Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2/06aa287a-256e-3540-95b8-c79447633afc.roa
File:                     06aa287a-256e-3540-95b8-c79447633afc.roa (raw, json)
Hash identifier:          t+8rG1qCiqz9iI45UVWUk7mhkBNyxdv9W1wsGWbqzDk=
Subject key identifier:   2C:0C:8C:BE:BD:04:03:E4:8D:3B:B4:C2:87:A4:E0:9B:EE:76:28:7D
Certificate issuer:       /CN=4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2
Certificate serial:       010D0C9F4328583F78438EDA8F86AA1EF7BF3C80
Authority key identifier: 60:0F:D3:65:07:64:FF:F3:F5:46:0E:22:26:D7:3B:5A:12:28:18:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2/06aa287a-256e-3540-95b8-c79447633afc.roa
Signing time:             Mon 03 Oct 2022 16:00:09 +0000
ROA not before:           Mon 03 Oct 2022 16:00:09 +0000
ROA not after:            Tue 07 Jan 2025 05:00:00 +0000
asID:                     212238
IP address blocks:        172.82.75.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:78:43:8e:da:8f:86:aa:1e:f7:bf:3c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2
        Validity
            Not Before: Oct  3 16:00:09 2022 GMT
            Not After : Jan  7 05:00:00 2025 GMT
        Subject: CN=05bfb4a5-c367-472c-a15c-effd7b090699
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:01:9a:18:91:00:69:7b:0e:60:b7:c6:74:78:
                    07:1f:7f:fc:2e:a3:26:a4:f2:1a:de:44:4e:85:e1:
                    f8:c7:84:fb:a7:ed:31:df:76:a1:32:62:2d:ad:96:
                    a3:b4:2e:21:d2:75:14:00:2b:47:93:87:47:fe:d8:
                    3b:6d:43:ba:f1:e6:c2:c1:5d:92:ee:e7:5b:3b:d3:
                    ea:00:7a:26:da:e1:a8:f8:e1:6f:ea:48:e6:b2:f1:
                    31:cf:f3:81:0c:6a:88:4a:0e:11:94:83:80:9c:f8:
                    d2:e8:fa:e2:bb:3a:2f:e2:15:e7:11:be:05:31:9e:
                    9c:ee:16:bc:b7:4d:dd:5f:5b:0f:63:30:e6:c7:5d:
                    fb:6b:a0:a5:53:b0:8e:3c:36:a8:2f:47:16:43:c2:
                    77:62:94:a8:4a:32:d6:ca:30:2f:00:89:73:1f:d1:
                    70:12:d1:ab:29:b0:fe:88:ea:25:a3:75:4b:71:7f:
                    47:c3:db:ad:d5:06:35:10:8e:6f:98:d0:57:c4:fb:
                    a2:83:26:86:b4:b1:26:88:7f:ca:0f:fd:36:9e:2b:
                    55:39:4f:95:a6:68:6f:dc:ca:fb:08:1f:76:3a:40:
                    67:2a:b9:24:85:f0:27:b3:0a:d9:23:c0:8d:5d:c5:
                    2a:f3:31:56:bf:e0:7b:bc:9e:1a:4b:5c:02:0a:20:
                    c5:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:0C:8C:BE:BD:04:03:E4:8D:3B:B4:C2:87:A4:E0:9B:EE:76:28:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2/06aa287a-256e-3540-95b8-c79447633afc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2.crl

            X509v3 Authority Key Identifier:
                keyid:60:0F:D3:65:07:64:FF:F3:F5:46:0E:22:26:D7:3B:5A:12:28:18:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4bbbb61f-fc17-4d96-b9c3-8840bcdd41c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.82.75.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:35:58:56:53:d6:6a:b7:a9:07:54:18:e3:65:f7:38:dc:c2:
         66:11:fa:65:70:ed:67:fa:7d:96:0d:2c:33:f3:cc:bf:83:e8:
         07:d3:68:c3:f9:aa:e8:e8:27:07:09:f5:19:d3:12:63:84:6d:
         ef:32:cf:71:63:50:b4:14:08:8e:dc:4e:3d:8b:a7:49:14:f5:
         8a:d1:bd:4c:1c:ef:d2:0c:de:69:51:6f:94:05:b4:74:bc:2b:
         fd:0b:b2:66:ad:5e:86:55:78:c9:4f:cc:8a:4f:2b:ff:c0:61:
         73:31:ff:8c:fb:9d:6f:3a:f1:c8:c8:48:03:d2:a1:a9:fb:a5:
         8d:62:71:b0:83:36:78:a1:d4:65:a3:cd:30:54:fa:7b:06:18:
         01:3d:70:29:24:d7:b4:35:84:98:80:35:b6:bd:82:f3:c6:6e:
         28:2b:3b:82:11:39:04:40:bc:f1:b6:91:a0:eb:1a:04:8d:cf:
         bb:17:68:a5:40:47:1a:1f:5e:97:9d:12:03:64:99:7e:78:ba:
         d7:45:fa:3a:2d:8d:f0:d5:84:dc:d9:8e:fe:e3:62:57:9f:7d:
         cc:26:ab:b1:94:9e:13:40:90:bf:70:13:bd:99:1b:4f:fd:00:
         ec:ee:4d:8e:6f:bf:6c:f5:63:93:93:7a:c5:42:6c:09:58:8b:
         ba:01:c8:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----