Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/24272c93-2775-39cb-ad58-c4e568355eb0.roa
File:                     24272c93-2775-39cb-ad58-c4e568355eb0.roa (raw, json)
Hash identifier:          qJxtUlR3bcxAiZIAo9gC5drNjJWnTKTrPrvN5hmb/Fw=
Subject key identifier:   37:5C:0C:57:EE:81:3B:73:EF:8B:3E:50:B5:F5:EC:66:11:6D:47:E9
Certificate issuer:       /CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
Certificate serial:       010D0C9F43285843A93036202123CD3006659600
Authority key identifier: F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/24272c93-2775-39cb-ad58-c4e568355eb0.roa
Signing time:             Tue 24 Oct 2023 22:40:57 +0000
ROA not before:           Tue 24 Oct 2023 22:40:57 +0000
ROA not after:            Mon 22 Jan 2024 23:40:57 +0000
asID:                     834
IP address blocks:        65.110.47.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:a9:30:36:20:21:23:cd:30:06:65:96:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
        Validity
            Not Before: Oct 24 22:40:57 2023 GMT
            Not After : Jan 22 23:40:57 2024 GMT
        Subject: CN=858776a6-4bf7-4f6b-b46e-a1845c566c18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:77:67:91:be:17:fa:54:bb:11:f4:1e:0b:d2:
                    43:44:90:78:7d:94:fc:27:d8:0e:0a:4f:3e:a0:79:
                    0b:d0:b8:d5:0d:45:58:e3:e7:1a:92:2b:bb:ed:4d:
                    41:98:11:e1:a1:54:60:f0:6c:1f:4d:bf:49:23:6c:
                    a0:71:90:46:31:1d:a4:89:cb:ba:e4:c8:1e:41:e9:
                    b3:9e:6c:e9:1f:32:5b:af:fb:0d:99:3a:11:2c:49:
                    35:dd:85:7b:7e:ad:82:52:8b:d6:2d:27:0b:0c:55:
                    69:d9:f3:ff:87:29:1a:29:91:dc:ad:dc:d9:04:1b:
                    d3:2a:9c:61:59:09:bd:7b:ea:74:68:84:76:d9:dc:
                    c8:07:98:a0:9f:a8:67:b5:b5:aa:ad:c8:1f:54:ec:
                    ea:0e:7c:f6:1d:79:8c:f3:37:08:02:81:39:c8:86:
                    df:08:fc:00:38:ba:1b:5b:73:c4:fc:c7:c3:0e:6c:
                    29:b5:66:e8:96:09:a5:ed:90:25:66:a4:83:85:fc:
                    88:de:61:b3:e0:74:12:b5:a5:2a:79:9b:ea:ef:2e:
                    f3:b5:db:32:ad:8d:fc:1c:69:37:a1:c2:b8:ff:d7:
                    62:04:34:9f:1c:eb:00:01:12:0b:5c:d3:90:2d:a4:
                    37:be:47:7f:6f:c7:fb:aa:35:e1:b8:b4:86:fc:ec:
                    0e:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:5C:0C:57:EE:81:3B:73:EF:8B:3E:50:B5:F5:EC:66:11:6D:47:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/24272c93-2775-39cb-ad58-c4e568355eb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl

            X509v3 Authority Key Identifier:
                keyid:F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.110.47.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:dd:fb:af:4e:00:aa:49:0e:ab:0c:48:cc:ff:0a:ae:a1:b5:
         b9:cb:32:24:00:7b:4f:24:5f:68:f5:de:d2:06:e6:ad:dd:fd:
         ad:a6:10:88:8d:ce:76:f4:f0:07:fb:86:26:46:7d:97:f3:d1:
         4d:fb:87:f5:9c:11:1c:6c:d3:96:f2:e6:a5:c6:e6:b7:c1:91:
         97:47:b6:77:83:d4:d1:0c:3a:f9:39:aa:b9:fe:fc:74:6f:36:
         80:3e:12:95:11:c0:96:65:74:5f:6f:f0:6d:a8:eb:02:3b:1e:
         86:88:8e:39:d1:c0:5a:9f:40:1a:da:81:57:b7:29:90:aa:f4:
         a0:03:d1:cd:f9:09:35:c0:52:4a:fa:bc:01:dd:d3:df:8e:22:
         d0:f9:74:b4:5d:73:32:bb:12:b2:d0:2f:6a:1e:8e:08:14:44:
         e2:3b:0c:cf:2a:f4:e0:1d:53:af:cb:ad:df:41:b6:50:26:7e:
         9c:97:55:0d:bc:97:e7:67:8e:f6:f6:48:65:f5:6e:d3:fb:03:
         1c:ee:e1:ce:07:51:89:7a:a6:fa:99:7b:91:c1:00:4b:3c:b5:
         d4:9a:a8:90:6c:58:61:9e:0d:cf:9a:d6:e1:2c:67:8a:0e:a9:
         a2:1b:21:00:79:7e:97:ad:a9:1c:8b:17:75:aa:b8:03:26:cb:
         c8:5f:45:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----