Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/7f95d360-4a00-374a-99c0-bac8cc8e3f03.roa
File:                     7f95d360-4a00-374a-99c0-bac8cc8e3f03.roa (raw, json)
Hash identifier:          Ai64k/QCHWGBPDxhNWpp/0jyYgFSB8ztSuIpTPg0JhA=
Subject key identifier:   98:C2:75:6F:1F:10:F0:76:F9:56:D5:03:96:3E:3F:56:EB:DD:48:D9
Certificate issuer:       /CN=d45613e1-c70f-4ce1-996e-e01d89469087
Certificate serial:       010D0C9F4328583E2C2C606C25EC00257FA29C20
Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/7f95d360-4a00-374a-99c0-bac8cc8e3f03.roa
Signing time:             Mon 22 Mar 2021 22:06:14 +0000
ROA not before:           Mon 22 Mar 2021 22:06:14 +0000
ROA not after:            Sat 10 May 2025 04:00:00 +0000
asID:                     211585
IP address blocks:        64.224.16.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:2c:2c:60:6c:25:ec:00:25:7f:a2:9c:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087
        Validity
            Not Before: Mar 22 22:06:14 2021 GMT
            Not After : May 10 04:00:00 2025 GMT
        Subject: CN=ae0c4a01-28d8-42d4-9a6a-285dce261ec4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:7c:08:9a:2c:fa:1b:29:5b:39:45:60:ab:d2:
                    a7:6e:53:1c:44:61:63:21:15:05:a1:93:31:e0:cc:
                    4c:9a:be:a0:84:96:b9:17:54:11:15:06:7f:02:ef:
                    26:f9:0c:3f:0f:86:35:ea:f2:7a:a8:bc:ec:54:73:
                    a2:f0:55:ac:53:96:13:f7:f2:66:4c:c9:31:ad:4f:
                    2c:4b:ba:32:0f:b6:46:97:60:10:82:b2:4b:2c:87:
                    13:c2:96:c4:59:67:95:1a:51:15:3d:73:4b:e9:4b:
                    20:e1:f0:a7:c3:56:11:16:8a:48:be:c9:f1:78:3d:
                    77:ab:62:fd:88:f7:74:2b:3b:8a:62:d3:59:64:b1:
                    93:db:55:c6:08:cc:97:22:59:7d:33:fe:a0:94:e7:
                    e9:0e:a3:34:a5:25:04:e1:b7:95:94:00:d0:34:6f:
                    53:bc:92:9d:7d:fc:15:6c:f0:6c:7a:64:60:24:e2:
                    c4:7f:b2:d0:4e:6f:43:95:b4:37:ed:76:31:28:6e:
                    2d:98:38:3a:b0:b1:85:31:db:98:cc:ba:c4:59:d2:
                    8a:52:a6:0e:8b:f0:26:e6:e0:13:ea:f5:44:a8:34:
                    fa:e6:06:a7:a6:dc:ee:9f:bb:35:85:03:f3:e3:74:
                    b5:89:77:11:93:34:f7:46:fe:84:43:3f:8f:e5:f6:
                    db:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:C2:75:6F:1F:10:F0:76:F9:56:D5:03:96:3E:3F:56:EB:DD:48:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/7f95d360-4a00-374a-99c0-bac8cc8e3f03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl

            X509v3 Authority Key Identifier:
                keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.224.16.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:78:22:8c:04:2e:7f:e1:ba:7c:3d:81:cc:27:c3:e2:d3:0d:
         e1:2d:53:f2:01:63:bc:5c:0d:86:05:bd:36:2d:b2:88:c4:7c:
         7e:aa:67:c4:38:bb:01:cd:12:41:27:d2:8a:6c:9a:d7:fd:fa:
         f5:a6:38:26:81:a8:30:72:83:00:ba:a9:00:43:3a:c9:d3:62:
         32:90:f8:30:5a:84:34:47:be:b9:89:4b:d7:a9:20:18:49:b2:
         a6:90:5f:95:ab:4c:7b:92:33:26:6f:53:73:c6:0a:68:d3:3f:
         e4:15:d1:6b:c2:fd:26:50:f3:30:98:49:77:78:0b:74:d4:19:
         2c:12:df:e0:2c:7b:21:c9:6e:b9:a7:a3:39:90:5b:2f:ee:df:
         bf:19:91:a8:39:1c:88:b5:9f:35:22:0a:86:a6:0c:14:7d:78:
         62:69:8b:5a:d2:e6:f2:11:98:ab:93:cd:b6:60:43:81:af:19:
         88:2d:68:16:70:97:d2:aa:78:61:13:2c:05:96:83:87:00:7e:
         01:e9:74:9a:93:47:63:77:88:c9:55:e5:8e:2d:a8:7e:07:1e:
         ae:c8:46:88:5c:74:9e:44:40:c6:71:b6:0f:2c:90:02:c8:ce:
         8b:64:40:83:5e:fe:21:db:aa:cc:7c:e1:d7:05:e4:23:f5:29:
         43:fc:88:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----