Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/2864569b-114f-3fca-b7b2-f43d21f8b329.roa
File:                     2864569b-114f-3fca-b7b2-f43d21f8b329.roa (raw, json)
Hash identifier:          xNCqiqP5c+lVkVVW9jxtO1wETlXEcSInRgI7K79UQ44=
Subject key identifier:   59:F5:1E:9D:C3:5E:37:EF:B7:DC:CB:4A:CA:32:FB:98:8F:B2:D2:4F
Certificate issuer:       /CN=455a97ae-df4e-49bc-9f76-ff025a5c25e8
Certificate serial:       010D0C9F432858433D48BA141A1629C318F2ECE0
Authority key identifier: D6:AE:8D:6E:B8:CE:58:71:FF:93:91:94:4E:95:35:C4:27:93:B9:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/2864569b-114f-3fca-b7b2-f43d21f8b329.roa
Signing time:             Sat 16 Sep 2023 07:03:03 +0000
ROA not before:           Sat 16 Sep 2023 07:03:03 +0000
ROA not after:            Fri 15 Dec 2023 08:03:03 +0000
asID:                     7018
IP address blocks:        209.182.102.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:3d:48:ba:14:1a:16:29:c3:18:f2:ec:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=455a97ae-df4e-49bc-9f76-ff025a5c25e8
        Validity
            Not Before: Sep 16 07:03:03 2023 GMT
            Not After : Dec 15 08:03:03 2023 GMT
        Subject: CN=1f08887f-b35b-4542-8f41-1751acae4fe0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:71:f2:c8:86:b8:c5:a2:03:f0:70:fb:0b:ea:
                    c3:9e:26:b8:21:c7:3d:e5:f2:20:51:cb:9a:96:48:
                    bb:46:3d:e8:d9:f7:97:aa:f7:89:04:a4:d6:34:b2:
                    b0:44:9e:a3:9c:dd:69:35:1a:a9:60:a0:f7:a4:ff:
                    0c:d9:0a:43:00:25:1b:76:1f:69:d4:32:64:77:9d:
                    90:7b:f1:ca:0d:92:a6:02:2e:a8:c3:57:c3:83:6f:
                    a0:da:8b:b1:70:bf:03:12:5c:4b:54:99:c8:48:32:
                    7d:9e:ed:e6:60:a3:c2:42:26:0f:db:54:aa:60:8d:
                    10:72:32:95:58:16:7e:3c:a6:e6:72:a0:60:17:92:
                    34:0d:3d:ef:ea:f7:80:ce:44:6d:ca:4b:f8:05:a5:
                    a9:a8:a6:20:23:3e:b7:28:fb:b0:72:b0:29:b6:b3:
                    a8:00:2b:d2:0c:78:4b:3f:c0:d2:82:1d:cc:72:61:
                    47:19:70:15:41:12:0b:a5:90:a6:b6:3f:a8:0f:f2:
                    96:7b:20:21:be:4c:75:6a:d6:fb:f0:f2:d3:59:36:
                    0b:d3:a1:8a:99:1b:ea:ae:7f:3a:20:b6:bf:5a:b2:
                    d9:53:64:66:ae:87:33:79:9a:33:bb:ef:8b:81:2c:
                    8e:b6:02:aa:da:ca:12:ad:15:2e:77:76:2a:63:2b:
                    c8:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:F5:1E:9D:C3:5E:37:EF:B7:DC:CB:4A:CA:32:FB:98:8F:B2:D2:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/2864569b-114f-3fca-b7b2-f43d21f8b329.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.crl

            X509v3 Authority Key Identifier:
                keyid:D6:AE:8D:6E:B8:CE:58:71:FF:93:91:94:4E:95:35:C4:27:93:B9:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.182.102.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:20:10:8b:c7:c3:e3:98:cd:26:e4:3f:43:e1:57:c8:4c:16:
         2e:06:b6:f4:ae:b3:61:26:46:a3:2b:35:a9:e2:d0:c4:d9:d4:
         22:83:73:8d:5b:f5:08:82:60:94:21:0e:60:67:33:15:11:1f:
         ad:76:ba:6c:52:0a:bc:59:f7:a2:94:8d:0a:78:bc:80:67:b7:
         16:38:55:b1:6c:d5:af:2f:8b:2e:4b:23:29:83:b9:3a:03:50:
         0a:1f:f3:8d:5f:60:cc:f3:b6:a7:38:09:21:ba:0d:73:05:7f:
         48:89:19:53:aa:55:f4:d2:61:5e:50:12:b8:31:e6:bc:e2:50:
         29:16:cf:99:95:b2:ff:32:ac:35:62:38:07:d7:7a:41:95:66:
         ac:9b:de:ad:b4:1e:30:18:79:b7:4d:8e:61:0b:23:85:50:77:
         f1:26:ce:46:fd:d5:71:c6:c4:17:d4:55:6d:0a:1e:ba:9a:18:
         39:e5:2f:d5:b7:de:3c:84:54:9a:2d:6f:92:fe:43:22:0e:48:
         3f:fb:1a:b5:00:ec:6c:2b:17:a3:78:2f:5d:2b:0e:35:9b:24:
         5d:5d:c9:9e:c7:f6:16:a3:7e:d7:82:21:ee:f8:2d:d9:51:40:
         f3:05:5d:5f:c7:74:53:73:9d:8e:f2:bb:5f:2d:21:59:8f:fb:
         82:77:27:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----