Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/107be446-3440-3c96-9488-0281e1b0f9de.roa
File:                     107be446-3440-3c96-9488-0281e1b0f9de.roa (raw, json)
Hash identifier:          QrScgSIBgsRoYP7HCLi1MmZgSHSjd1ZHT2iL6c4CL7A=
Subject key identifier:   CE:0C:D8:BA:97:A1:87:A1:13:3B:0D:22:59:F9:D9:46:20:97:00:30
Certificate issuer:       /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
Certificate serial:       010D0C9F43285843235C5CE1A89597BF4C859980
Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/107be446-3440-3c96-9488-0281e1b0f9de.roa
Signing time:             Thu 07 Sep 2023 00:11:35 +0000
ROA not before:           Thu 07 Sep 2023 00:11:35 +0000
ROA not after:            Wed 06 Dec 2023 01:11:35 +0000
asID:                     834
IP address blocks:        72.14.132.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:23:5c:5c:e1:a8:95:97:bf:4c:85:99:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
        Validity
            Not Before: Sep  7 00:11:35 2023 GMT
            Not After : Dec  6 01:11:35 2023 GMT
        Subject: CN=48780cad-0be3-402e-b7a0-e63305c0d108
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:3e:c5:e7:fa:9c:f0:cb:a3:c2:8b:21:d9:e4:
                    9a:b5:90:53:b4:8b:54:af:7b:76:f3:80:78:76:11:
                    79:82:67:04:c3:ab:cd:f8:14:5f:c7:90:95:0b:e7:
                    09:18:f0:98:34:d6:db:52:95:24:c3:1b:8a:3b:aa:
                    a7:05:f5:1d:b4:85:01:a2:cb:f4:b3:90:41:29:d6:
                    79:0f:06:03:07:74:83:23:4a:15:53:e7:c4:10:67:
                    99:05:b9:17:19:52:74:18:76:a4:b4:4c:aa:14:66:
                    57:a2:28:f4:1f:51:c8:0b:55:0a:8a:4b:06:2d:93:
                    38:0c:ed:fe:c4:5f:6d:fe:ca:f1:92:d3:1a:e1:c7:
                    c0:1b:a1:3d:bb:f9:92:88:dd:a4:45:2f:98:a1:0d:
                    7c:08:ff:b8:7c:8d:7f:07:5e:b0:a6:ae:e7:63:0e:
                    15:35:1e:6e:3f:fc:28:e7:2e:a2:25:55:d8:63:b8:
                    de:53:70:08:9b:8f:e7:92:9c:9d:95:89:1b:a5:f6:
                    dd:83:b5:00:7d:98:e9:2d:e6:78:e6:5d:63:af:46:
                    98:c3:67:57:1d:47:f8:44:c8:6d:87:38:85:bb:17:
                    8c:cb:1f:7b:b0:fe:26:02:a8:46:b4:f8:d9:01:0d:
                    57:09:f2:76:3d:54:52:9b:7b:b7:8c:33:7e:2d:7a:
                    bf:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:0C:D8:BA:97:A1:87:A1:13:3B:0D:22:59:F9:D9:46:20:97:00:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/107be446-3440-3c96-9488-0281e1b0f9de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl

            X509v3 Authority Key Identifier:
                keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.14.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:71:ec:da:02:11:45:c2:89:c1:64:9f:e1:30:b0:fa:42:30:
         49:ca:39:34:f9:fe:fb:a7:c0:3c:46:8e:35:ef:2d:ea:1e:3e:
         ae:85:69:59:d8:8f:0e:c9:e3:8c:a0:1e:00:f8:17:88:45:91:
         25:d8:94:fc:76:5c:c7:c1:a2:33:13:3f:90:80:57:a4:0f:46:
         c8:4c:73:e2:38:69:1d:6f:49:cc:d8:6b:5b:f1:38:1b:2e:11:
         52:46:77:b0:26:0b:e6:38:ab:95:fd:cc:c9:62:6b:2f:eb:5f:
         19:19:40:ae:28:4e:4f:78:05:4a:8a:cd:0b:d6:a6:65:8a:a7:
         97:d0:3d:98:c8:a4:c2:96:d6:7c:ec:05:00:22:47:eb:65:d2:
         30:0d:e6:20:b2:02:14:a3:04:03:5b:55:17:35:a1:b4:30:f3:
         6c:47:01:4a:14:d7:a5:14:df:bf:d2:36:10:cc:6d:6a:95:53:
         6f:11:fb:c7:02:6d:ef:a4:70:28:f3:db:d9:28:ba:40:de:50:
         c2:d7:12:d9:89:81:ba:04:4a:97:45:aa:98:ce:32:ae:bf:f8:
         85:d7:53:91:75:79:63:b2:94:dc:57:3e:a3:3f:b3:e0:7f:6b:
         b1:4b:e0:fe:16:b8:52:e3:17:58:0e:0d:ca:bd:6f:74:6d:92:
         8a:25:1f:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----