Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce/468db394-2b05-3a45-bc6e-a8ab44a18bc0.roa
File:                     468db394-2b05-3a45-bc6e-a8ab44a18bc0.roa (raw, json)
Hash identifier:          h+dl4XHQG1PZDioIRjzRGXSEe6VEBL30jTA03oZJTak=
Subject key identifier:   DD:5D:4A:F0:4A:EE:F8:57:4B:31:26:23:E5:D8:C3:01:E2:36:6E:E4
Certificate issuer:       /CN=552db743-b442-4066-8e02-0dcd47471dce
Certificate serial:       010D0C9F4328584132BC84A32EC74994DC913680
Authority key identifier: EA:6D:22:E3:E4:B1:9D:DB:DA:CB:F0:E2:93:B0:18:81:E9:3F:99:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce/468db394-2b05-3a45-bc6e-a8ab44a18bc0.roa
Signing time:             Wed 21 Oct 2020 14:54:44 +0000
ROA not before:           Wed 21 Oct 2020 14:54:44 +0000
ROA not after:            Sun 15 Jun 2025 04:00:00 +0000
asID:                     8100
IP address blocks:        136.175.226.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:32:bc:84:a3:2e:c7:49:94:dc:91:36:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=552db743-b442-4066-8e02-0dcd47471dce
        Validity
            Not Before: Oct 21 14:54:44 2020 GMT
            Not After : Jun 15 04:00:00 2025 GMT
        Subject: CN=d3819308-8066-407d-9356-ea4e94536d35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:40:49:c1:5a:8a:e1:d7:8a:b7:21:db:10:e0:
                    9d:05:4b:ee:c7:f0:15:d1:0b:c4:65:77:90:20:c8:
                    f9:33:5d:d9:bc:c0:4e:a1:60:9f:60:14:aa:0b:ac:
                    f4:28:63:38:0d:22:bc:1a:5c:72:04:d5:1d:92:da:
                    e1:ac:2e:da:6e:95:ac:bf:93:1e:2f:30:d2:9e:6c:
                    c4:09:af:fa:ee:9d:17:8f:3a:be:f5:8a:e2:a7:2b:
                    d6:37:7c:0a:c2:28:39:b8:d2:12:97:71:c5:7a:c8:
                    0b:a4:fc:f6:61:83:f3:cd:49:33:fd:4a:b9:45:3a:
                    79:7f:35:81:a6:cb:b3:a2:5e:57:96:f3:65:50:5f:
                    d3:33:76:16:15:3a:28:ae:13:ea:2e:57:6d:99:df:
                    ca:be:79:1b:7f:30:89:06:8d:a5:26:ef:0b:db:d0:
                    97:af:00:ff:2d:34:a0:f7:d0:bc:31:a3:81:38:95:
                    53:64:bf:00:73:9c:a7:96:93:11:92:73:43:b6:d7:
                    f0:a6:5f:ad:c2:c7:dd:bd:8e:66:7b:e4:84:04:e0:
                    e1:2a:b3:4d:96:e7:bf:ae:83:4d:dc:db:78:f8:b2:
                    28:97:e1:e6:8f:a8:c1:84:30:8e:56:4b:0f:95:99:
                    f8:39:a5:29:f4:6a:cf:c3:25:95:27:6e:85:00:a1:
                    70:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:5D:4A:F0:4A:EE:F8:57:4B:31:26:23:E5:D8:C3:01:E2:36:6E:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce/468db394-2b05-3a45-bc6e-a8ab44a18bc0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce/552db743-b442-4066-8e02-0dcd47471dce.crl

            X509v3 Authority Key Identifier:
                keyid:EA:6D:22:E3:E4:B1:9D:DB:DA:CB:F0:E2:93:B0:18:81:E9:3F:99:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/552db743-b442-4066-8e02-0dcd47471dce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.175.226.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:50:25:d6:d6:48:33:52:0d:ed:68:3a:4e:90:2b:3c:58:19:
         81:ec:91:e4:c2:c0:33:f3:16:41:03:bc:d3:e0:9a:80:f1:19:
         c7:5c:0c:ed:98:97:19:d9:f4:80:32:2a:c8:d1:83:80:6a:32:
         41:c1:3e:cd:4e:75:43:82:5c:77:4f:db:87:c2:be:fd:87:c4:
         c9:e1:3c:11:43:67:97:c9:36:8e:dc:ea:e0:32:b6:b7:d1:94:
         cd:c0:61:9a:f9:45:51:c9:70:84:1e:48:8d:70:3a:89:67:5b:
         aa:3f:d7:5a:bc:0b:0f:8e:38:0c:7d:d3:6a:be:54:13:c4:57:
         7e:14:13:57:6d:ff:f4:e2:75:f6:b4:35:d5:ca:0b:be:8d:42:
         e7:91:f4:ef:74:a7:9e:db:19:14:3b:2c:91:5c:52:e1:a4:1c:
         8c:ab:a2:29:a6:ba:7a:0c:cf:1d:1e:b4:0a:f8:d3:87:f7:a4:
         ff:40:76:07:67:05:c7:c0:b3:e3:e7:65:84:e6:5c:ab:7c:85:
         cb:c9:32:5c:4e:f4:a2:c2:3a:d0:7b:8b:ca:90:10:c9:48:d3:
         2e:c8:b6:73:61:8b:0c:dc:cd:9c:fd:8b:cc:68:7b:56:ff:43:
         1d:ee:a3:0b:0d:46:4e:d5:1a:3b:d2:3f:3f:46:0d:62:24:c6:
         cb:ca:53:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----