Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61/f5b09ac5-e617-3daa-ba46-41c6c34993dc.roa
File:                     f5b09ac5-e617-3daa-ba46-41c6c34993dc.roa (raw, json)
Hash identifier:          pcC599yt1il0vSebsZWx3vg+ESWW4WNTdwOCqDZzED8=
Subject key identifier:   F9:89:DF:D7:80:E8:84:77:1A:27:A0:74:E9:16:A0:A3:10:1A:6C:EF
Certificate issuer:       /CN=c54d5f74-3f0f-446f-b8af-258f72dede61
Certificate serial:       010D0C9F43285845355FD3C87BA879B3B17D0D00
Authority key identifier: B5:CA:9C:D5:AE:53:00:A7:55:A8:FB:D3:65:18:4A:07:D2:CC:E2:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61/f5b09ac5-e617-3daa-ba46-41c6c34993dc.roa
Signing time:             Thu 14 Mar 2024 20:37:00 +0000
ROA not before:           Thu 14 Mar 2024 20:37:00 +0000
ROA not after:            Wed 12 Jun 2024 20:37:00 +0000
asID:                     16509
IP address blocks:        199.167.224.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Thu 14 Mar 2024 20:54:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:35:5f:d3:c8:7b:a8:79:b3:b1:7d:0d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c54d5f74-3f0f-446f-b8af-258f72dede61
        Validity
            Not Before: Mar 14 20:37:00 2024 GMT
            Not After : Jun 12 20:37:00 2024 GMT
        Subject: CN=e48cad7d-12a4-4119-a396-8045685b0193
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:bb:09:7f:7a:ee:61:e3:14:8b:99:42:c1:5f:
                    f3:f8:ac:02:d8:34:d1:77:8f:e1:d8:ab:55:fe:93:
                    06:bb:ba:08:98:6f:f9:75:f9:af:c5:c9:50:42:be:
                    9b:e2:07:bc:93:e5:7f:73:7d:b3:01:3e:ce:06:9d:
                    3f:5f:86:13:96:5c:ce:79:30:20:ac:d3:c1:0a:10:
                    ab:72:4c:9a:a0:a5:2d:cb:10:bb:48:cf:7b:ad:5a:
                    3f:78:89:eb:50:74:62:be:a1:d9:6c:69:c3:b1:28:
                    5b:5b:9c:fc:52:cf:ec:a3:9e:57:0f:eb:55:0c:f9:
                    b6:5c:64:39:a9:6d:09:41:c5:c5:13:23:c6:6d:2b:
                    e6:ee:aa:11:92:43:a8:b1:f6:29:53:32:d6:f7:b8:
                    1b:f0:1a:0c:90:c4:b9:8d:4d:bb:fe:6f:2d:ff:bd:
                    de:18:32:6a:72:1e:9e:2a:6f:79:f0:d3:81:64:43:
                    3d:5e:05:c0:48:e4:5f:0f:a1:29:cf:96:be:f6:92:
                    47:dd:ed:e5:16:85:3b:86:5a:b3:01:63:4d:19:d0:
                    4f:d8:42:2d:5d:a7:1a:78:14:c4:17:6a:e3:a1:c8:
                    48:6d:6e:12:72:d2:ec:ab:39:ca:fc:c9:50:e3:f1:
                    af:ab:88:cf:bc:21:e4:33:84:c4:f6:5a:38:18:19:
                    91:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:89:DF:D7:80:E8:84:77:1A:27:A0:74:E9:16:A0:A3:10:1A:6C:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61/f5b09ac5-e617-3daa-ba46-41c6c34993dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61/c54d5f74-3f0f-446f-b8af-258f72dede61.crl

            X509v3 Authority Key Identifier:
                keyid:B5:CA:9C:D5:AE:53:00:A7:55:A8:FB:D3:65:18:4A:07:D2:CC:E2:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.167.224.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:e9:9b:26:5f:b7:73:ed:f2:95:44:25:4a:be:be:75:1a:44:
         16:7e:52:c7:80:00:58:b2:30:d4:3c:de:69:5f:ba:b8:01:c4:
         45:b7:72:96:8d:30:9a:5d:d6:52:a6:4d:3d:18:0b:b6:9b:13:
         5d:fa:09:71:36:36:5e:bc:ce:6d:c0:36:33:ad:08:e1:f9:f6:
         36:0a:15:75:67:50:90:73:0a:dd:b6:3f:83:03:c3:16:f3:ad:
         37:82:19:0d:61:71:a3:8d:0a:e9:b5:f9:12:e9:f5:6d:b4:27:
         fe:7c:2c:08:c8:a2:c8:d0:8d:76:ff:02:4c:34:6e:6d:05:62:
         3a:aa:61:79:6c:b6:4c:3d:bf:83:cb:c9:4a:6b:cf:ae:ce:51:
         e7:45:47:ea:0e:e8:66:21:13:ae:d8:70:9f:9c:85:88:3c:c8:
         cd:c9:dc:39:9b:84:b4:1b:2c:06:5a:0b:c4:7f:fb:ce:ac:e3:
         3d:11:76:8b:a5:29:a0:2f:f6:9a:06:13:2a:52:78:f0:85:c4:
         61:26:8b:2a:29:14:23:14:40:e5:fe:bd:30:a3:db:44:4d:e3:
         4a:b7:27:df:e1:43:61:fa:a5:0f:03:79:da:b7:9c:73:bd:fa:
         87:a1:c3:a5:a1:3a:04:92:50:26:c4:ad:e2:1d:ce:5f:62:07:
         47:df:0b:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----