Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/9a0c7156-2d57-3983-8850-5b2df367db74.roa
File:                     9a0c7156-2d57-3983-8850-5b2df367db74.roa (raw, json)
Hash identifier:          rp15fyqSC9bxsPbyOHMK0XmoVtvI9628UUSwLKzHcRM=
Subject key identifier:   2F:BB:B2:FC:CB:D2:B7:5A:F5:8C:F2:DD:97:FB:85:E1:61:0D:85:ED
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328576D51CC73C042CFC16496F1EA30
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/9a0c7156-2d57-3983-8850-5b2df367db74.roa
Signing time:             Sat 14 Jul 2018 03:59:53 +0000
ROA not before:           Tue 10 Apr 2018 04:00:00 +0000
ROA not after:            Mon 10 Apr 2028 04:00:00 +0000
asID:                     2914
IP address blocks:        192.41.171.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 28 Mar 2024 21:12:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:64:96:f1:ea:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 04:00:00 2018 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=1b139669-c99d-472b-8887-6df4a67125c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c8:9d:60:1b:4f:1d:77:e9:6f:4b:fd:a9:fd:
                    24:0e:14:46:a7:5f:a1:d2:7e:85:49:bb:21:03:f1:
                    1b:a1:3e:86:29:07:3d:dd:c2:75:8d:08:ab:c2:bf:
                    42:48:05:a1:d5:c1:5b:de:31:2a:79:66:e5:d4:75:
                    fe:bc:3d:47:5b:77:59:6c:e3:dd:92:17:50:11:3f:
                    1b:50:b4:4e:1f:6b:7c:f1:96:05:e0:dd:dd:96:ae:
                    5e:ce:ef:45:21:95:91:ee:30:16:db:17:ea:08:95:
                    c2:fe:85:2e:df:2e:4c:90:48:4d:8c:fc:a7:d9:df:
                    d1:14:44:98:6d:83:74:7e:76:fd:af:05:9d:5c:48:
                    9a:85:30:38:1d:7c:e1:ba:ce:b0:5a:32:51:4e:1e:
                    8d:27:c2:9f:d9:65:54:f7:13:f2:1d:98:59:8d:ea:
                    6e:8a:92:49:6d:ed:73:fd:26:d7:36:04:7d:94:f9:
                    8f:7d:0e:b8:3b:10:f5:4d:9e:16:59:45:3f:45:f1:
                    af:6d:85:84:0e:b8:d3:e7:ae:69:3c:f1:0c:de:2a:
                    e4:4c:85:16:29:8d:2b:a5:15:47:4d:66:31:88:aa:
                    78:05:e7:16:9e:48:5d:23:0f:4f:03:f4:32:8e:a5:
                    1e:37:88:01:c5:cf:3e:48:94:cc:b0:a5:19:10:98:
                    72:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:BB:B2:FC:CB:D2:B7:5A:F5:8C:F2:DD:97:FB:85:E1:61:0D:85:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/9a0c7156-2d57-3983-8850-5b2df367db74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.41.171.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:b7:35:02:19:0b:71:84:20:f5:ee:22:8b:e1:d2:c0:76:35:
         ec:4f:fe:26:f3:d6:b5:11:81:2f:80:bd:91:fd:ba:cf:2d:b4:
         a4:c2:4b:56:b7:f2:6c:3a:d0:ab:c8:13:da:ab:61:ea:9e:b1:
         44:8c:b6:71:a1:10:9e:a5:17:26:c6:0d:d0:43:38:a3:a7:25:
         fa:b5:6b:69:26:b7:03:82:8f:18:1e:c0:66:8f:f1:f6:3a:81:
         1d:c2:33:a7:93:e4:6a:92:04:73:18:d4:7c:b0:f5:d0:32:a9:
         18:3f:da:c2:cb:30:7a:de:85:74:e5:4a:0d:a3:f9:f3:58:15:
         c9:a0:72:47:33:6a:0f:18:b8:6c:01:51:3e:a8:f0:7b:07:28:
         14:d3:ef:c6:58:13:8f:a0:32:61:88:bc:f7:57:b4:eb:77:b6:
         da:de:48:7f:7a:24:41:36:cd:a0:2f:2f:e4:18:da:a4:ce:44:
         a5:9f:47:e1:de:06:43:ad:ef:96:9c:55:37:f0:d6:13:21:95:
         e7:ce:1e:39:56:41:1e:fa:2c:9b:6a:40:c9:69:cd:56:23:77:
         28:37:fa:25:1b:31:05:5d:25:dd:e3:20:32:21:09:45:2c:9f:
         a1:51:e6:15:2c:1d:1a:91:30:76:3a:98:6e:b7:d8:6b:48:cf:
         2c:bb:4a:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----