Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/67385a94-2949-37c9-b958-4c67997ecbde.roa
File:                     67385a94-2949-37c9-b958-4c67997ecbde.roa (raw, json)
Hash identifier:          xqk7+WHx2xmCl5mlc+SNWi6dN04Mbsa99ThhftfLExI=
Subject key identifier:   A5:A5:27:50:9C:A6:DF:7E:45:D4:62:C1:A9:5A:70:48:58:10:9A:97
Certificate issuer:       /CN=7a1d1c68-78c4-4731-a2e9-57408fe88b84
Certificate serial:       010D0C9F432858432074843500DD4072091A8F00
Authority key identifier: 42:EB:AF:07:72:0D:18:32:AF:C0:7C:01:BC:98:0F:E2:4A:93:C3:55
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/67385a94-2949-37c9-b958-4c67997ecbde.roa
Signing time:             Tue 05 Sep 2023 23:12:50 +0000
ROA not before:           Tue 05 Sep 2023 23:12:50 +0000
ROA not after:            Tue 05 Dec 2023 00:12:50 +0000
asID:                     47585
IP address blocks:        165.140.95.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:20:74:84:35:00:dd:40:72:09:1a:8f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a1d1c68-78c4-4731-a2e9-57408fe88b84
        Validity
            Not Before: Sep  5 23:12:50 2023 GMT
            Not After : Dec  5 00:12:50 2023 GMT
        Subject: CN=bf430576-af12-4373-a4b7-624d490d6238
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:94:e5:ba:ca:e3:fd:71:02:19:9d:83:dc:57:
                    53:13:ce:3b:5f:9e:5c:eb:27:59:d1:31:64:d6:cb:
                    2d:33:c9:d5:15:2f:77:fd:cb:ae:01:7c:2e:82:38:
                    e9:92:df:43:dd:27:f4:85:c3:76:95:8f:38:47:10:
                    fc:a8:4f:b4:d8:c9:36:cc:7b:88:7c:7f:ad:4d:a7:
                    0b:36:25:3e:56:98:b4:e0:31:5c:c2:44:be:10:cc:
                    20:eb:9b:60:d9:3c:bb:79:05:54:5a:c7:cd:5d:9d:
                    f2:ba:84:7a:0a:69:11:1b:09:52:50:09:d2:f5:d4:
                    b0:7b:b0:9b:47:b1:0e:8a:5a:24:f2:15:79:c7:af:
                    71:23:c8:67:b3:ed:12:3c:8f:cb:23:5c:2d:bf:54:
                    d9:19:a8:bb:89:51:ef:ef:dc:7d:97:7a:f9:00:1c:
                    4d:7a:24:6a:4c:4f:bf:95:dc:39:42:8e:12:d7:e7:
                    6f:ad:11:52:d0:66:c0:92:70:cf:eb:f6:25:2e:cf:
                    42:d7:2f:fc:37:fd:f9:f1:6c:67:69:c8:a9:8d:31:
                    ef:0a:e0:bc:f9:7f:9e:16:af:ba:e4:b9:28:aa:93:
                    17:93:0c:e8:bf:50:f7:38:8d:fb:b2:c0:ef:b8:82:
                    2e:51:67:c1:b8:e1:3e:c5:86:81:48:99:5f:3c:56:
                    83:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:A5:27:50:9C:A6:DF:7E:45:D4:62:C1:A9:5A:70:48:58:10:9A:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/67385a94-2949-37c9-b958-4c67997ecbde.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/7a1d1c68-78c4-4731-a2e9-57408fe88b84.crl

            X509v3 Authority Key Identifier:
                keyid:42:EB:AF:07:72:0D:18:32:AF:C0:7C:01:BC:98:0F:E2:4A:93:C3:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.140.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:fe:6e:86:45:6b:33:11:96:bf:3b:bb:4b:2a:ed:5c:62:8c:
         f1:24:e4:af:4c:71:b0:7b:d4:73:51:89:cc:81:8f:a1:33:84:
         4c:dd:9e:02:e3:e7:3a:7c:e3:28:3f:67:bb:b7:4d:7d:cd:fe:
         4b:07:71:6c:db:91:dd:2d:c7:76:f2:b2:59:70:bd:6a:10:0f:
         7b:d8:cc:13:f6:4b:a4:26:cf:a0:79:92:09:1d:25:d0:05:20:
         1d:cb:b5:7a:3c:6e:e9:03:7e:5d:51:cc:3a:66:de:75:3b:34:
         e2:80:9d:d0:fc:dd:98:9c:e2:4b:ef:f2:22:72:a5:7c:c2:c0:
         f3:0b:a6:82:67:5c:a6:7b:4d:48:7c:a6:03:43:72:c8:72:47:
         b3:22:9f:0a:d8:60:af:7d:85:13:a1:7c:a8:25:da:d3:da:d6:
         8e:c4:60:06:a4:1d:19:10:69:ff:4f:ff:f0:12:30:02:ae:59:
         49:b7:2d:6c:af:f7:27:6d:a6:95:47:c1:23:98:07:de:85:59:
         c6:6b:ef:18:83:d5:3e:3c:fd:0a:e2:72:28:6c:4f:5b:5f:c2:
         df:5c:cb:3f:4a:9b:3e:48:fd:26:56:35:98:bb:cf:ec:84:47:
         5a:67:91:3a:b1:a0:d2:49:88:44:29:b2:55:59:6d:fe:50:e4:
         b0:d7:aa:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----