Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/6628eb45-4342-3422-a500-29e3c8aa3b80.roa
File:                     6628eb45-4342-3422-a500-29e3c8aa3b80.roa (raw, json)
Hash identifier:          lH1Il98n9zR3SBHICFyFgXz7H9cULwc33+6deoNOo2s=
Subject key identifier:   CD:15:C1:5A:A8:4F:63:22:AD:ED:3E:46:77:4F:A5:FF:67:53:1E:DF
Certificate issuer:       /CN=e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c
Certificate serial:       010D0C9F4328584250ADF3E6BA9E64F830D73300
Authority key identifier: 80:B2:BF:71:D3:A4:8D:54:39:E1:B6:9F:8B:B0:32:31:8E:0E:6C:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/6628eb45-4342-3422-a500-29e3c8aa3b80.roa
Signing time:             Fri 23 Jun 2023 13:00:19 +0000
ROA not before:           Fri 23 Jun 2023 13:00:19 +0000
ROA not after:            Thu 21 Sep 2023 13:00:19 +0000
asID:                     16410
IP address blocks:        206.180.27.0/24 maxlen: 24
                          206.180.25.0/24 maxlen: 24
                          206.180.12.0/22 maxlen: 22
                          206.180.8.0/24 maxlen: 24
                          206.180.7.0/24 maxlen: 24
                          206.180.6.0/24 maxlen: 24
                          206.180.38.0/24 maxlen: 24
                          206.180.37.0/24 maxlen: 24
                          206.180.36.0/24 maxlen: 24
                          205.157.249.0/24 maxlen: 24
                          205.157.204.0/24 maxlen: 24
                          206.180.52.0/24 maxlen: 24
                          205.157.203.0/24 maxlen: 24
                          206.180.39.0/24 maxlen: 24
                          205.157.193.0/24 maxlen: 24
                          206.180.54.0/24 maxlen: 24
                          205.157.240.0/24 maxlen: 24
                          206.180.53.0/24 maxlen: 24
                          205.157.247.0/24 maxlen: 24
                          205.157.245.0/24 maxlen: 24
                          206.180.28.0/24 maxlen: 24
                          206.180.0.0/23 maxlen: 23
                          205.157.255.0/24 maxlen: 24
                          205.157.254.0/24 maxlen: 24
                          205.157.251.0/24 maxlen: 24
                          205.157.250.0/24 maxlen: 24
                          205.157.248.0/24 maxlen: 24
                          205.157.246.0/24 maxlen: 24
                          205.157.242.0/24 maxlen: 24
                          206.180.5.0/24 maxlen: 24
                          206.180.4.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:50:ad:f3:e6:ba:9e:64:f8:30:d7:33:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c
        Validity
            Not Before: Jun 23 13:00:19 2023 GMT
            Not After : Sep 21 13:00:19 2023 GMT
        Subject: CN=b5b583d9-cc4d-4023-bab6-85b9ab3ec55f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:02:7f:f4:be:53:25:65:4f:a2:fa:2a:99:d5:
                    bc:75:d2:b1:22:cb:bc:c6:30:9d:df:1f:6f:b5:ef:
                    77:b6:4a:ca:16:e6:01:3c:db:8c:3c:73:59:c1:e9:
                    80:66:59:f7:4d:08:18:51:0b:32:97:f5:30:87:f6:
                    2f:ef:e2:98:3b:ee:bc:02:61:23:04:80:e3:3c:c9:
                    fb:ef:e8:87:5c:5b:ad:eb:57:3a:65:8f:fd:c1:dc:
                    0e:67:44:f9:ef:b8:7d:09:57:99:81:f5:a0:6f:89:
                    1d:b7:60:d3:63:d1:ae:ab:44:64:4e:b2:94:79:63:
                    58:b0:bb:41:18:d8:3c:a2:dd:9f:8a:ed:d3:7c:44:
                    0a:13:45:20:29:e3:15:d8:0e:32:58:7c:8e:21:01:
                    dc:52:89:8c:8b:7b:75:82:1b:59:20:32:90:2b:81:
                    8f:46:4d:98:74:1d:1e:03:ef:1c:59:59:3b:b7:92:
                    29:df:c0:fb:1a:ad:c8:45:6a:21:03:c2:2e:5a:b3:
                    c0:58:64:e3:5a:8f:b5:de:7e:9d:2a:4b:99:d8:54:
                    a4:29:14:bf:0c:4d:35:9b:f3:ce:6d:63:a9:39:5c:
                    48:ec:47:6d:dc:08:31:d6:0f:f6:85:f3:53:f4:57:
                    57:21:86:6a:10:58:d1:5f:02:9b:2b:ca:7a:44:34:
