Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06507b45-b73b-4208-b43d-b7dc7a6fbfa9/db2a8012-aa67-3093-9035-733d818f7e7a.roa
File:                     db2a8012-aa67-3093-9035-733d818f7e7a.roa (raw, json)
Hash identifier:          egJ1Y2EHmlFq/7wwSb9o78b0CIemFj3kgOI75VkAlcc=
Subject key identifier:   56:B1:1D:7F:3D:03:B2:00:7C:FF:1B:93:ED:25:07:96:C5:7D:79:56
Certificate issuer:       /CN=06507b45-b73b-4208-b43d-b7dc7a6fbfa9
Certificate serial:       010D0C9F4328583C41A5B96EB8F02D05118D88D0
Authority key identifier: 36:23:A7:B2:74:A1:08:5A:0D:45:20:D5:78:BC:CB:34:88:A8:BB:98
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06507b45-b73b-4208-b43d-b7dc7a6fbfa9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06507b45-b73b-4208-b43d-b7dc7a6fbfa9/db2a8012-aa67-3093-9035-733d818f7e7a.roa
Signing time:             Tue 14 Dec 2021 05:00:00 +0000
ROA not before:           Tue 14 Dec 2021 05:00:00 +0000
ROA not after:            Sat 14 Dec 2024 05:00:00 +0000
asID:                     35913
IP address blocks:        192.67.160.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:41:a5:b9:6e:b8:f0:2d:05:11:8d:88:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06507b45-b73b-4208-b43d-b7dc7a6fbfa9
        Validity
            Not Before: Dec 14 05:00:00 2021 GMT
            Not After : Dec 14 05:00:00 2024 GMT
        Subject: CN=cbba911f-974e-4c4a-ac02-54af1d8f483c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:d7:4d:25:f2:90:28:1a:1c:12:15:45:2d:bb:
                    5f:63:c0:5f:d5:d0:d8:3a:2c:c5:d8:94:75:d7:f2:
                    4a:50:24:29:fc:01:fa:78:72:85:78:d9:04:21:8a:
                    b3:f3:35:89:e1:0e:da:ec:a1:f9:7e:b6:3d:74:b7:
                    86:6d:8e:09:9a:66:7c:1d:fb:4a:91:d6:1c:36:42:
                    6f:f8:b2:35:23:d6:24:f6:c9:46:2e:77:00:11:a5:
                    30:5a:6a:99:cb:b8:5f:06:9b:70:ca:47:fa:35:6a:
                    11:36:ce:e9:3d:a8:42:57:fc:c6:d4:5a:36:f2:71:
                    43:12:41:61:86:fe:6e:b9:29:8a:80:f0:dc:db:cd:
                    bc:ca:0e:7c:07:e3:48:b7:52:39:ae:05:92:41:b8:
                    7d:70:03:f1:ca:3a:eb:2c:0a:19:51:b1:00:ec:ff:
                    cf:c5:e0:40:ae:a0:3c:00:0b:a9:f1:f7:7b:61:32:
                    df:df:32:e4:53:1f:f2:0f:bc:81:ff:fc:c4:4f:fd:
                    0f:d4:9f:ff:64:49:48:b6:bd:5c:65:5a:cb:57:40:
                    76:23:a3:9a:4f:29:45:98:e6:b3:92:45:7b:10:f1:
                    de:57:11:2b:3f:19:b6:a0:f1:00:f7:b8:44:94:40:
                    7a:7a:61:22:bb:5d:ca:02:4f:3f:e7:54:ba:ba:88:
                    a4:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:B1:1D:7F:3D:03:B2:00:7C:FF:1B:93:ED:25:07:96:C5:7D:79:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06507b45-b73b-4208-b43d-b7dc7a6fbfa9/db2a8012-aa67-3093-9035-733d818f7e7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06507b45-b73b-4208-b43d-b7dc7a6fbfa9/06507b45-b73b-4208-b43d-b7dc7a6fbfa9.crl

            X509v3 Authority Key Identifier:
                keyid:36:23:A7:B2:74:A1:08:5A:0D:45:20:D5:78:BC:CB:34:88:A8:BB:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06507b45-b73b-4208-b43d-b7dc7a6fbfa9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.67.160.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:27:2a:54:4e:2f:45:94:20:8e:71:5f:c7:c4:4f:7d:54:da:
         b0:38:27:7a:f3:45:0b:14:54:f5:62:f3:cb:39:ae:df:f0:19:
         27:75:cc:84:9d:44:6a:a9:55:65:c3:1c:06:85:b9:09:dd:5a:
         25:f6:27:05:c7:a4:c1:12:fd:8d:91:1d:b5:fc:e6:3a:8b:6f:
         a5:cf:f1:22:92:21:b8:df:88:4f:07:81:ad:f1:2a:6c:8d:66:
         24:05:af:a8:5e:b0:2b:bc:0d:a3:55:c2:81:c8:13:3d:62:c9:
         1e:f9:45:24:e8:0a:e7:86:8d:3b:64:83:c4:e2:bd:ac:7c:b7:
         a6:28:0b:26:aa:0a:8f:2a:eb:62:68:a4:ef:65:22:3f:82:3a:
         09:0c:52:a1:16:ef:59:8c:37:5f:cd:ce:ac:ec:d7:14:e1:15:
         b9:ed:f8:37:55:34:69:f5:2f:76:73:97:7f:f9:57:09:12:57:
         8c:70:4b:33:c9:c9:1b:ca:37:b3:3f:63:22:b4:8c:4e:37:b2:
         dd:c7:5f:a6:12:52:fd:96:c0:ad:99:97:77:9b:3d:f0:16:75:
         ec:3a:ff:dd:42:29:03:97:68:78:e8:fa:9f:46:2d:ad:f8:03:
         8d:4c:ed:d8:6d:2e:52:bf:09:2f:d4:67:5b:a5:62:25:e3:47:
         05:15:3e:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----