Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4994aff-79e3-4800-875a-f4a951d7af28/e29a2655-fefb-3174-af73-18d15aa4dc9b.roa
File:                     e29a2655-fefb-3174-af73-18d15aa4dc9b.roa (raw, json)
Hash identifier:          zJnWmoiNM/5lgKRnNm4IrdSmK8hGZlAf/yLq1a/fSAM=
Subject key identifier:   6D:3E:CE:56:82:C6:74:2F:E3:61:D2:D3:BB:7F:BC:17:C4:5F:A0:31
Certificate issuer:       /CN=a4994aff-79e3-4800-875a-f4a951d7af28
Certificate serial:       010D0C9F4328583ADC5306B147B4B230AACE3480
Authority key identifier: 4A:41:44:C2:37:55:32:9B:82:E2:88:2B:51:8A:93:7E:E6:74:AF:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4994aff-79e3-4800-875a-f4a951d7af28.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4994aff-79e3-4800-875a-f4a951d7af28/e29a2655-fefb-3174-af73-18d15aa4dc9b.roa
Signing time:             Thu 14 May 2020 04:00:00 +0000
ROA not before:           Thu 14 May 2020 04:00:00 +0000
ROA not after:            Sun 12 Nov 2023 05:00:00 +0000
asID:                     19437
IP address blocks:        199.68.217.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:dc:53:06:b1:47:b4:b2:30:aa:ce:34:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4994aff-79e3-4800-875a-f4a951d7af28
        Validity
            Not Before: May 14 04:00:00 2020 GMT
            Not After : Nov 12 05:00:00 2023 GMT
        Subject: CN=e05708e1-3b9c-4933-82c1-578176882243
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:f9:1b:18:9b:e1:5e:0e:1c:dc:2b:61:dd:dc:
                    14:db:95:20:98:84:ab:f2:8a:08:46:09:b5:22:8f:
                    24:12:33:c4:da:8f:84:86:94:a1:e8:4e:5f:08:99:
                    41:a4:fe:08:a8:72:06:06:16:97:07:0e:55:6a:7c:
                    47:08:87:7e:7e:af:8c:0b:93:b5:13:b8:21:03:4b:
                    38:f6:72:73:eb:59:1a:41:f8:b3:b8:32:65:97:96:
                    ba:8c:87:17:d2:27:60:5f:f9:1b:ed:4f:3a:ae:48:
                    8b:f6:66:39:0c:05:38:5c:43:02:79:26:08:cb:21:
                    9c:af:5c:4f:3d:61:6e:f1:91:56:a5:99:d0:0e:ce:
                    d4:23:5a:9c:90:bd:6f:d5:f5:a7:b9:c2:3c:57:ea:
                    68:90:69:89:a2:cf:c4:52:5a:80:f1:7b:de:8d:b6:
                    39:9d:d7:c4:d4:4f:dc:68:c6:32:b3:f7:44:5a:44:
                    a4:3f:f2:5f:3c:5a:4f:7b:e2:a4:04:cb:4c:74:1a:
                    8b:25:5f:0f:49:65:ab:19:c2:6b:46:72:ab:34:ad:
                    3d:b3:a8:4b:7c:3f:ee:90:50:9e:14:4b:d7:22:19:
                    60:4c:71:8a:b1:2f:65:0d:d2:9f:c7:4f:2f:18:ec:
                    e9:7f:3b:d4:33:cb:59:d3:e6:e3:68:b0:88:9e:15:
                    83:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:3E:CE:56:82:C6:74:2F:E3:61:D2:D3:BB:7F:BC:17:C4:5F:A0:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4994aff-79e3-4800-875a-f4a951d7af28/e29a2655-fefb-3174-af73-18d15aa4dc9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4994aff-79e3-4800-875a-f4a951d7af28/a4994aff-79e3-4800-875a-f4a951d7af28.crl

            X509v3 Authority Key Identifier:
                keyid:4A:41:44:C2:37:55:32:9B:82:E2:88:2B:51:8A:93:7E:E6:74:AF:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4994aff-79e3-4800-875a-f4a951d7af28.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.68.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:e8:8b:a1:a3:ee:cd:25:a4:74:6a:c4:f2:94:33:9b:21:b1:
         2a:03:50:9f:c6:96:47:1d:f0:09:00:f8:63:d4:bc:fa:0f:de:
         21:3d:4b:2d:05:4f:fc:12:1c:dc:78:10:1a:15:b8:ad:26:7d:
         5d:63:fc:e8:98:59:7c:2a:b7:d9:20:0a:86:76:1b:04:0a:30:
         fe:1d:0c:50:ab:5b:a2:7e:4c:41:80:69:6c:db:f7:2b:f7:cd:
         e9:09:0c:cc:9f:a1:83:e2:ec:0e:ff:32:b2:8e:04:bb:38:b2:
         16:da:c6:d2:1b:9c:f7:29:64:6b:89:cb:71:d0:b0:6e:f8:3f:
         e5:2c:bd:3e:0c:45:40:cb:01:38:07:55:42:71:9a:01:df:44:
         bd:25:d2:82:34:a0:62:72:27:c7:68:32:d2:4a:95:58:16:7f:
         2c:0c:b3:76:ac:50:d5:c2:d1:78:46:8b:fb:cb:65:4c:07:26:
         b3:16:2e:5e:e8:63:ce:74:d3:4e:10:2c:e0:b2:37:f3:3f:c2:
         a5:00:4d:21:11:3d:13:45:fb:a9:00:f7:8b:48:82:2e:d1:c6:
         87:88:f5:f5:0a:a1:fc:b4:01:c7:a8:84:fd:9c:b4:78:e8:8d:
         4b:b7:3a:dd:ed:11:76:8e:7e:b8:d0:7c:1a:27:d4:83:36:c9:
         5c:47:96:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----