Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e/79976e3b-8906-304b-a1d5-5df7aaddf890.roa
File:                     79976e3b-8906-304b-a1d5-5df7aaddf890.roa (raw, json)
Hash identifier:          txQpXX+GLbkJU53WvBNiHN1/DUQKck+E/+7eYts5RY0=
Subject key identifier:   20:5E:29:41:3C:C9:A7:E6:74:8F:7F:48:5B:79:27:A9:F7:18:F9:86
Certificate issuer:       /CN=c22717c6-604d-4453-a20f-3430af557f6e
Certificate serial:       010D0C9F43285845835A77996108A3DA898AC200
Authority key identifier: EE:A3:2B:CF:34:53:AB:3E:F1:A0:11:46:64:77:8B:DE:44:96:56:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e/79976e3b-8906-304b-a1d5-5df7aaddf890.roa
Signing time:             Thu 11 Apr 2024 18:59:15 +0000
ROA not before:           Thu 11 Apr 2024 18:59:15 +0000
ROA not after:            Wed 10 Jul 2024 18:59:15 +0000
asID:                     400977
IP address blocks:        72.42.251.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 10 May 2024 20:17:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:83:5a:77:99:61:08:a3:da:89:8a:c2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c22717c6-604d-4453-a20f-3430af557f6e
        Validity
            Not Before: Apr 11 18:59:15 2024 GMT
            Not After : Jul 10 18:59:15 2024 GMT
        Subject: CN=b2d78d83-f98e-467f-bef4-9e60ce90ed3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:66:28:bd:f0:cc:af:1d:b4:57:11:b5:bc:f1:
                    c2:a0:f8:9a:f0:e6:7e:b3:bb:ff:fd:bf:80:81:b8:
                    49:e3:d8:63:c3:4b:35:21:a0:0f:58:9f:1b:2c:02:
                    2d:25:07:63:05:49:6d:a3:68:b6:8c:dc:a6:81:a6:
                    41:bf:de:d8:c8:70:24:e1:f0:b7:48:a5:8d:aa:3a:
                    22:cd:b7:94:85:21:87:4d:4d:2b:f3:3e:a3:79:51:
                    22:57:f5:e3:6a:a1:b9:57:d1:1a:9d:87:d7:c8:41:
                    57:48:3c:be:c3:28:80:f5:97:e5:e3:20:5e:40:7e:
                    f8:44:a7:18:6c:c5:1b:a1:83:16:98:9e:5e:be:e2:
                    4f:97:86:67:44:a5:a4:64:1c:cd:49:13:43:12:ad:
                    4a:cb:80:b9:b6:d4:12:e7:5a:36:8f:1b:83:62:fd:
                    20:bd:f6:9f:a4:76:f7:aa:ca:d5:31:7a:23:96:3a:
                    e9:ec:8f:56:b9:fb:f0:21:bc:7a:88:1c:9b:19:64:
                    f7:0f:b8:f8:83:6e:49:f3:3a:ea:34:ed:6e:6f:4a:
                    dd:97:0f:0a:9f:92:fd:a7:cd:f2:ab:98:30:fe:47:
                    fd:24:30:75:ac:2a:ac:f6:7a:db:10:30:38:79:65:
                    23:e8:4c:77:ef:2d:90:c2:95:85:29:6b:2e:0e:a3:
                    03:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:5E:29:41:3C:C9:A7:E6:74:8F:7F:48:5B:79:27:A9:F7:18:F9:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e/79976e3b-8906-304b-a1d5-5df7aaddf890.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e/c22717c6-604d-4453-a20f-3430af557f6e.crl

            X509v3 Authority Key Identifier:
                keyid:EE:A3:2B:CF:34:53:AB:3E:F1:A0:11:46:64:77:8B:DE:44:96:56:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.42.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         db:d4:91:68:97:84:a6:62:88:f7:5b:86:fe:95:7f:d0:35:89:
         f3:a5:76:2e:fb:78:4d:a5:01:e0:f1:fa:1e:1b:c1:d0:ac:bc:
         16:7b:bd:42:ef:46:18:42:5c:45:89:ca:ce:2d:1b:e8:eb:0c:
         61:64:21:6a:15:ce:52:e1:7d:30:76:d7:fc:f3:33:53:d5:57:
         00:60:09:3e:b2:c3:a1:51:88:64:61:43:68:3e:bb:09:1a:06:
         88:47:46:84:c3:b5:40:df:36:8b:81:13:38:82:27:9d:bc:88:
         90:c5:f8:44:82:13:81:5d:b2:51:92:e1:24:c5:47:0c:3e:27:
         51:8d:2b:14:24:96:15:87:ca:de:82:b9:c5:f1:43:0b:75:4b:
         56:ed:8c:f9:78:2c:b5:83:0c:3d:30:02:f0:55:9c:31:50:2b:
         66:21:40:5c:cf:d0:92:2a:45:d2:2f:5b:67:37:8a:b0:fb:0a:
         94:6b:cd:8f:5e:7c:06:30:7c:79:9a:42:87:c2:85:77:5a:86:
         a9:32:64:a9:dd:44:0b:62:b4:3b:7c:75:a2:15:a8:f0:b1:c2:
         6c:70:70:5e:fc:10:c6:11:ed:43:64:0a:99:7c:23:58:35:2b:
         e1:06:14:8d:fc:1d:1a:42:f7:06:e0:69:6d:06:84:f6:13:1b:
         41:08:a9:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----