Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06507b45-b73b-4208-b43d-b7dc7a6fbfa9/fef8f028-2cc1-3ce9-8311-40969c7e8222.roa
File:                     fef8f028-2cc1-3ce9-8311-40969c7e8222.roa (raw, json)
Hash identifier:          K9CLErEekRkrCmWvpGtu7jhYyoFMQOGUjapPCC4RMD8=
Subject key identifier:   47:29:7A:1B:B6:BD:66:5A:FF:B7:7B:2F:78:5C:A6:95:EF:33:BC:44
Certificate issuer:       /CN=06507b45-b73b-4208-b43d-b7dc7a6fbfa9
Certificate serial:       010D0C9F43285842DC9CC39B40E2C8CF168EE800
Authority key identifier: 36:23:A7:B2:74:A1:08:5A:0D:45:20:D5:78:BC:CB:34:88:A8:BB:98
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06507b45-b73b-4208-b43d-b7dc7a6fbfa9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06507b45-b73b-4208-b43d-b7dc7a6fbfa9/fef8f028-2cc1-3ce9-8311-40969c7e8222.roa
Signing time:             Sat 12 Aug 2023 15:58:58 +0000
ROA not before:           Sat 12 Aug 2023 15:58:58 +0000
ROA not after:            Fri 10 Nov 2023 16:58:58 +0000
asID:                     198802
IP address blocks:        206.168.88.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:dc:9c:c3:9b:40:e2:c8:cf:16:8e:e8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06507b45-b73b-4208-b43d-b7dc7a6fbfa9
        Validity
            Not Before: Aug 12 15:58:58 2023 GMT
            Not After : Nov 10 16:58:58 2023 GMT
        Subject: CN=aba86460-e69e-47d5-8344-00f79e3ef819
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:8b:9a:53:9d:18:c1:ef:92:6b:3c:3e:de:24:
                    83:e5:64:21:83:e8:13:98:02:05:fc:f4:58:45:d4:
                    2a:12:78:26:ca:dc:6f:7b:1b:75:be:cd:73:fb:6f:
                    6e:3e:61:24:91:c0:0d:26:86:a3:fa:90:ea:af:f4:
                    c5:b5:bc:aa:68:d1:2c:2f:cc:f5:a6:eb:d4:06:a9:
                    fd:b7:f9:4d:a9:3b:4e:a6:0a:5c:f5:b4:d5:2a:31:
                    5b:11:6a:ad:16:48:c7:34:db:88:02:0a:39:95:e0:
                    a6:66:c1:aa:78:b1:69:87:d3:cd:4a:23:16:ab:0f:
                    33:76:c2:89:13:5e:3a:42:31:79:e1:98:a9:72:2d:
                    a8:af:72:8c:00:1b:a2:2a:3c:b8:00:46:cf:29:32:
                    92:16:29:dd:18:63:4a:f7:4e:b7:19:4e:5b:8e:8d:
                    11:57:83:54:ae:3c:f5:f5:dc:67:6c:b1:8e:7c:8a:
                    6d:2a:a1:4b:59:66:bd:fa:7a:a8:c4:89:64:c7:19:
                    da:18:3d:f4:93:ea:3f:fa:a4:66:14:f9:fd:15:85:
                    ef:e9:f0:69:df:09:f7:5f:bb:7a:81:cd:79:8d:bc:
                    55:84:21:58:13:61:32:9e:60:ea:13:a8:51:5d:c4:
                    0a:64:9a:50:31:89:11:c2:ba:51:d9:59:59:5b:07:
                    8c:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:29:7A:1B:B6:BD:66:5A:FF:B7:7B:2F:78:5C:A6:95:EF:33:BC:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06507b45-b73b-4208-b43d-b7dc7a6fbfa9/fef8f028-2cc1-3ce9-8311-40969c7e8222.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06507b45-b73b-4208-b43d-b7dc7a6fbfa9/06507b45-b73b-4208-b43d-b7dc7a6fbfa9.crl

            X509v3 Authority Key Identifier:
                keyid:36:23:A7:B2:74:A1:08:5A:0D:45:20:D5:78:BC:CB:34:88:A8:BB:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06507b45-b73b-4208-b43d-b7dc7a6fbfa9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.168.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:c0:d8:dd:8c:91:dc:23:39:f4:49:e3:07:cc:3e:fd:a7:f8:
         54:0a:09:22:40:53:9a:a2:24:3d:e0:2a:5f:8b:15:99:53:f6:
         31:bb:c5:01:08:5f:b9:6d:da:e6:dc:c5:d1:be:33:18:a2:fc:
         0a:4d:1d:fa:72:97:c2:43:6a:5d:7b:cd:fe:47:a4:8c:a0:0a:
         39:03:15:2c:d0:ad:1d:dc:db:09:c6:6f:39:7d:3f:25:22:78:
         70:94:1e:5d:3e:06:8d:0a:c2:f1:fb:6b:2e:a2:ff:cf:8d:40:
         ff:e1:37:45:70:03:f3:ff:1d:fa:bf:b8:e9:e5:8e:dc:76:b3:
         ad:cb:46:7c:ea:da:61:8b:c3:b2:78:10:4a:57:a6:d3:1b:16:
         14:fc:da:32:fa:52:76:fb:09:d7:aa:78:07:ca:4d:e3:3c:d5:
         9e:54:04:60:1b:f6:29:e3:32:3e:e6:55:f4:47:cc:fe:cf:63:
         a9:b0:25:32:2b:56:c4:12:37:85:48:db:ed:66:28:cd:f2:e1:
         8e:2f:e7:e8:90:74:f9:7c:8b:70:48:37:44:d2:eb:2f:d5:79:
         81:06:27:94:76:49:62:be:14:4d:5a:ac:0f:f0:27:ac:92:82:
         b0:69:67:dd:61:f1:9e:6e:36:76:9d:e0:5a:c6:13:c2:e1:a5:
         ea:f7:36:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----