                    6c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:15:C1:5A:A8:4F:63:22:AD:ED:3E:46:77:4F:A5:FF:67:53:1E:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/6628eb45-4342-3422-a500-29e3c8aa3b80.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.crl

            X509v3 Authority Key Identifier:
                keyid:80:B2:BF:71:D3:A4:8D:54:39:E1:B6:9F:8B:B0:32:31:8E:0E:6C:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.157.193.0/24
                  205.157.203.0-205.157.204.255
                  205.157.240.0/24
                  205.157.242.0/24
                  205.157.245.0-205.157.251.255
                  205.157.254.0/23
                  206.180.0.0/23
                  206.180.4.0-206.180.8.255
                  206.180.12.0/22
                  206.180.25.0/24
                  206.180.27.0-206.180.28.255
                  206.180.36.0/22
                  206.180.52.0-206.180.54.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:aa:6e:68:48:8c:dd:bf:9a:88:7b:49:81:18:a6:2d:ae:e4:
         7f:a5:3a:70:09:0b:20:d6:64:dd:12:6a:aa:1b:bd:84:73:d6:
         23:8e:8b:89:f9:cf:32:4f:bf:a4:4b:14:9c:08:02:91:c2:06:
         94:bc:3c:f4:c6:bc:30:74:93:4c:a7:49:a3:6f:c0:08:0a:32:
         36:ae:b5:13:ca:b7:00:20:4d:18:1d:8e:36:b5:d1:1a:70:db:
         a5:d4:00:be:e8:8c:db:f0:98:f7:58:7b:cf:39:28:aa:91:5a:
         9d:a6:a3:89:88:95:9b:3a:c5:e7:9a:c8:ca:63:0f:16:76:b7:
         93:9e:59:e0:2d:41:2c:d3:8b:8a:29:e8:77:b1:8f:a4:b3:41:
         24:16:99:37:d6:3f:80:68:18:93:60:82:7d:04:58:ed:7d:51:
         4b:35:72:da:be:40:88:e2:4c:83:9a:80:50:04:97:2d:28:af:
         49:13:b3:1d:a8:42:01:86:20:2b:e2:0e:50:fe:d4:44:6e:d9:
         41:7d:de:f0:da:4d:0a:67:91:ad:6b:ab:fa:a1:a8:72:48:29:
         bf:cd:ed:bc:13:2f:ba:ba:77:68:b4:6f:bf:8d:66:3c:0c:6a:
         07:79:bd:b0:31:c5:7a:7b:b1:07:b3:35:fb:16:87:b0:74:a5:
         ec:54:b2:f9
-----BEGIN CERTIFICATE-----
MIIGtTCCBZ2gAwIBAgIUAQ0Mn0MoWEJQrfPmup5k+DDXMwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTk4Y2M4ZTUtMWZjZi00YzI4LTlhZGItNDVlMmNjMWMw
MjNjMB4XDTIzMDYyMzEzMDAxOVoXDTIzMDkyMTEzMDAxOVowLzEtMCsGA1UEAxMk
YjViNTgzZDktY2M0ZC00MDIzLWJhYjYtODViOWFiM2VjNTVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAJ/9L5TJWVPovoqmdW8ddKxIsu8xjCd3x9v
te93tkrKFuYBPNuMPHNZwemAZln3TQgYUQsyl/Uwh/Yv7+KYO+68AmEjBIDjPMn7
7+iHXFut61c6ZY/9wdwOZ0T577h9CVeZgfWgb4kdt2DTY9Guq0RkTrKUeWNYsLtB
GNg8ot2fiu3TfEQKE0UgKeMV2A4yWHyOIQHcUomMi3t1ghtZIDKQK4GPRk2YdB0e
A+8cWVk7t5Ip38D7Gq3IRWohA8IuWrPAWGTjWo+13n6dKkuZ2FSkKRS/DE01m/PO
bWOpOVxI7Edt3Agx1g/2hfNT9FdXIYZqEFjRXwKbK8p6RDRsWQIDAQABo4IDxzCC
A8MwHQYDVR0OBBYEFM0VwVqoT2Mire0+RndPpf9nUx7fMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThj
YzhlNS0xZmNmLTRjMjgtOWFkYi00NWUyY2MxYzAyM2MvNjYyOGViNDUtNDM0Mi0z
NDIyLWE1MDAtMjllM2M4YWEzYjgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4Y2M4ZTUtMWZjZi00YzI4LTlh
ZGItNDVlMmNjMWMwMjNjL2U5OGNjOGU1LTFmY2YtNGMyOC05YWRiLTQ1ZTJjYzFj
MDIzYy5jcmwwHwYDVR0jBBgwFoAUgLK/cdOkjVQ54bafi7AyMY4ObJowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThjYzhlNS0xZmNmLTRjMjgtOWFkYi00NWUy
Y2MxYzAyM2MuY2VyMIGQBggrBgEFBQcBBwEB/wSBgDB+MHwEAgABMHYDBADNncEw
DAMEAM2dywMEAM2dzAMEAM2d8AMEAM2d8jAMAwQAzZ31AwQCzZ34AwQBzZ3+AwQB
zrQAMAwDBALOtAQDBADOtAgDBALOtAwDBADOtBkwDAMEAM60GwMEAM60HAMEAs60
JDAMAwQCzrQ0AwQAzrQ2MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr
BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz
Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBAJSqbmhIjN2/moh7SYEYpi2u5H+lOnAJ
CyDWZN0SaqobvYRz1iOOi4n5zzJPv6RLFJwIApHCBpS8PPTGvDB0k0ynSaNvwAgK
MjautRPKtwAgTRgdjja10Rpw26XUAL7ojNvwmPdYe885KKqRWp2mo4mIlZs6xeea
yMpjDxZ2t5OeWeAtQSzTi4op6Hexj6SzQSQWmTfWP4BoGJNggn0EWO19UUs1ctq+
QIjiTIOagFAEly0or0kTsx2oQgGGICviDlD+1ERu2UF93vDaTQpnka1rq/qhqHJI
Kb/N7bwTL7q6d2i0b7+NZjwMagd5vbAxxXp7sQezNfsWh7B0pexUsvk=
-----END CERTIFICATE-----
Generated at Tue Aug 1 19:50:06 2023 by rpki-client on console-ams.rpki-client.org