Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/488a0897-5370-31fe-bf0a-f2a22f85d442.roa
File:                     488a0897-5370-31fe-bf0a-f2a22f85d442.roa (raw, json)
Hash identifier:          Y2M2mSO6GN5iyZxNFRLsdsHJWTazBLvneRpRKV/z/dM=
Subject key identifier:   FA:AC:5E:6E:96:5D:A4:05:F8:B9:61:FF:5B:02:65:36:D5:E7:52:98
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858417CD03FE55257B42D08504560
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/488a0897-5370-31fe-bf0a-f2a22f85d442.roa
Signing time:             Tue 05 May 2020 17:33:37 +0000
ROA not before:           Tue 05 May 2020 17:33:37 +0000
ROA not after:            Fri 11 Jul 2025 04:00:00 +0000
asID:                     834
IP address blocks:        108.165.169.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:7c:d0:3f:e5:52:57:b4:2d:08:50:45:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  5 17:33:37 2020 GMT
            Not After : Jul 11 04:00:00 2025 GMT
        Subject: CN=473e4a11-1ee3-4de7-a0a4-6e8b6a9be501
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:69:78:29:df:77:c7:e2:a9:51:d6:9e:fa:2a:
                    16:5e:a6:56:6f:84:be:0a:d3:0b:db:ad:f2:94:0a:
                    f8:0c:f7:f0:ed:f6:8d:54:82:1a:28:1c:39:4d:a0:
                    c6:ba:34:36:0d:df:db:eb:13:3d:23:e1:0a:d3:1e:
                    b7:83:67:53:0c:6a:80:04:8b:99:ed:5a:58:8b:f1:
                    8b:19:66:86:d9:3a:70:95:57:e0:7c:7f:6d:14:ff:
                    18:e5:25:06:8c:d4:ba:ff:b6:2a:f9:e6:ae:1e:d4:
                    82:1b:b7:d7:e6:15:52:ef:8f:76:7f:9b:f1:1d:d8:
                    6c:f3:51:02:7d:cc:78:e7:07:b4:b9:08:cf:b9:55:
                    66:46:55:a5:c5:ea:d6:75:26:29:2d:62:6f:fd:13:
                    f2:d5:95:8c:19:7a:19:15:60:8b:72:04:dd:86:b6:
                    4a:1a:20:2a:4d:e5:da:c8:35:b7:6e:cf:3b:e0:84:
                    99:d3:51:d2:09:6c:8d:1a:39:45:c9:bb:99:1e:44:
                    82:a4:04:08:dc:45:74:6c:de:f1:9d:a6:37:cb:da:
                    16:d4:cd:ae:44:24:d1:8f:0f:51:ec:19:0f:42:6f:
                    e9:0d:a2:8b:46:98:f8:cf:d7:1e:76:9a:35:ed:b6:
                    78:19:d0:95:56:29:9f:be:16:8d:2f:56:01:31:83:
                    c3:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:AC:5E:6E:96:5D:A4:05:F8:B9:61:FF:5B:02:65:36:D5:E7:52:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/488a0897-5370-31fe-bf0a-f2a22f85d442.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.169.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:96:5b:c3:dc:09:f4:1f:22:de:58:ea:19:ed:a4:d9:9f:83:
         c8:fb:0a:2a:b4:60:f6:a5:ef:d0:86:5b:71:62:ca:ef:26:8e:
         ce:2f:68:ea:b1:9e:37:e1:11:79:74:c2:1e:04:c2:cd:40:da:
         6d:70:f3:e8:80:e8:75:fb:01:3f:f2:25:57:1e:e0:83:b8:a2:
         fc:b1:de:f7:8f:5a:e0:a9:c6:50:3d:c9:24:8d:cc:b2:82:73:
         0b:38:49:53:44:ec:0d:c5:e6:52:bd:43:8d:f0:99:7e:09:7a:
         66:e6:c2:da:36:57:aa:05:98:f2:d1:bb:f2:af:db:28:4b:33:
         7c:f5:b9:80:08:95:0d:d7:58:80:2c:04:46:5f:52:9b:56:b6:
         fd:6e:ec:cf:dd:bd:01:ce:61:eb:3a:89:ae:d3:00:8b:82:79:
         47:f6:74:f4:c5:cf:d0:8d:e6:96:82:36:d1:4e:c8:98:d8:2a:
         ba:ba:fe:fe:78:57:00:3c:7a:22:63:73:8d:76:57:b7:dd:9e:
         cb:9a:8c:64:e0:70:88:f4:d9:41:d6:5c:69:46:5e:d8:09:25:
         ea:ac:2d:21:99:37:30:80:f5:c9:41:84:22:6a:26:ac:9e:f3:
         ac:17:ee:44:26:6d:39:6d:5c:0c:25:05:39:17:a8:d7:66:f5:
         01:0b:05:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----