Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/602c00ab-7c01-365b-9bd3-caa15d43e168.roa
File:                     602c00ab-7c01-365b-9bd3-caa15d43e168.roa (raw, json)
Hash identifier:          Uyp5xxPuzcQ7qO7zm6eO6hANGWPIt3P2W/uHjAMSWTQ=
Subject key identifier:   92:07:AA:6D:51:F0:6B:4C:38:BB:1A:EE:E6:D5:7A:92:B3:71:2E:84
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F432858413577AE2ECA9EF373F049DAC0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/602c00ab-7c01-365b-9bd3-caa15d43e168.roa
Signing time:             Tue 05 May 2020 17:33:37 +0000
ROA not before:           Tue 05 May 2020 17:33:37 +0000
ROA not after:            Sun 15 Jun 2025 04:00:00 +0000
asID:                     6939
IP address blocks:        108.165.87.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:35:77:ae:2e:ca:9e:f3:73:f0:49:da:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  5 17:33:37 2020 GMT
            Not After : Jun 15 04:00:00 2025 GMT
        Subject: CN=c19c29b5-0026-4116-b1cb-b4a9fa4cce3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ea:cc:29:7d:4d:9f:d2:56:35:3c:4c:33:eb:
                    59:43:26:9d:56:ca:9f:c0:0f:46:72:c6:92:96:18:
                    e3:b1:1d:fa:ee:78:7b:b2:43:cf:f1:95:66:04:06:
                    5b:d0:05:28:72:0e:81:f0:64:52:bd:4b:00:4f:df:
                    e8:7a:9c:3d:41:c1:d1:fb:45:1d:97:41:3b:a9:9c:
                    11:4f:d1:81:75:f7:c2:19:04:78:37:a8:0e:96:81:
                    59:90:7f:00:3a:9a:ba:2d:7d:2e:d5:7b:13:5f:5c:
                    5c:3f:21:30:30:e2:af:ec:7d:fd:c8:a6:95:8c:18:
                    72:ec:93:a3:6d:a1:12:f8:f0:76:86:12:38:b4:7d:
                    a6:f3:f6:e2:76:6f:64:77:2d:fc:7c:fe:5d:84:a8:
                    f3:bd:e2:8f:59:df:32:f1:ef:dc:34:7a:b6:a0:b9:
                    b4:1a:dc:30:6b:6e:94:eb:fe:d5:2e:c5:e4:d0:e0:
                    d5:ab:96:65:11:e9:20:a6:ec:a2:c3:fb:8e:5c:6f:
                    8d:59:83:66:bf:21:d3:6e:01:78:9d:74:d0:ba:b8:
                    ef:22:b8:98:1c:68:64:28:ae:3c:98:61:8c:f3:ba:
                    fe:e1:96:0b:e4:15:dd:42:5f:cc:81:fa:36:c1:71:
                    b6:e8:2a:f9:a2:d4:46:70:5f:e5:ca:aa:bd:70:32:
                    ea:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:07:AA:6D:51:F0:6B:4C:38:BB:1A:EE:E6:D5:7A:92:B3:71:2E:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/602c00ab-7c01-365b-9bd3-caa15d43e168.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.87.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:26:a8:00:6f:c6:70:2b:b9:d0:73:ea:3a:3f:71:9f:77:5b:
         24:17:5e:43:05:de:a8:9c:12:47:2c:a6:4c:ea:02:7f:9e:1b:
         10:c2:3e:b8:60:2f:5f:f3:24:dc:35:bd:06:53:25:ed:ff:5f:
         b2:be:73:5c:ff:c4:30:3f:56:e2:ec:ce:b2:a1:ae:93:4b:67:
         ac:59:88:31:dc:5f:c2:84:41:02:c8:9d:a2:25:94:3e:fe:ca:
         10:30:d2:7d:5d:54:23:e6:17:e4:2c:9f:f1:ca:ef:cd:5d:29:
         c9:e8:32:6a:59:b0:90:2f:7d:14:e0:c8:d5:b9:19:44:ac:48:
         dd:1d:be:70:8e:bc:3d:1a:77:ef:79:e3:62:ad:24:61:a5:49:
         3e:86:96:c1:04:aa:96:da:8d:fd:bb:5d:fb:19:1e:f6:ae:fd:
         fa:34:26:d1:cb:e0:dc:d5:35:25:f7:16:a1:a8:2a:f9:f3:c4:
         c7:a8:43:e1:0b:31:01:c6:c5:18:31:88:bc:1f:98:70:2a:d7:
         ca:a0:8d:0b:f7:51:3c:2a:b2:2f:a2:7e:0f:70:4e:11:bd:37:
         50:3d:96:77:77:d2:01:a6:5f:89:33:dc:a7:29:b3:82:5e:7b:
         c3:da:10:90:9d:f1:9e:47:68:28:5f:9f:ab:be:db:31:76:d6:
         d3:6f:09:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----