Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ac4312c4-c891-4a96-86d7-0aca56ee26be/6c2c05cc-6f6f-32f5-9fb2-1fff67ff18c1.roa
File:                     6c2c05cc-6f6f-32f5-9fb2-1fff67ff18c1.roa (raw, json)
Hash identifier:          HwbpCCpWQI/iTMRuSkOAiPR5G/hcdVK/Q25cUIAVtsY=
Subject key identifier:   9C:9A:A5:AF:08:6A:A0:35:7E:48:FF:D3:7F:61:AA:78:67:06:10:00
Certificate issuer:       /CN=ac4312c4-c891-4a96-86d7-0aca56ee26be
Certificate serial:       010D0C9F43285841772A388D11FEEF0D91B3F780
Authority key identifier: 77:12:0F:70:34:8B:06:A5:FD:58:C4:3B:EA:5A:30:30:7A:D6:0D:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ac4312c4-c891-4a96-86d7-0aca56ee26be.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ac4312c4-c891-4a96-86d7-0aca56ee26be/6c2c05cc-6f6f-32f5-9fb2-1fff67ff18c1.roa
Signing time:             Thu 06 Apr 2023 13:36:26 +0000
ROA not before:           Thu 06 Apr 2023 13:36:26 +0000
ROA not after:            Wed 09 Jul 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        192.26.97.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:77:2a:38:8d:11:fe:ef:0d:91:b3:f7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac4312c4-c891-4a96-86d7-0aca56ee26be
        Validity
            Not Before: Apr  6 13:36:26 2023 GMT
            Not After : Jul  9 04:00:00 2025 GMT
        Subject: CN=ca5d225b-38c9-4aeb-a714-7c1daf562a42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:98:98:c8:fb:d3:02:fd:90:18:c0:33:eb:83:
                    8a:98:0b:ff:ae:59:6d:f6:8c:f3:01:08:24:ae:1e:
                    dd:74:f2:db:a6:6b:2e:49:eb:c0:28:90:16:b2:1e:
                    f2:d1:e7:87:94:4c:b1:1d:99:f8:4c:e7:0e:d8:43:
                    80:ff:e3:ae:12:a9:01:c0:1d:61:c1:18:46:eb:58:
                    99:f7:9c:35:bb:d9:ce:3d:56:2c:85:07:3e:c2:3d:
                    2c:7f:40:3c:a4:ee:f2:d8:0b:03:d0:31:2e:6c:32:
                    1f:1c:1b:7a:51:1c:3a:98:80:a9:90:91:0e:99:25:
                    b4:bb:7f:34:bb:2d:c4:d2:04:7e:f5:c2:f2:46:06:
                    40:f8:09:1c:aa:6c:18:f5:42:62:72:d8:5d:43:c9:
                    61:c2:f4:19:50:f2:f4:89:5a:cc:13:0b:02:06:1f:
                    3f:49:eb:c4:01:58:35:12:5d:0a:b4:16:f7:dc:39:
                    35:13:ac:21:3d:c7:08:5e:8c:15:7f:63:55:9c:ec:
                    8e:49:a8:02:56:3a:cc:8a:55:c3:6b:d6:ca:94:39:
                    a3:35:31:26:cc:9a:0d:c0:42:e6:c5:c5:ad:11:ad:
                    c4:dd:25:92:e2:0d:13:3f:97:fc:bc:6f:08:e6:c6:
                    17:14:28:2a:a1:a1:df:1e:91:b6:d9:5b:63:47:5d:
                    73:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:9A:A5:AF:08:6A:A0:35:7E:48:FF:D3:7F:61:AA:78:67:06:10:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ac4312c4-c891-4a96-86d7-0aca56ee26be/6c2c05cc-6f6f-32f5-9fb2-1fff67ff18c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ac4312c4-c891-4a96-86d7-0aca56ee26be/ac4312c4-c891-4a96-86d7-0aca56ee26be.crl

            X509v3 Authority Key Identifier:
                keyid:77:12:0F:70:34:8B:06:A5:FD:58:C4:3B:EA:5A:30:30:7A:D6:0D:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ac4312c4-c891-4a96-86d7-0aca56ee26be.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.26.97.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:4e:aa:a2:5b:63:0f:38:07:7a:93:c3:bf:c9:ac:b3:e0:15:
         a2:ef:2f:06:45:be:62:af:1c:bb:9a:54:e1:08:8d:7e:11:0a:
         78:59:be:6e:68:ca:cf:f3:39:75:f1:6f:84:fd:af:6c:91:67:
         f9:d4:9a:32:9e:4b:af:e4:1e:f9:17:1b:59:aa:7f:12:6b:c4:
         3e:6f:30:51:02:02:c7:c2:85:63:e8:b3:95:03:4f:1d:0b:81:
         37:2f:a2:af:79:74:ff:c5:16:eb:1b:0f:4f:5f:f2:e2:82:2a:
         d3:11:f6:09:a6:24:71:85:bc:81:b7:81:7f:