Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/cdf167f0-4cc5-3a3f-a89f-9f23c7552f67.roa
File:                     cdf167f0-4cc5-3a3f-a89f-9f23c7552f67.roa (raw, json)
Hash identifier:          ST2jdC0WMTCU2Sq5KHaRQaUKE61oSaf2dZxuMWkvCr4=
Subject key identifier:   FD:1C:A6:2B:82:8F:C4:87:2C:73:60:73:1D:70:3D:01:AB:34:59:0D
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285843438F79CC8176F90ADF6CCC40
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/cdf167f0-4cc5-3a3f-a89f-9f23c7552f67.roa
Signing time:             Mon 18 Sep 2023 13:00:26 +0000
ROA not before:           Mon 18 Sep 2023 13:00:26 +0000
ROA not after:            Sun 17 Dec 2023 14:00:26 +0000
asID:                     834
IP address blocks:        198.102.11.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:43:8f:79:cc:81:76:f9:0a:df:6c:cc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Sep 18 13:00:26 2023 GMT
            Not After : Dec 17 14:00:26 2023 GMT
        Subject: CN=9502ebe1-ef2e-4274-8583-baf00013c321
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:45:d4:f0:d1:d4:eb:90:a6:03:d9:64:58:96:
                    65:75:37:5c:92:ac:b6:14:08:37:1d:84:a3:cd:e9:
                    71:31:e5:64:cf:9f:d0:a8:f9:e4:30:68:03:7e:d7:
                    cb:fa:73:c4:8d:8b:20:1a:e7:dd:f5:fe:32:02:d0:
                    15:3d:39:02:02:e6:f5:9a:bd:59:03:df:0c:25:9e:
                    b8:7b:5c:f8:f3:79:4b:91:71:6e:1e:6d:a5:5f:be:
                    35:72:a4:14:50:71:58:17:75:c8:ce:e5:d7:e4:09:
                    39:90:91:f4:6f:74:2f:0a:07:1c:b8:0e:14:6a:ce:
                    15:9a:cb:9e:a9:47:d2:92:bb:0b:95:df:4e:9e:d5:
                    97:34:d3:75:4a:18:f7:1d:26:c7:eb:63:16:92:31:
                    c9:95:e0:a9:c7:70:e3:1b:4e:0d:42:2f:81:9f:b5:
                    c5:8e:85:4f:2e:59:53:35:7d:36:9d:ba:5d:24:d8:
                    35:5f:f3:c8:8d:e5:fb:a3:13:0b:2e:68:c9:d6:a0:
                    9b:a2:6d:9f:54:3a:95:79:e0:60:8e:04:30:b3:c6:
                    9e:25:9d:b4:09:f7:a8:31:14:66:32:dd:7c:25:22:
                    f7:3d:e9:a8:22:9e:e9:15:cf:2e:dd:be:2d:28:d8:
                    45:7e:f3:b8:c6:3c:87:fc:7f:5c:82:8d:91:1d:c1:
                    e3:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:1C:A6:2B:82:8F:C4:87:2C:73:60:73:1D:70:3D:01:AB:34:59:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/cdf167f0-4cc5-3a3f-a89f-9f23c7552f67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.102.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         dd:61:3f:3f:ac:d7:d3:07:fb:e2:fd:dd:6e:99:fa:f9:1f:72:
         64:77:03:aa:0e:ae:57:bf:15:df:b3:c5:21:de:da:30:1c:57:
         3f:37:33:b0:64:45:42:8f:ac:23:3e:2d:93:0c:d7:51:2e:35:
         f3:15:79:ac:02:4c:9f:e6:d8:45:50:ba:b6:1e:0c:80:85:f4:
         29:dc:e5:df:c6:2f:1a:e0:80:92:28:a5:90:9b:6a:a0:ae:bb:
         15:60:4e:be:51:de:91:0d:b1:b5:dd:36:32:4e:11:33:cd:0b:
         09:dd:aa:bb:17:d0:19:49:8f:fa:6f:f5:65:5c:4d:a9:b2:68:
         62:b8:4b:17:13:91:bf:df:7a:02:52:84:60:87:69:31:eb:33:
         50:1e:8f:11:c2:bb:90:fa:e8:ff:27:2c:7c:aa:1e:6e:43:96:
         59:16:04:dc:60:51:d2:77:02:f8:c1:ab:39:02:4a:76:e6:b9:
         a2:ac:1f:e9:83:4b:37:73:0a:95:99:2b:8e:cd:5c:9f:39:32:
         1e:d6:0e:5d:bb:df:ce:5b:3c:f4:0e:34:76:c8:35:9d:c3:4b:
         41:4c:87:8f:70:5d:c4:2b:5e:39:7e:42:3d:14:c4:c6:fc:e6:
         9c:40:4b:c2:b1:4b:28:e6:2f:b7:0f:a3:29:6f:43:4e:7b:32:
         a4:96:6d:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----