Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/0d9deb67-9ab9-360d-b989-93e60a317bcf.roa
File:                     0d9deb67-9ab9-360d-b989-93e60a317bcf.roa (raw, json)
Hash identifier:          Fyvb19TWj+XXTi2FIhqNOfcCBEQRzEPkDuji8j9j7Ds=
Subject key identifier:   AD:02:9C:88:ED:C0:17:42:5F:A8:2B:6D:B5:DF:8A:59:41:27:4B:03
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F43285843658AEF9502EF5E567B0F4D80
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/0d9deb67-9ab9-360d-b989-93e60a317bcf.roa
Signing time:             Sat 30 Sep 2023 17:08:47 +0000
ROA not before:           Sat 30 Sep 2023 17:08:47 +0000
ROA not after:            Fri 29 Dec 2023 18:08:47 +0000
asID:                     834
IP address blocks:        139.177.150.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:65:8a:ef:95:02:ef:5e:56:7b:0f:4d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Sep 30 17:08:47 2023 GMT
            Not After : Dec 29 18:08:47 2023 GMT
        Subject: CN=a315a3e5-c890-4cd0-9261-a1c641485311
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:b4:85:1d:63:32:4b:89:10:bb:9e:82:b1:d8:
                    d8:d8:fe:66:15:e0:ae:9c:67:a2:b0:e4:86:01:f5:
                    20:77:cd:93:41:a9:9a:40:3c:e6:83:86:f9:de:f9:
                    8d:73:29:0c:cb:dd:46:82:12:a9:64:ad:fe:60:35:
                    70:46:66:68:f8:48:99:fb:fe:c2:a9:88:85:7e:23:
                    5e:f6:a6:53:7d:b3:3f:48:21:ef:43:7e:fb:fa:1b:
                    1a:7d:13:11:1e:9a:de:cb:94:6d:8d:d6:18:db:96:
                    25:bf:18:d6:19:14:01:87:54:ca:3f:07:45:e7:e1:
                    d1:14:9b:a5:d0:5b:58:b3:96:40:01:18:88:47:fa:
                    0c:d0:2c:09:7f:fd:15:8a:de:5a:ac:ce:a4:a6:bf:
                    77:1c:5a:e6:50:44:d7:20:78:f7:c5:11:0f:a9:88:
                    68:2f:62:66:7b:ce:30:a3:c1:4b:5b:17:f4:71:2a:
                    84:bf:8a:b5:fa:e1:96:66:74:94:11:b3:4f:61:2c:
                    9a:46:d5:20:b4:b8:29:0a:d8:dc:ed:fc:53:80:45:
                    d5:7d:5f:4b:9c:47:c4:5c:3b:16:a6:d3:aa:f5:80:
                    26:0f:98:7e:cf:bc:65:dc:cf:1d:6b:ec:3a:d2:7d:
                    e9:f3:bf:b1:69:68:c4:77:66:ad:62:40:08:d4:78:
                    1f:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:02:9C:88:ED:C0:17:42:5F:A8:2B:6D:B5:DF:8A:59:41:27:4B:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/0d9deb67-9ab9-360d-b989-93e60a317bcf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.177.150.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:01:08:b6:31:94:ca:9b:2d:5b:04:45:cc:26:20:b0:f3:c6:
         5f:51:05:42:bd:42:9f:89:4e:8c:2e:4f:26:78:fb:92:8e:1b:
         2c:f9:ce:da:f4:92:4d:76:2c:51:00:a3:b3:f6:f4:0b:3c:b3:
         44:47:94:4c:7d:12:37:23:c9:6e:ba:20:c4:cf:92:fa:89:12:
         5d:dc:24:8a:d4:20:a4:0b:0c:50:17:ad:44:20:e1:29:46:2d:
         87:90:27:95:53:55:98:72:5c:17:93:15:f7:89:12:59:f4:2d:
         7b:42:4a:d4:3f:79:6e:b0:88:97:55:f0:ec:10:91:40:1f:b3:
         10:c6:12:5a:ba:d4:c1:e8:8b:ef:be:b2:dc:bc:24:74:8a:46:
         f5:72:ae:42:c3:29:72:66:82:95:cf:7c:23:52:81:c8:cb:3e:
         d9:7c:5f:c2:b7:24:50:c0:31:eb:33:21:e0:1b:fc:86:d8:e8:
         9c:6d:df:65:f0:7f:37:d2:08:db:5b:a4:86:c7:35:df:77:0c:
         bd:70:54:30:9b:3d:79:ea:8b:e6:97:c3:3b:19:3d:3d:ab:20:
         c6:78:4b:d7:b6:65:5f:b6:1c:34:a6:2e:b9:87:50:5b:3b:67:
         3f:fe:b2:2b:3c:7e:e6:cf:b3:db:a7:45:69:77:f0:a0:a7:bf:
         df:52:06:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----