Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/46c562be-dbaa-34dd-82a9-d9d046906b80.roa
File:                     46c562be-dbaa-34dd-82a9-d9d046906b80.roa (raw, json)
Hash identifier:          bRRgUY7IpmQAwKcqznxxjiK3u/gGlTEyTUjWFpRs1qA=
Subject key identifier:   DC:69:A8:E6:3E:EA:5D:43:F2:3B:3F:58:AA:8E:27:93:3A:B8:4D:78
Certificate issuer:       /CN=d00749ed-70ef-447c-b17c-da6be8d7f312
Certificate serial:       010D0C9F43285841051A164BA4DC309A5B8F2200
Authority key identifier: F5:20:15:87:33:58:C5:12:78:64:66:F3:B0:E3:5D:8A:F4:78:79:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/46c562be-dbaa-34dd-82a9-d9d046906b80.roa
Signing time:             Tue 29 Mar 2022 12:45:09 +0000
ROA not before:           Tue 29 Mar 2022 12:45:09 +0000
ROA not after:            Fri 30 May 2025 04:00:00 +0000
asID:                     8075
IP address blocks:        64.68.193.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:05:1a:16:4b:a4:dc:30:9a:5b:8f:22:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d00749ed-70ef-447c-b17c-da6be8d7f312
        Validity
            Not Before: Mar 29 12:45:09 2022 GMT
            Not After : May 30 04:00:00 2025 GMT
        Subject: CN=f9a3a6fc-15aa-4e61-90e6-6f59cb2d9d5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:fc:37:aa:ef:eb:d4:ff:6d:f7:50:d3:86:f5:
                    02:41:2a:92:cb:ae:e5:53:7b:d6:7e:03:a9:24:6b:
                    cc:aa:d2:71:05:6a:73:d1:cd:2d:69:98:31:1a:fa:
                    09:44:51:01:7e:57:36:2a:4d:6b:e2:e1:40:d9:d6:
                    a3:cd:87:e6:32:77:69:12:13:38:1e:0e:bf:d9:a9:
                    83:55:6e:60:c0:9b:72:fb:5d:13:dc:45:b7:69:94:
                    6d:85:44:59:05:60:bc:f7:da:04:74:bc:fd:ee:27:
                    b4:a4:50:0a:71:45:c3:bc:7b:74:12:54:b6:a2:6e:
                    5e:91:0e:a3:63:60:42:93:ca:d5:21:cf:2f:e0:4d:
                    66:8e:c4:af:9a:bb:8c:19:0f:97:0e:f0:6c:03:f9:
                    3f:bf:fd:20:a0:d6:23:13:f3:fa:98:f3:b4:b2:e6:
                    4d:11:26:39:5f:da:4a:b6:42:5f:28:15:dc:bc:1a:
                    db:c1:7a:52:7c:c9:20:53:14:4e:36:f5:6f:84:92:
                    aa:cd:77:5c:a2:42:6e:4a:b3:ba:d6:a3:d9:2c:b3:
                    51:a1:d9:c2:c9:62:4b:bd:c0:ad:b4:4c:6c:24:99:
                    c8:10:b4:b6:74:93:c9:6a:e4:be:27:44:5c:bc:0f:
                    de:86:d3:70:b3:df:be:97:2a:48:7e:3b:36:13:a5:
                    32:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:69:A8:E6:3E:EA:5D:43:F2:3B:3F:58:AA:8E:27:93:3A:B8:4D:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/46c562be-dbaa-34dd-82a9-d9d046906b80.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/d00749ed-70ef-447c-b17c-da6be8d7f312.crl

            X509v3 Authority Key Identifier:
                keyid:F5:20:15:87:33:58:C5:12:78:64:66:F3:B0:E3:5D:8A:F4:78:79:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.68.193.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:18:1d:e7:9d:24:87:13:b6:0f:51:aa:de:4f:38:e9:76:b5:
         67:a6:46:5d:5a:72:86:3a:e9:dd:88:9f:98:a0:9b:db:ab:f1:
         7c:e0:a7:29:0a:72:e1:f1:69:c5:77:4f:ac:70:3b:dd:e5:22:
         64:7c:34:e6:bd:8b:bf:2e:14:7f:08:4d:34:1c:bc:71:86:d6:
         2d:6c:96:cf:fe:56:2d:48:e6:10:7d:03:3c:db:9a:3d:cb:be:
         7f:f0:96:8d:6b:45:79:f0:55:9d:be:0b:46:2c:83:11:e7:8c:
         8d:35:78:a4:9f:24:f0:e9:0e:01:2c:83:80:bd:9a:4a:46:8a:
         3d:a4:08:40:32:b7:91:09:4d:30:c0:d1:8a:1c:38:6a:a7:81:
         cb:1e:f4:ff:bb:12:5e:ff:57:dd:b8:c9:7d:60:ff:43:04:4b:
         78:1c:59:8e:d3:eb:06:3f:79:19:0c:70:f2:a8:b1:3a:00:4e:
         27:17:79:29:31:44:dc:ff:85:a3:ef:0b:27:71:be:3c:71:87:
         3b:65:87:52:5e:ba:9a:1f:eb:48:56:f3:3f:43:a7:e4:12:70:
         a1:73:af:32:3a:cc:76:a8:5f:d9:cb:84:34:2e:eb:ac:df:ff:
         19:9d:03:50:ea:26:f0:24:37:b2:7a:17:c4:c0:81:76:6d:f5:
         92:98:0e:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----