Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/72035496-9a97-3ac7-847c-42dc95276588.roa
File:                     72035496-9a97-3ac7-847c-42dc95276588.roa (raw, json)
Hash identifier:          BnKCDBXHaJjV0t2tjiYEbQjRo+wIYygCjnyK251xsxM=
Subject key identifier:   55:E3:16:39:8E:9B:24:AA:43:50:D0:C0:9F:64:49:D4:B7:E3:EE:5D
Certificate issuer:       /CN=063abcef-47ff-4267-9198-eb628aba7842
Certificate serial:       010D0C9F4328584580BDCAB5EBDF93633DB23EC0
Authority key identifier: 2D:3F:AD:6D:5B:1F:E5:FE:7F:3E:DB:22:2B:0E:F6:CC:CD:68:7D:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/72035496-9a97-3ac7-847c-42dc95276588.roa
Signing time:             Wed 10 Apr 2024 20:31:57 +0000
ROA not before:           Wed 10 Apr 2024 20:31:57 +0000
ROA not after:            Tue 09 Jul 2024 20:31:57 +0000
asID:                     399268
IP address blocks:        146.12.192.0/20 maxlen: 24

Validation:               Failed, certificate revoked on Tue 16 Apr 2024 20:19:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:80:bd:ca:b5:eb:df:93:63:3d:b2:3e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=063abcef-47ff-4267-9198-eb628aba7842
        Validity
            Not Before: Apr 10 20:31:57 2024 GMT
            Not After : Jul  9 20:31:57 2024 GMT
        Subject: CN=6949e307-31e7-4aff-b001-307be2b6f92f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:8b:27:da:e5:f4:c7:0c:9e:37:bc:1a:ee:e0:
                    de:57:ee:32:96:ce:08:62:c6:20:d1:ad:24:04:3c:
                    38:25:3e:48:4e:13:10:7f:96:e7:ad:fd:ca:b4:9b:
                    e7:cc:e9:4b:a2:67:8e:65:96:bb:37:44:ad:a4:83:
                    69:72:cd:2a:d8:70:a0:4f:8c:c0:a6:6f:a0:c4:21:
                    bf:c2:0c:b4:ee:ae:96:22:f7:2e:fc:22:ab:0b:dc:
                    97:23:bf:42:cc:63:55:87:8c:c1:72:05:73:66:06:
                    ec:7d:97:a5:59:ce:6c:4b:0c:3f:29:0e:81:d9:70:
                    e0:f6:4c:c3:90:5e:46:35:50:94:51:b4:6d:bd:b7:
                    35:b3:78:97:9f:92:dd:85:68:b8:9f:9b:c9:33:75:
                    6c:8f:bc:6b:e3:21:9c:a1:d6:5a:f2:4a:aa:af:d8:
                    0a:ef:c1:5d:15:a7:f9:55:76:cd:d5:3c:46:0b:65:
                    1e:18:92:0f:fe:70:05:1c:88:57:73:af:19:16:f8:
                    2c:14:2e:9d:e1:09:13:34:6c:18:78:e3:76:e0:63:
                    06:d9:89:1f:55:f1:98:21:07:1b:37:74:01:d9:f0:
                    34:b2:a1:1f:db:ed:6b:9e:fe:d4:19:22:18:90:5f:
                    56:f8:3a:41:b9:21:52:89:4b:2d:3c:7c:30:36:c4:
                    f5:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:E3:16:39:8E:9B:24:AA:43:50:D0:C0:9F:64:49:D4:B7:E3:EE:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/72035496-9a97-3ac7-847c-42dc95276588.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/063abcef-47ff-4267-9198-eb628aba7842.crl

            X509v3 Authority Key Identifier:
                keyid:2D:3F:AD:6D:5B:1F:E5:FE:7F:3E:DB:22:2B:0E:F6:CC:CD:68:7D:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.12.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:cc:f0:3b:e1:e3:9b:0f:ac:a0:6a:e3:ea:fb:65:02:e3:76:
         20:56:31:d7:54:51:30:d8:7d:fb:b1:45:11:90:3d:d4:29:aa:
         ed:af:c7:c8:ff:41:65:91:0e:8c:b3:62:e9:2f:3e:16:57:ae:
         30:66:6f:d7:e9:ad:90:07:d5:b9:49:24:b2:fc:de:f1:cd:c8:
         2b:6c:f8:1f:3f:65:e5:bf:01:cd:af:18:95:be:62:dd:cf:0e:
         ea:c0:88:0b:7a:76:e9:cb:e2:2f:2a:b9:a3:d1:0e:7e:11:ea:
         45:2a:ba:24:7c:30:de:34:f2:08:fc:a7:ad:f6:66:7b:8a:0e:
         ac:36:7f:db:b9:10:e1:6d:b4:e5:5a:7d:41:10:5c:e4:7c:60:
         38:e6:2c:a2:7e:05:6f:e6:2e:65:d4:b4:95:03:91:f9:2a:a0:
         34:5f:71:a5:91:67:ff:66:e8:67:f7:1d:f2:77:63:b3:31:07:
         4d:72:cd:d8:f9:58:8b:7d:86:df:8c:fd:6a:4d:59:e4:cb:a1:
         ac:a5:0b:1a:e5:bb:a7:c3:34:1f:06:e6:e0:a5:be:4c:1d:2e:
         e6:a3:2f:29:29:e2:14:dc:c5:4b:33:c5:64:21:3c:74:78:38:
         e5:1b:b1:bf:c3:9c:98:ad:f7:76:58:ce:1b:f5:52:b1:81:92:
         8b:77:20:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----