Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/45f4fb1b-bc8f-34fc-a48a-a5442fefc905.roa
File:                     45f4fb1b-bc8f-34fc-a48a-a5442fefc905.roa (raw, json)
Hash identifier:          WSZeu7TCldoJYlt5SmlCZ3K9RL8siUYZGKF0Q0r1ZhU=
Subject key identifier:   EE:9E:FD:C8:8B:CE:A0:B3:BC:3A:4C:3A:E2:63:8C:9B:B5:D5:5A:37
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F432858435D71DAD41546AFA78E5EFFE0
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/45f4fb1b-bc8f-34fc-a48a-a5442fefc905.roa
Signing time:             Wed 27 Sep 2023 19:31:47 +0000
ROA not before:           Wed 27 Sep 2023 19:31:47 +0000
ROA not after:            Tue 26 Dec 2023 20:31:47 +0000
asID:                     834
IP address blocks:        139.177.148.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:5d:71:da:d4:15:46:af:a7:8e:5e:ff:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Sep 27 19:31:47 2023 GMT
            Not After : Dec 26 20:31:47 2023 GMT
        Subject: CN=ebc9f34c-0873-4244-b41c-4c12ad9d5350
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:2b:a4:64:48:f3:b2:3e:20:68:11:4f:c4:b3:
                    90:c6:6c:0b:f6:80:7a:26:4d:30:08:43:e3:9e:55:
                    9e:fc:08:c9:6e:8a:1a:23:b9:57:dc:59:83:fd:08:
                    7d:b8:ce:cd:17:42:69:aa:92:a5:e0:0a:52:e7:0b:
                    70:05:5a:72:40:9c:46:8c:1b:60:c3:16:e8:91:a4:
                    26:20:e8:95:53:d7:53:5b:15:a1:9f:fb:fb:6c:1d:
                    27:43:3b:12:49:de:09:dd:73:0b:42:99:3b:c4:8f:
                    48:ff:c6:c9:58:b8:73:21:1d:08:e6:71:ef:44:96:
                    61:3f:b3:7f:87:0c:62:59:91:f3:3d:5e:4b:44:5f:
                    f7:2e:2c:7b:ce:bf:67:62:72:1d:f3:b4:9a:39:4a:
                    e7:be:a6:63:89:3d:86:df:82:bd:6b:62:4a:9c:b6:
                    3e:dd:88:6f:6e:25:47:ce:eb:74:8e:b9:96:22:99:
                    fa:76:be:51:b6:a6:69:47:5e:a4:cb:d7:01:31:b0:
                    a7:df:25:ce:29:fa:68:0b:29:27:e7:08:91:1e:44:
                    54:ba:a6:44:57:e9:25:27:e4:32:c5:ca:86:80:15:
                    5e:e5:48:7d:59:2b:82:8c:ea:53:22:3f:38:83:00:
                    23:22:bd:3b:23:92:56:75:0a:db:46:ad:c9:99:37:
                    df:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:9E:FD:C8:8B:CE:A0:B3:BC:3A:4C:3A:E2:63:8C:9B:B5:D5:5A:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/45f4fb1b-bc8f-34fc-a48a-a5442fefc905.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.177.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:53:05:12:a5:dd:36:0e:97:23:13:a1:6a:dd:47:f3:b8:ea:
         b7:03:3b:34:48:e6:84:c1:cb:99:71:80:bd:fc:29:2d:ca:a8:
         ec:78:f1:89:d1:aa:e5:4e:94:a0:63:90:9a:79:a1:e3:6e:e3:
         4a:69:60:b2:ec:0e:6d:de:80:6e:a3:7d:f7:db:c1:66:ce:48:
         8f:54:d3:77:90:f4:16:0f:5c:b0:bf:b8:04:17:20:91:e7:61:
         9c:43:e2:15:1c:09:4d:07:ef:36:98:9f:75:2b:a1:9e:62:49:
         a0:9f:0e:bf:78:15:a1:90:32:37:f4:e7:88:23:69:42:9b:52:
         9a:57:ec:48:6a:34:8e:30:71:f9:13:a3:f7:91:4f:c3:bc:89:
         79:d1:c8:58:39:e2:69:77:86:c3:ed:1f:a3:5b:18:ae:b7:05:
         d4:94:e0:78:94:c6:e7:40:46:0c:1c:15:1f:e2:8c:2a:0b:c8:
         da:76:62:0a:00:7f:08:28:1e:a7:b6:a5:74:51:27:b0:13:b9:
         6b:2c:c7:65:89:56:c4:38:03:26:2f:35:78:26:e5:0c:fa:eb:
         0d:9c:58:3e:6d:1b:15:5b:13:6e:40:c5:ff:de:8d:be:5d:0b:
         c5:fc:fc:dd:5c:be:23:15:18:c2:39:c6:b3:69:c4:e9:1f:1b:
         56:99:6a:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----