Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/352ba625-c26d-3cc1-a353-71e6c14343a8.roa
File:                     352ba625-c26d-3cc1-a353-71e6c14343a8.roa (raw, json)
Hash identifier:          HSfb3+kfVZHHvgzYxdMTVQsYrFsUuAXCR2uLzRj13ho=
Subject key identifier:   1E:EF:28:6A:1D:60:7C:52:B4:70:D1:FE:6F:DB:36:E1:29:F6:B0:B3
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328583E8DA1F9B48790CC331A273E80
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/352ba625-c26d-3cc1-a353-71e6c14343a8.roa
Signing time:             Thu 09 Sep 2021 14:21:46 +0000
ROA not before:           Thu 09 Sep 2021 14:21:46 +0000
ROA not after:            Tue 15 Oct 2024 04:00:00 +0000
asID:                     9009
IP address blocks:        172.94.60.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:8d:a1:f9:b4:87:90:cc:33:1a:27:3e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Sep  9 14:21:46 2021 GMT
            Not After : Oct 15 04:00:00 2024 GMT
        Subject: CN=0e1aef1c-a480-40aa-98e5-62f44d40610c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:41:b2:f1:6e:b0:d1:0d:74:4e:b9:e3:f6:32:
                    44:ce:da:fe:4a:41:84:4d:32:6b:17:99:22:0e:a3:
                    5e:8f:01:e7:ba:3f:52:f4:40:61:f9:9e:e3:1e:e5:
                    8a:30:dc:50:a9:90:b1:e4:73:39:48:de:21:1c:f7:
                    6b:86:31:2a:d4:bc:51:d7:dd:98:7f:04:3b:9c:2d:
                    26:c1:89:f2:c4:db:f1:d9:a1:73:85:38:31:05:ad:
                    73:76:25:31:8d:6e:59:73:a5:bc:a7:1b:ac:04:f0:
                    48:c1:d4:d4:47:b4:95:a2:c8:29:96:64:77:51:eb:
                    86:8a:eb:be:89:cf:e5:2a:0d:40:c4:6d:de:72:df:
                    d0:83:53:db:9d:ba:d0:e8:89:5b:97:26:4a:0e:08:
                    d0:be:82:3f:d1:82:e8:53:84:50:a3:c1:32:94:77:
                    86:0e:86:e0:44:2f:f5:55:b2:16:39:98:eb:cb:f9:
                    67:14:fc:de:1b:dc:4a:39:5b:5f:bb:b6:13:35:f5:
                    80:00:d1:9c:74:89:54:9b:5b:d0:1a:23:e6:fe:87:
                    72:b1:d1:24:94:1f:8d:63:ba:da:2d:50:e6:bd:46:
                    4e:d3:78:45:29:06:6e:00:05:63:71:b4:1b:e8:f3:
                    f8:dd:3d:cd:50:34:ce:16:f0:ec:d6:03:da:5c:66:
                    9e:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:EF:28:6A:1D:60:7C:52:B4:70:D1:FE:6F:DB:36:E1:29:F6:B0:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/352ba625-c26d-3cc1-a353-71e6c14343a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.94.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:46:b5:37:f9:f8:0f:3e:32:28:82:99:55:80:2c:9d:b1:87:
         aa:8d:2c:32:74:d2:32:3d:84:f5:a6:9f:1b:9f:be:f1:5c:eb:
         8f:93:bb:ac:80:a8:d1:52:2c:2a:64:44:61:6b:fa:a4:82:c7:
         d3:78:cb:88:d4:5a:3d:7f:e8:0b:c8:81:fd:24:ff:74:f1:b7:
         ef:43:0c:42:fd:b4:33:d1:8b:93:9f:c7:1e:d6:d1:1a:d5:33:
         96:10:2a:74:c7:87:16:5d:4c:96:34:6d:62:b2:7b:4e:40:16:
         10:93:ec:25:41:65:66:21:22:80:dd:db:eb:6f:f7:d6:93:df:
         ee:2f:73:57:07:12:e5:26:2e:54:a9:1b:74:1b:c8:c9:cd:7d:
         9a:07:7f:f4:96:53:20:42:a2:0d:e8:d8:47:14:11:b6:0b:69:
         1e:df:cd:63:76:d3:c7:3e:c3:49:dd:1c:ab:33:ea:54:8b:8b:
         4f:1b:94:89:83:26:5d:73:48:ba:0c:57:e2:82:77:11:da:d8:
         67:a7:6c:b5:87:68:72:f8:44:4d:c3:79:4f:16:5d:01:f2:cd:
         89:1f:a7:4d:9e:1e:3a:f3:3b:97:7e:de:32:c8:21:9b:46:2e:
         fe:9c:c8:9b:90:1b:7b:94:9f:65:48:23:6c:ae:8a:c4:d0:c5:
         80:3e:4a:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----