Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/f8bc910d-1a9f-3ae7-a2f3-6336b6654c7d.roa
File:                     f8bc910d-1a9f-3ae7-a2f3-6336b6654c7d.roa (raw, json)
Hash identifier:          GZh9wtME7npoR5LNWtB80pAVeVwrBRB0O0jOzou142A=
Subject key identifier:   BA:02:59:6C:BF:DC:D8:E3:51:73:B9:11:39:02:7E:A0:70:AB:55:DC
Certificate issuer:       /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
Certificate serial:       010D0C9F43285842DAC1E3DCC4D3672CDB65C800
Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/f8bc910d-1a9f-3ae7-a2f3-6336b6654c7d.roa
Signing time:             Sat 12 Aug 2023 00:02:09 +0000
ROA not before:           Sat 12 Aug 2023 00:02:09 +0000
ROA not after:            Fri 10 Nov 2023 01:02:09 +0000
asID:                     834
IP address blocks:        72.14.135.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:da:c1:e3:dc:c4:d3:67:2c:db:65:c8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
        Validity
            Not Before: Aug 12 00:02:09 2023 GMT
            Not After : Nov 10 01:02:09 2023 GMT
        Subject: CN=93494416-1d0b-4799-b1ad-775aa36669ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:89:d6:2c:22:2f:63:f7:c3:3d:35:d3:3f:3b:
                    35:a9:1c:e0:6c:1d:eb:92:c0:28:f8:a8:d7:3a:1a:
                    74:3a:85:75:6a:6a:30:a0:db:cf:82:e2:a4:33:0c:
                    5f:23:74:55:8c:5a:72:ef:54:ca:84:ec:e2:a0:e9:
                    bf:2a:c1:e1:bc:de:14:c0:cc:16:82:c3:02:82:3c:
                    12:1e:2e:b1:f2:4a:9a:2c:20:e9:0c:5a:33:0c:1d:
                    bb:50:84:1f:4c:84:c7:b7:70:22:4c:1e:8b:53:2f:
                    0b:dc:26:e4:8c:79:cf:79:b4:70:1d:6a:f1:1d:4d:
                    08:d8:47:8d:9f:3e:91:08:90:ca:c0:1c:5a:cf:88:
                    7e:31:8b:c4:61:03:26:98:e3:a9:61:be:54:d1:5a:
                    6a:1c:f0:bd:ff:6b:90:ca:8e:a3:8a:1b:02:ba:7c:
                    3a:06:2f:3a:11:60:fd:e3:a7:e9:34:df:a2:06:ca:
                    86:8a:7a:7d:ef:99:06:b9:1d:c8:3e:b2:8d:00:c2:
                    5b:a6:d2:52:85:a5:d4:b9:4a:eb:03:cc:b1:2b:11:
                    60:85:37:ab:b0:84:8f:04:60:67:af:d2:a9:cc:76:
                    a9:fe:7b:69:59:ea:74:2a:40:5a:6e:0e:70:ba:57:
                    2f:35:9e:00:9c:81:08:2e:14:78:49:c1:ac:45:55:
                    ff:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:02:59:6C:BF:DC:D8:E3:51:73:B9:11:39:02:7E:A0:70:AB:55:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/f8bc910d-1a9f-3ae7-a2f3-6336b6654c7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl

            X509v3 Authority Key Identifier:
                keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.14.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:80:95:c1:1c:8a:3d:ac:f0:26:88:3d:82:70:26:4d:36:db:
         01:3c:a1:ef:48:a6:61:c4:f0:c3:cd:d0:71:ef:9a:0c:e0:d8:
         2c:55:fc:f0:b3:30:75:1d:51:7b:df:44:df:bf:1d:50:d4:19:
         f9:71:03:89:c3:85:1f:c8:b8:11:0e:92:df:90:ad:14:73:86:
         b5:bf:33:86:06:20:a7:ed:2c:0b:4b:05:90:1b:cc:26:b6:26:
         cf:ac:df:2d:5d:89:c0:cd:5b:ad:f1:c0:34:07:10:b5:6a:d5:
         e3:82:20:96:e0:da:86:d8:b1:ea:71:40:94:ad:6c:14:7c:d2:
         48:2d:46:18:b3:d8:91:96:be:0f:db:5f:79:8f:76:44:22:6d:
         df:8e:25:fd:c0:b2:76:18:65:bd:29:d9:e3:75:71:2b:ff:82:
         a0:a1:2c:b9:1d:22:95:be:a3:a5:3f:c5:44:db:09:58:7d:69:
         5c:38:b5:4c:c4:3f:f9:47:51:15:1a:fc:97:bd:c2:df:a8:2b:
         8e:19:9a:17:70:37:e6:75:c2:53:ae:20:85:16:6d:45:b7:21:
         42:6e:98:b5:16:48:e1:30:c9:bf:0b:18:d7:e2:9f:66:e7:ba:
         f7:c6:0b:2e:1b:84:62:0e:d8:69:b2:d4:89:95:67:37:cf:02:
         47:0e:c4:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----