Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/9c3854b8-9ab1-33c2-8220-8209dbdbdb50.roa
File:                     9c3854b8-9ab1-33c2-8220-8209dbdbdb50.roa (raw, json)
Hash identifier:          GJ04dcjo/jQpq2irFL132HKUzL8kd39D2HcLbUJA990=
Subject key identifier:   20:CA:BD:25:5E:12:3C:F9:4E:80:A3:2C:49:73:88:84:36:86:E2:83
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328583FC6B4118DB7FD082F66D84200
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/9c3854b8-9ab1-33c2-8220-8209dbdbdb50.roa
Signing time:             Tue 02 Aug 2022 17:30:08 +0000
ROA not before:           Tue 02 Aug 2022 17:30:08 +0000
ROA not after:            Tue 04 Feb 2025 05:00:00 +0000
asID:                     49999
IP address blocks:        216.74.107.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:c6:b4:11:8d:b7:fd:08:2f:66:d8:42:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Aug  2 17:30:08 2022 GMT
            Not After : Feb  4 05:00:00 2025 GMT
        Subject: CN=7464d60a-153c-4504-b448-60b53a58b0f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:1c:5e:77:e4:e3:d7:2f:9f:21:cd:22:82:4e:
                    50:ac:d3:e3:20:08:b8:f9:c1:77:a2:d3:13:8a:8a:
                    ff:77:71:1f:99:31:87:e4:ae:69:f9:6b:9c:74:df:
                    e9:85:8a:36:a2:24:e0:5e:7c:85:cc:4a:ba:32:c2:
                    06:aa:4a:1d:e4:7b:7f:1c:25:36:83:08:ad:b1:5b:
                    bf:a6:e7:e9:c1:a5:80:2f:30:5b:5f:eb:09:51:9b:
                    3c:5d:8e:18:ab:e4:90:1d:cc:6c:5a:2d:83:88:03:
                    44:b7:aa:0d:4e:66:f8:ae:6e:68:1d:9e:ba:95:31:
                    2f:02:db:34:99:e0:47:e2:46:b5:bc:28:51:37:20:
                    74:d4:9c:7e:11:08:10:c0:b2:71:85:25:a7:ef:33:
                    0c:a8:4b:06:9d:13:31:89:a4:22:ba:e6:52:6c:c4:
                    8d:d4:cd:73:40:5a:03:fa:58:29:5e:b4:38:d4:d3:
                    f0:de:01:2f:f1:eb:ab:9b:6d:3d:d8:d7:cf:9e:b2:
                    7d:9f:01:5c:98:1c:f0:b9:2b:cd:63:1d:1c:5f:0c:
                    8c:c8:1b:37:8f:94:5f:a3:30:38:e2:98:87:6c:51:
                    5b:10:9d:91:2a:0c:e3:c3:21:2f:1d:75:d7:10:35:
                    95:23:65:4f:63:f3:e5:6b:56:72:e4:75:48:d2:6a:
                    93:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:CA:BD:25:5E:12:3C:F9:4E:80:A3:2C:49:73:88:84:36:86:E2:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/9c3854b8-9ab1-33c2-8220-8209dbdbdb50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.74.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:32:25:7d:1a:bd:16:27:3e:1c:00:62:a5:23:1c:9a:0a:56:
         2c:82:1c:58:99:b6:51:c4:4d:b0:68:7b:5f:62:51:fa:bc:0f:
         2b:46:00:fb:4b:4c:81:ab:d5:7a:e6:63:9d:90:b6:ad:36:51:
         68:01:75:c1:76:a2:7b:57:71:51:bd:ba:6a:35:69:5a:03:15:
         7d:c4:37:97:1d:06:0b:72:6f:37:40:d2:e3:5b:e5:f2:5b:fb:
         fe:f5:4c:b2:2b:3b:50:05:c8:ac:12:62:15:42:dd:27:3a:e0:
         24:4d:5e:9a:6b:27:74:ab:e0:3d:1b:e7:4e:c5:4f:b9:04:c7:
         64:b1:95:4c:50:6e:0f:53:12:48:af:0e:d1:89:18:20:fa:34:
         50:d1:ed:3e:c1:2f:18:e4:0d:1d:f2:4e:f7:4c:6f:b1:9b:86:
         49:1a:11:8d:0b:4c:40:9e:28:66:8e:f7:2a:0f:e0:04:fa:0b:
         6f:bc:72:2c:1f:5d:f9:51:28:1c:ba:4b:e3:81:39:2d:0b:cf:
         a7:15:ff:91:da:aa:c3:23:3f:1d:d3:20:72:e5:83:78:71:ca:
         e7:f3:24:0d:95:21:e5:03:9b:52:e6:69:59:84:fb:7d:fd:a8:
         72:9b:2f:66:f1:22:19:64:2d:19:c7:06:eb:44:8b:64:e9:54:
         c9:30:fe:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----