Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c6588583-4ec4-3fe4-a863-732588b88fce.roa
File:                     c6588583-4ec4-3fe4-a863-732588b88fce.roa (raw, json)
Hash identifier:          VqBln0up5W3wO+niirIyScTaERikiSb0OadqIk3ASGc=
Subject key identifier:   BA:EA:70:CC:85:E1:20:01:39:BD:73:C6:03:EE:70:6A:4B:C2:FB:7D
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328583F5F838FBB2E3FEDBEED827F80
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c6588583-4ec4-3fe4-a863-732588b88fce.roa
Signing time:             Tue 05 May 2020 17:33:37 +0000
ROA not before:           Tue 05 May 2020 17:33:37 +0000
ROA not after:            Sun 29 Dec 2024 05:00:00 +0000
asID:                     61317
IP address blocks:        108.165.192.0/19 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:5f:83:8f:bb:2e:3f:ed:be:ed:82:7f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: May  5 17:33:37 2020 GMT
            Not After : Dec 29 05:00:00 2024 GMT
        Subject: CN=b1a8afdd-3978-4a37-9d09-2a99c6ff1118
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:46:f4:02:89:b1:94:74:cd:e7:66:9d:32:e6:
                    1e:83:b4:22:e6:eb:66:81:20:c1:81:c9:40:ac:af:
                    ef:bb:e8:ba:e6:95:17:41:93:bd:6a:fa:d1:28:57:
                    99:f4:47:e0:80:26:53:89:69:cf:cc:56:06:d9:a5:
                    9d:fa:f5:fe:fa:60:0f:e8:66:97:75:9a:e2:d3:4e:
                    39:c8:4d:aa:7a:8a:89:19:49:a5:3f:91:e1:08:93:
                    f1:d5:aa:3c:ac:d0:6b:a1:a1:20:72:18:eb:8d:08:
                    a6:56:6b:fb:18:a6:13:95:55:50:9b:34:8f:57:18:
                    6a:a3:8a:ce:95:7a:cf:e4:18:b8:6b:6f:14:eb:9f:
                    63:6a:c5:f7:c3:ea:e7:59:b1:58:d9:c4:e1:e4:c0:
                    cf:02:92:7e:aa:1a:50:0e:13:bf:ee:ae:17:a3:07:
                    df:be:70:4c:ff:ac:f3:57:15:36:fc:7e:f5:8a:64:
                    36:50:78:62:71:e5:83:7d:f1:b2:8c:49:d0:86:36:
                    01:79:89:60:46:a0:20:54:b4:8c:ae:4a:9a:49:18:
                    7c:19:d0:80:ed:82:a5:b9:e9:a1:de:84:87:bc:50:
                    e9:f5:3c:34:ba:20:b2:20:bc:01:61:67:ce:b8:80:
                    b5:5e:74:fa:35:18:7d:e5:94:3a:44:21:0c:1b:9c:
                    9b:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:EA:70:CC:85:E1:20:01:39:BD:73:C6:03:EE:70:6A:4B:C2:FB:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c6588583-4ec4-3fe4-a863-732588b88fce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.165.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:cd:12:37:ab:f4:25:1f:90:78:35:2f:3f:79:1e:cd:b8:52:
         a2:b2:38:c1:55:b9:13:de:4c:46:fe:f2:e8:a1:ac:1b:ee:09:
         76:53:fc:13:7c:f3:95:27:ad:59:19:c2:db:d1:05:3e:01:82:
         db:12:9b:ce:a0:b6:83:33:5a:5d:37:22:30:94:1e:98:3d:40:
         4a:2f:19:bc:a4:16:65:5e:3e:30:50:ad:15:73:e7:69:c1:44:
         40:9b:b3:76:6f:f1:96:df:23:dd:30:c5:72:c1:57:27:e1:0d:
         c9:a7:df:f7:f4:78:0e:68:b0:62:63:55:c5:b6:f0:16:e7:15:
         c8:32:d7:94:3e:2b:99:a0:e3:0a:b6:2e:88:d0:e6:9e:4f:5f:
         c3:52:1e:02:a6:83:aa:43:76:e3:da:db:fa:c1:f4:23:69:f4:
         00:45:13:4e:cd:21:98:20:4e:dc:0d:46:52:7a:4f:83:9d:6d:
         08:84:a6:ab:f1:68:c4:75:0d:42:44:a5:67:cf:f7:a9:7c:4c:
         4f:31:c2:33:e4:46:5f:56:26:57:8f:47:94:af:04:fe:e4:ed:
         e3:23:38:e1:64:fb:ef:a8:b0:71:5f:16:79:28:e6:40:cb:0f:
         99:b3:28:bb:1a:eb:58:30:13:74:68:6a:81:bc:1a:81:ce:8c:
         ba:6a:e9:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----