e6f-9791-9e4eb773c75a.roa
File:                     5e247053-2029-3e6f-9791-9e4eb773c75a.roa (raw, json)
Hash identifier:          +5MftAqe0HC4dXVn6Hj0gvNeSCpMw+Vqigqmi+STVyQ=
Subject key identifier:   FA:FE:4E:03:CD:4D:D0:66:C7:79:E3:8D:A7:BB:DA:81:0F:31:31:DB
Certificate issuer:       /CN=a062a219-9ee8-48a3-897a-8410b6da94a1
Certificate serial:       010D0C9F4328576D51CC73C042CFC168E89600D5
Authority key identifier: 14:28:27:66:05:9D:24:A0:B4:F2:88:0F:EF:A9:EC:E0:E9:6E:86:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/5e247053-2029-3e6f-9791-9e4eb773c75a.roa
Signing time:             Wed 13 Feb 2019 20:39:31 +0000
ROA not before:           Wed 13 Feb 2019 05:00:00 +0000
ROA not after:            Tue 13 Feb 2029 05:00:00 +0000
asID:                     803
IP address blocks:        206.163.224.0/19 maxlen: 24
                          199.26.190.0/23 maxlen: 24
                          199.189.88.0/21 maxlen: 24
                          216.174.128.0/19 maxlen: 24
                          216.126.200.0/22 maxlen: 24
                          207.47.128.0/17 maxlen: 24
                          104.152.28.0/22 maxlen: 24
                          104.219.8.0/22 maxlen: 24
                          104.255.48.0/22 maxlen: 24
                          108.160.16.0/20 maxlen: 24
                          108.174.160.0/20 maxlen: 24
                          108.60.160.0/19 maxlen: 24
                          162.253.8.0/22 maxlen: 24
                          192.34.224.0/21 maxlen: 24
                          198.245.112.0/20 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:68:e8:96:00:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a062a219-9ee8-48a3-897a-8410b6da94a1
        Validity
            Not Before: Feb 13 05:00:00 2019 GMT
            Not After : Feb 13 05:00:00 2029 GMT
        Subject: CN=6c5bb916-1174-40e3-9c52-c20a02444889
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:7d:da:dc:09:f7:ad:74:84:96:5a:0b:b5:df:
                    0c:06:b3:46:c5:a2:c8:d0:b5:37:0d:64:44:51:da:
                    71:5f:ae:ad:3f:4a:70:ed:11:69:48:2f:39:d6:4c:
                    d9:7b:41:0b:e9:91:88:29:56:e8:cd:e5:5d:ac:eb:
                    fa:d2:10:7c:0d:82:e3:b9:10:ba:70:0a:43:82:15:
                    70:f9:a7:1d:68:38:26:69:13:03:15:cf:6e:c7:1a:
                    f5:39:5c:40:e6:1e:e1:5c:06:50:89:7f:b0:6e:35:
                    fd:87:4c:8c:d1:1e:0b:ae:d1:76:9b:b9:15:2d:98:
                    d9:fb:2f:c7:7e:36:1d:71:98:37:83:ea:ae:24:a9:
                    a9:0f:05:b5:bb:be:3d:08:a0:78:89:41:92:3a:a7:
                    87:64:01:ba:38:b2:99:40:5b:72:b2:61:47:86:7c:
                    7e:89:97:67:df:33:28:13:b9:77:d7:ff:41:c0:29:
                    dc:36:0d:ff:34:1c:ee:04:e7:69:ac:57:18:f5:b1:
                    46:6e:42:b1:63:bc:bd:0b:a5:0a:d5:f9:56:6b:11:
                    23:3f:a1:8b:26:75:d4:55:72:cf:b5:f8:82:80:dd:
                    65:2b:74:fc:ca:43:15:7c:8f:87:78:36:aa:25:f7:
                    c4:05:7d:ed:f9:6f:49:4f:bc:3b:71:6c:f0:c4:af:
                    af:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:FE:4E:03:CD:4D:D0:66:C7:79:E3:8D:A7:BB:DA:81:0F:31:31:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/5e247053-2029-3e6f-9791-9e4eb773c75a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a062a219-9ee8-48a3-897a-8410b6da94a1.crl

            X509v3 Authority Key Identifier:
                keyid:14:28:27:66:05:9D:24:A0:B4:F2:88:0F:EF:A9:EC:E0:E9:6E:86:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.152.28.0/22
                  104.219.8.0/22
                  104.255.48.0/22
                  108.60.160.0/19
                  108.160.16.0/20
                  108.174.160.0/20
                  162.253.8.0/22
                  192.34.224.0/21
                  198.245.112.0/20
                  199.26.190.0/23
                  199.189.88.0/21
                  206.163.224.0/19
                  207.47.128.0/17
                  216.126.200.0/22
                  216.174.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:98:09:67:91:d5:ab:2e:75:f4:bd:ac:cb:d9:b9:7e:0c:e6:
         0d:7e:eb:45:de:50:5d:0f:e4:87:1e:15:af:f8:c2:9a:49:49:
         54:95:be:7a:16:48:9a:17:4a:7e:87:05:78:b0:3f:94:8e:da:
         ea:5e:2a:6d:63:cd:0b:73:14:d4:ba:2e:56:cd:e7:8c:1d:d4:
         d1:62:dc:9e:fa:ce:18:14:8f:ea:45:28:d8:8d:40:42:51:ad:
         30:c4:f4:6f:ed:29:50:e8:44:65:1d:ab:4c:6f:e7:13:c5:56:
         ac:c9:d2:0c:17:ed:bd:7a:82:25:4c:8e:ee:dd:f6:9c:ff:1e:
         43:4e:92:c1:d0:c7:fc:61:4d:97:de:a8:62:a1:9f:ed:70:6f:
         6c:4b:ec:9a:d7:b4:b6:93:0d:ac:28:eb:da:a1:c3:ee:89:20:
         8a:da:42:b5:c2:7a:65:fb:64:91:eb:f7:e2:34:9a:4a:f0:a1:
         04:3f:44:d1:c4:ae:36:e4:39:24:27:e9:f0:e3:c1:70:dd:62:
         7a:74:21:28:f5:6e:92:20:09:79:fc:34:a0:1b:13:7e:44:54:
         04:ea:c2:7f:20:51:4f:76:65:c9:e2:31:91:ce:38:4a:f1:78:
         a6:3d:04:2a:61:18:d0:3a:75:3d:55:bd:c1:be:7c:ea:e2:65:
         90:f5:36:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:29 2023 by rpki-client on console-ams.rpki-client.org