Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/02aee938-1808-302c-8f14-adcf49e031ad.roa
File:                     02aee938-1808-302c-8f14-adcf49e031ad.roa (raw, json)
Hash identifier:          ZposQLiO6d6VYxJ4B+VaJzk/zhzezA7G7yYCYKb4Q6o=
Subject key identifier:   CD:17:22:D4:20:A7:9D:7D:56:53:97:5D:A8:2A:CD:09:AF:2B:A2:1B
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F432858418279E6730ED72507C5C2F120
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/02aee938-1808-302c-8f14-adcf49e031ad.roa
Signing time:             Tue 13 Dec 2022 18:27:09 +0000
ROA not before:           Tue 13 Dec 2022 18:27:09 +0000
ROA not after:            Sun 13 Jul 2025 04:00:00 +0000
asID:                     834
IP address blocks:        216.122.164.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:82:79:e6:73:0e:d7:25:07:c5:c2:f1:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Dec 13 18:27:09 2022 GMT
            Not After : Jul 13 04:00:00 2025 GMT
        Subject: CN=8df21ceb-babb-4de1-b17b-025fcee91fc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f4:17:15:aa:1d:f8:e3:03:af:aa:1f:04:b0:
                    c7:8c:91:3c:59:16:cd:c9:5a:ae:de:0b:32:6b:50:
                    84:5f:f8:7f:1a:42:35:dc:ba:11:42:3b:2a:92:a3:
                    a6:52:32:a8:42:1d:ea:5b:b4:c6:e9:fb:17:36:0d:
                    e9:45:04:e9:e9:c2:8d:1a:b4:3e:8c:87:c5:08:d4:
                    a8:ca:81:74:6d:9d:4d:9f:7b:1b:ad:c3:59:69:7f:
                    2c:ff:f1:8b:17:80:fe:45:90:14:8e:e7:f8:d4:b4:
                    fd:e7:53:5d:16:90:fd:76:f3:0e:dc:c7:21:12:c3:
                    5e:c1:25:8b:4c:c1:45:a6:f1:24:1b:9f:17:ee:6a:
                    d2:6b:c9:f3:01:90:b5:7f:20:d4:18:53:34:da:06:
                    28:dc:45:35:69:48:b1:94:50:af:2e:81:e2:c7:05:
                    35:c4:95:b9:db:3b:f7:32:26:1f:b4:6b:04:e9:ea:
                    84:9a:3b:81:43:5e:48:40:60:78:f6:75:2d:a2:10:
                    bb:fe:01:b8:2c:30:b8:2a:8a:5c:a1:ba:e1:4c:03:
                    45:9f:24:5b:91:bd:3d:0b:93:f4:b0:6a:e4:ea:a7:
                    18:55:ee:91:9f:20:89:fa:ed:cb:2d:8a:af:3f:f7:
                    41:90:1d:54:92:34:9c:ac:f2:27:b4:52:ea:3f:9e:
                    af:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:17:22:D4:20:A7:9D:7D:56:53:97:5D:A8:2A:CD:09:AF:2B:A2:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/02aee938-1808-302c-8f14-adcf49e031ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.164.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e0:66:82:4e:59:5d:4c:4c:54:93:ef:22:39:31:05:0c:26:09:
         f4:70:bb:53:01:ed:f2:2a:1b:76:73:b7:13:70:44:82:20:de:
         fd:d0:31:70:93:bd:d3:20:00:d1:01:37:dc:d8:7b:8e:b4:5d:
         bf:14:d0:ee:6b:76:d6:4b:2b:76:55:3c:cb:eb:71:07:79:23:
         86:0f:a7:1a:ec:4b:6d:6d:d7:27:4f:13:44:7c:59:e1:ec:fc:
         b6:c3:9c:b8:5e:36:cc:93:8b:d1:bc:ec:8b:28:df:7c:ad:22:
         6f:36:23:1c:96:68:d8:65:70:7c:d0:25:ff:58:03:5a:7b:e9:
         d3:28:97:80:2c:d5:bf:29:df:e2:b3:0c:1c:33:4a:8f:5d:23:
         8a:b4:ca:bc:a4:dd:3f:b2:66:88:60:f6:53:42:6d:41:95:e8:
         65:8e:99:88:b8:6d:fa:bc:8c:e5:0a:f2:22:23:93:fb:e6:3b:
         ad:3c:14:31:f4:93:d8:77:f2:d9:28:25:0d:96:4c:f5:5c:17:
         85:74:69:cf:a9:cf:f6:18:4e:a5:3f:af:4c:22:15:73:b0:c0:
         99:e0:76:3d:6a:66:dc:91:2a:e9:fa:6f:c2:96:18:aa:a5:a7:
         de:61:6e:18:79:96:76:c6:cb:76:18:99:70:48:fc:cb:a2:7e:
         49:b5:49:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----