Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3d5c50cc-0ea8-3f66-965b-e25573ae0d52.roa
File:                     3d5c50cc-0ea8-3f66-965b-e25573ae0d52.roa (raw, json)
Hash identifier:          d3hdM90tVAjuekz8IPxQ0OVUDCe6RnER+TKSRxO2PWg=
Subject key identifier:   58:AC:15:C4:54:D7:89:FD:55:7F:07:DE:67:A5:9C:C0:0D:93:80:C2
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858418B39F19F681F6729314AD0C0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3d5c50cc-0ea8-3f66-965b-e25573ae0d52.roa
Signing time:             Tue 05 May 2020 17:33:37 +0000
ROA not before:           Tue 05 May 2020 17:33:37 +0000
ROA not after:            Wed 16 Jul 2025 04:00:00 +0000
asID:                     834
IP address blocks:        108.165.125.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:8b:39:f1:9f:68:1f:67:29:31:4a:d0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  5 17:33:37 2020 GMT
            Not After : Jul 16 04:00:00 2025 GMT
        Subject: CN=df0b1b7f-53a6-4fa1-92a1-0b2207fa5d6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:cd:52:3e:2b:0d:df:79:d6:df:13:24:7f:9a:
                    72:c6:c3:e1:44:02:fc:d1:30:e8:41:f3:86:33:e9:
                    c4:2e:2a:e4:04:ba:3b:49:0e:72:61:cd:3c:bf:f3:
                    41:36:c6:dc:c7:2a:56:c8:f3:70:4e:53:a3:d8:3b:
                    ea:fa:a1:84:a4:63:f3:44:a2:7b:f8:b4:2a:ef:b4:
                    87:71:59:6f:8b:d7:02:2d:34:84:4a:4a:7f:cb:a9:
                    3f:fb:4a:33:d3:d5:98:99:3c:45:95:0d:d0:cd:ed:
                    fc:43:ec:af:98:b8:01:e0:2c:3a:88:65:5d:a3:4d:
                    9b:b1:48:35:71:09:df:d0:4a:9a:0d:b7:bb:46:55:
                    92:d6:ca:bb:95:24:41:52:d7:7d:bd:a2:79:d2:11:
                    08:7a:7d:6d:ee:89:3a:76:bc:bf:34:c9:e2:80:6b:
                    c2:be:87:0e:95:c1:6e:ac:0d:4f:d1:56:54:26:85:
                    21:e3:e6:a4:e8:a6:58:c6:8e:f7:13:71:dd:2c:c4:
                    f8:a1:af:53:a3:12:b9:3b:ad:15:11:68:82:0c:a6:
                    ed:10:32:df:af:c1:a2:81:ea:56:3a:33:1b:75:0c:
                    a4:53:93:d8:bc:6f:cf:3d:59:b6:14:29:76:6f:ba:
                    84:d8:94:38:9e:2a:42:ab:34:db:8d:2e:0b:34:47:
                    ce:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:AC:15:C4:54:D7:89:FD:55:7F:07:DE:67:A5:9C:C0:0D:93:80:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3d5c50cc-0ea8-3f66-965b-e25573ae0d52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:69:5b:4e:9a:7a:fa:bf:6c:3e:f5:31:d0:bc:25:7d:00:a2:
         a2:a9:17:81:b2:dd:f3:c8:d2:6e:3e:f9:e2:1d:e5:d8:64:7d:
         ef:5a:f2:7b:84:93:25:36:3f:a6:a8:4b:4b:28:2a:1f:5b:f5:
         16:23:84:4a:0e:19:67:a6:10:a7:f6:21:ca:dd:3c:ca:f9:3d:
         0f:44:52:af:9a:18:8d:90:29:f2:82:f9:ad:b5:2b:53:00:ff:
         f6:73:5a:84:47:d3:fb:91:d2:72:9e:9d:85:b3:df:29:ec:c7:
         57:34:2a:fa:71:41:de:67:9e:67:cf:1f:ca:d3:f6:31:6d:5b:
         88:c6:62:91:a6:56:1b:b6:c1:25:b5:fd:62:03:68:ab:a2:27:
         36:e7:77:ba:ab:2f:de:88:1e:a1:14:2b:9b:72:f7:1c:f9:fd:
         8f:99:1d:77:83:53:c7:20:06:bd:b4:83:c2:54:4e:b6:02:ae:
         9c:9a:04:dd:3e:44:a5:44:89:aa:79:64:75:d3:24:78:c6:44:
         10:c2:4e:75:66:df:0d:f4:19:03:94:2a:49:f0:25:1e:40:ce:
         95:b7:63:5b:93:cb:ee:ef:c4:f0:89:af:bf:c2:e3:7b:56:14:
         e7:30:6e:48:f0:d0:c1:e1:9d:0c:bb:55:2d:c0:fd:31:f7:b3:
         56:cc:55:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----