Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/241b4e2f-646d-3b8b-ac17-05a6322b12dd.roa
File:                     241b4e2f-646d-3b8b-ac17-05a6322b12dd.roa (raw, json)
Hash identifier:          HaZIFfHmOwAZ8tPdGgev3qly1wOeJBM7UDxzVUJB0+g=
Subject key identifier:   05:03:B9:2B:B2:E2:59:AD:9E:C5:27:39:24:F4:2C:10:E5:B7:4F:49
Certificate issuer:       /CN=5dcf6139-5993-4941-a803-3ff450a6149e
Certificate serial:       010D0C9F432858431C79E5C90AEA5044FAAC2800
Authority key identifier: 2C:B7:E5:0B:14:FA:3D:96:BC:0C:17:17:D4:AE:3F:DF:26:6D:66:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/241b4e2f-646d-3b8b-ac17-05a6322b12dd.roa
Signing time:             Mon 04 Sep 2023 13:00:26 +0000
ROA not before:           Mon 04 Sep 2023 13:00:26 +0000
ROA not after:            Sun 03 Dec 2023 14:00:26 +0000
asID:                     834
IP address blocks:        64.113.10.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:1c:79:e5:c9:0a:ea:50:44:fa:ac:28:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dcf6139-5993-4941-a803-3ff450a6149e
        Validity
            Not Before: Sep  4 13:00:26 2023 GMT
            Not After : Dec  3 14:00:26 2023 GMT
        Subject: CN=60599da7-272c-4d5d-9bd5-3a22455157d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:84:b4:ac:d4:b8:08:61:04:88:60:1e:e9:5c:
                    89:52:22:18:02:2e:ac:2c:f1:41:bc:df:8c:80:84:
                    e1:51:d2:84:68:18:81:09:10:df:77:79:8e:fc:67:
                    39:62:11:b1:6e:b7:ff:38:cc:c2:39:46:12:ba:79:
                    c9:9f:f2:33:a2:f1:4e:d2:47:9f:39:6f:b4:77:e4:
                    df:89:3b:d1:33:b1:f7:87:ed:de:21:e3:23:d1:82:
                    c3:06:8c:f5:d9:f8:5c:31:11:79:ef:61:fd:a1:6d:
                    26:55:5a:11:e3:0a:f5:a6:dd:d9:3a:12:83:ab:e4:
                    7f:7a:22:8e:20:68:e8:30:e0:39:61:59:c2:13:c3:
                    8d:86:bb:10:ab:ac:2b:72:e1:14:fc:10:41:2b:5c:
                    c1:27:0d:d4:e8:27:e4:56:3e:f4:c4:9e:8a:85:05:
                    88:b4:49:76:a6:84:e3:b8:b7:90:dc:26:ed:60:7f:
                    9e:a6:69:2d:1c:38:69:73:e2:b9:9a:a8:cf:1e:92:
                    8e:c4:e3:b6:ce:64:c4:79:c1:d1:ea:84:4e:52:fa:
                    17:b0:d3:80:00:ab:c4:16:d5:bc:b6:78:20:61:6e:
                    a1:52:37:a1:2d:94:5b:7f:03:7c:7e:41:dd:d6:99:
                    25:dd:d4:27:ed:bb:d6:d8:7b:10:70:20:ff:b9:63:
                    07:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:03:B9:2B:B2:E2:59:AD:9E:C5:27:39:24:F4:2C:10:E5:B7:4F:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/241b4e2f-646d-3b8b-ac17-05a6322b12dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e/5dcf6139-5993-4941-a803-3ff450a6149e.crl

            X509v3 Authority Key Identifier:
                keyid:2C:B7:E5:0B:14:FA:3D:96:BC:0C:17:17:D4:AE:3F:DF:26:6D:66:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5dcf6139-5993-4941-a803-3ff450a6149e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.113.10.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:a5:f2:0f:94:02:7a:94:ff:a0:4f:72:db:b8:9a:e5:d0:31:
         20:72:40:30:c8:ea:45:e5:93:dd:a0:0e:f8:64:ce:aa:1d:d2:
         30:53:e5:81:40:77:0e:8a:da:4c:b2:83:d5:26:0c:8d:7e:ce:
         0d:b7:ab:0b:a5:da:93:dc:75:b2:82:dd:dc:f2:7b:6d:12:66:
         7a:0d:c8:7a:0a:69:4a:12:c5:79:54:01:90:76:11:7c:02:12:
         87:d3:11:ca:ad:ee:fb:62:6f:7a:e5:1c:08:4f:6c:fb:44:cd:
         21:c1:52:f0:8a:51:1b:d2:cc:f1:45:1a:86:31:dd:10:02:9d:
         91:da:ec:cf:8f:68:3f:86:02:5f:d3:d9:2a:00:f4:74:d5:cc:
         77:9a:ba:ff:b9:4c:eb:2e:48:81:8f:82:17:4a:30:a8:76:51:
         ff:1f:9b:20:80:b6:6d:ba:f3:3c:74:f9:0f:d3:1c:f0:db:07:
         33:8c:9d:d3:35:10:ff:43:fb:27:8a:c8:a9:e2:2f:a0:33:5a:
         ca:d8:db:28:08:39:63:86:b1:15:fa:e6:f5:d9:8a:f4:f3:cc:
         fa:26:d6:c6:34:e4:1e:57:1e:26:c1:f4:90:0a:19:38:cb:7c:
         16:24:07:e2:90:21:0e:22:2d:04:f6:c7:b4:6c:e4:7d:7a:bf:
         53:ff:4b:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----