Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/3b9038ca-8344-3c58-8049-690f6557fd42.roa
File:                     3b9038ca-8344-3c58-8049-690f6557fd42.roa (raw, json)
Hash identifier:          WzVSupKlSAxAQ0M+rQW92CRJN0FKR1faCmDT1euvKqA=
Subject key identifier:   76:FC:1C:D0:5F:80:26:E1:72:6E:3B:7D:27:FE:52:63:4A:30:94:07
Certificate issuer:       /CN=e7a6341b-5a5e-4ac0-a760-5a54190af913
Certificate serial:       010D0C9F43285841E471AB6B1F8C82E925C770E0
Authority key identifier: 31:A2:AD:E3:C3:95:0D:C6:97:41:1E:2F:8C:B1:FC:6B:B7:83:25:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/3b9038ca-8344-3c58-8049-690f6557fd42.roa
Signing time:             Mon 15 May 2023 18:31:13 +0000
ROA not before:           Mon 15 May 2023 18:31:13 +0000
ROA not after:            Thu 10 Aug 2023 12:32:50 +0000
asID:                     398465
IP address blocks:        64.112.126.0/24 maxlen: 24
                          207.2.123.0/24 maxlen: 24
                          64.112.125.0/24 maxlen: 24
                          207.2.122.0/24 maxlen: 24
                          207.2.121.0/24 maxlen: 24
                          206.168.215.0/24 maxlen: 24
                          64.112.127.0/24 maxlen: 24
                          206.168.214.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:71:ab:6b:1f:8c:82:e9:25:c7:70:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7a6341b-5a5e-4ac0-a760-5a54190af913
        Validity
            Not Before: May 15 18:31:13 2023 GMT
            Not After : Aug 10 12:32:50 2023 GMT
        Subject: CN=1719843c-2a2f-42de-92c9-780a7a78d80c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:c4:c7:ea:1d:0c:87:96:96:fa:3e:cf:37:6d:
                    14:c0:ec:fb:8b:3f:30:36:bf:af:15:be:67:87:da:
                    97:fe:57:aa:00:4b:b0:fd:9b:90:bc:15:56:e8:31:
                    99:e9:c1:8b:6f:dd:4b:5a:d6:d1:8d:a5:26:76:a6:
                    7b:d4:9b:36:c4:3a:a1:88:8c:98:2a:b6:f4:a4:ae:
                    74:cf:84:9f:a6:7f:c1:1a:48:a5:80:c4:93:95:3f:
                    26:b5:81:6a:2f:53:31:e0:a4:f1:5b:4b:2e:44:de:
                    a3:d4:ca:5f:c3:ad:00:37:af:70:0c:ef:d9:c2:14:
                    a0:97:a8:45:0b:3f:fe:0b:e8:36:81:4f:82:44:4b:
                    56:ad:92:c0:13:dc:50:ab:63:c9:87:eb:05:50:02:
                    28:f0:e0:3d:fa:b1:e9:62:09:4d:78:23:40:52:11:
                    74:98:5d:be:f0:56:ee:15:2f:40:3b:6c:56:3d:9c:
                    41:4b:21:45:c0:17:4d:7d:e5:57:a1:c6:25:89:73:
                    df:fc:17:cd:93:10:0c:fe:b8:86:e9:28:2d:e8:09:
                    cc:97:68:73:0a:85:6e:72:37:ed:3a:de:4a:c9:03:
                    ba:36:fb:cc:09:61:20:b5:57:6c:65:94:e6:88:0b:
                    bb:3f:21:32:32:38:c7:03:0c:b9:e7:46:cd:b9:cc:
                    0f:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:FC:1C:D0:5F:80:26:E1:72:6E:3B:7D:27:FE:52:63:4A:30:94:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/3b9038ca-8344-3c58-8049-690f6557fd42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/e7a6341b-5a5e-4ac0-a760-5a54190af913.crl

            X509v3 Authority Key Identifier:
                keyid:31:A2:AD:E3:C3:95:0D:C6:97:41:1E:2F:8C:B1:FC:6B:B7:83:25:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.112.125.0-64.112.127.255
                  206.168.214.0/23
                  207.2.121.0-207.2.123.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:42:be:c2:2f:15:23:c8:3d:34:56:bb:a7:ed:08:8f:a6:eb:
         ee:ec:cb:7d:a7:14:d3:27:db:9e:1b:81:c0:db:b3:2a:55:42:
         5e:84:f9:2d:71:0d:ba:17:63:9f:53:b3:e3:3d:b7:ff:ce:c3:
         27:34:db:7a:02:94:da:a5:42:47:1e:6b:55:c5:1a:59:02:eb:
         9e:6a:23:c1:72:59:7a:68:3c:ad:ee:19:1f:b4:b9:0e:01:b1:
         36:62:90:a1:eb:5d:79:72:94:3a:76:ea:cc:51:d8:4e:05:c1:
         6d:a9:88:ca:78:fe:c8:0e:eb:71:3b:88:bc:08:b1:4a:b6:e8:
         18:2c:87:af:e6:e8:f8:01:1b:1a:18:05:0b:f2:b7:87:34:80:
         b7:31:2b:6a:a8:30:5d:c4:14:fd:03:86:3d:52:4f:7c:e5:20:
         5b:b0:0a:8a:1c:6d:96:e8:de:68:5a:af:40:97:4f:19:e7:ee:
         14:cf:1c:ce:f8:f2:cc:18:9e:27:5e:59:e0:94:29:0b:67:be:
         49:8c:93:1d:d9:aa:1f:be:8e:54:a3:21:27:52:9b:3b:2f:b7:
         ea:a7:18:16:e6:4f:47:43:69:de:bd:36:37:f0:d9:26:6f:a2:
         89:e4:12:5a:d2:c0:00:1e:45:44:59:ab:79:dc:d2:28:ce:30:
         5b:79:35:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:47 2023 by rpki-client on console-ams.rpki-client.org