Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06507b45-b73b-4208-b43d-b7dc7a6fbfa9/c492fa45-40a4-3e83-bc24-6a3c366dca14.roa
File:                     c492fa45-40a4-3e83-bc24-6a3c366dca14.roa (raw, json)
Hash identifier:          mKoumrnZcwxcnFpxF82yKKz0ud/ZYBX3G/ekxcXCnVQ=
Subject key identifier:   E1:39:30:CC:77:A4:2D:73:14:CA:00:41:40:38:B6:60:03:2B:B0:05
Certificate issuer:       /CN=06507b45-b73b-4208-b43d-b7dc7a6fbfa9
Certificate serial:       010D0C9F4328584314C491F130AD9B6CED66D600
Authority key identifier: 36:23:A7:B2:74:A1:08:5A:0D:45:20:D5:78:BC:CB:34:88:A8:BB:98
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06507b45-b73b-4208-b43d-b7dc7a6fbfa9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06507b45-b73b-4208-b43d-b7dc7a6fbfa9/c492fa45-40a4-3e83-bc24-6a3c366dca14.roa
Signing time:             Fri 01 Sep 2023 18:44:26 +0000
ROA not before:           Fri 01 Sep 2023 18:44:26 +0000
ROA not after:            Thu 30 Nov 2023 19:44:26 +0000
asID:                     198652
IP address blocks:        206.168.89.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:14:c4:91:f1:30:ad:9b:6c:ed:66:d6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06507b45-b73b-4208-b43d-b7dc7a6fbfa9
        Validity
            Not Before: Sep  1 18:44:26 2023 GMT
            Not After : Nov 30 19:44:26 2023 GMT
        Subject: CN=7d8685cc-497b-4fa3-8406-e95e76848ba5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:92:f8:22:f8:15:f3:a4:26:ef:ef:a6:78:ad:
                    33:f1:1d:ca:c9:9e:8a:13:e9:94:22:bb:95:a2:c0:
                    29:16:79:8b:a5:05:8e:78:25:93:3c:cb:d6:69:9e:
                    ba:aa:57:f8:c5:bb:37:9c:2a:16:f7:0b:6e:7a:97:
                    81:1f:89:42:55:ce:01:bf:dc:87:9d:e4:14:62:75:
                    e2:8f:4e:ee:a1:89:22:bd:81:41:0c:f3:d2:0e:0f:
                    cb:6a:90:30:bf:a0:af:36:3d:31:d6:dc:91:a8:3b:
                    d9:c8:53:b3:ae:a8:06:28:b7:08:77:0d:ac:04:20:
                    10:45:56:c4:7d:de:bb:3a:be:5e:c8:a6:cf:a1:c8:
                    78:d8:0a:28:88:27:0b:c7:9e:06:5f:60:87:f9:75:
                    c3:eb:6c:5a:e6:7b:02:d2:ab:cc:b5:a9:89:a0:06:
                    c3:7c:8f:5b:a3:11:b8:c7:37:ff:49:87:3c:e5:1d:
                    86:f4:bc:33:09:2d:e5:30:20:2e:b7:b1:76:bb:b6:
                    c2:a1:b2:25:4e:ae:d5:45:ce:81:11:5d:58:45:11:
                    70:9a:10:95:ea:d4:f6:25:49:a3:ca:b9:30:03:d6:
                    37:9f:00:e5:92:f8:0f:c2:1b:5b:d4:3d:c9:34:fb:
                    f2:f2:c4:e7:e1:41:01:63:18:0f:27:cb:93:0c:d1:
                    38:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:39:30:CC:77:A4:2D:73:14:CA:00:41:40:38:B6:60:03:2B:B0:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06507b45-b73b-4208-b43d-b7dc7a6fbfa9/c492fa45-40a4-3e83-bc24-6a3c366dca14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06507b45-b73b-4208-b43d-b7dc7a6fbfa9/06507b45-b73b-4208-b43d-b7dc7a6fbfa9.crl

            X509v3 Authority Key Identifier:
                keyid:36:23:A7:B2:74:A1:08:5A:0D:45:20:D5:78:BC:CB:34:88:A8:BB:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06507b45-b73b-4208-b43d-b7dc7a6fbfa9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.168.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:e8:b3:46:42:11:89:b8:6b:88:70:ea:f6:39:8e:92:f2:0b:
         55:53:d6:32:4a:fe:2a:67:32:ca:f1:30:5c:17:43:b1:6f:5b:
         3a:a6:8b:8f:51:d3:fc:8c:89:e5:27:80:53:37:ac:c0:ae:44:
         3a:cb:2b:f7:1c:df:26:83:7b:c6:3f:cd:e0:68:43:e3:2b:6f:
         83:1b:58:a1:a5:7a:81:8e:86:e2:7e:fc:25:c5:d5:9b:ec:99:
         a6:c1:f2:51:81:bd:b3:17:57:e0:90:bb:de:c6:b5:e1:0f:86:
         f8:d3:2f:db:7a:44:c5:ac:5c:0b:47:8e:c1:81:4e:51:96:40:
         c8:ef:a8:4b:13:bb:79:c5:6d:b2:19:5f:c7:49:e7:1c:2f:e3:
         18:39:1c:22:0b:1f:96:20:dc:84:1f:66:ed:05:43:32:6f:1c:
         80:62:29:d8:28:b6:0f:3f:1d:f8:68:c1:6e:b9:ab:12:fe:9d:
         23:08:45:80:5f:0b:4b:d3:e8:97:13:d8:81:fe:54:92:7b:89:
         4f:54:9e:00:e9:96:47:28:20:b2:cc:13:e2:6c:c5:af:98:a4:
         36:13:cd:1f:bc:0f:84:63:b6:ae:42:f0:e4:78:02:52:de:fb:
         53:09:8e:f1:d7:15:63:cf:70:4a:39:49:bf:b6:f6:91:07:a3:
         88:cc:30:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----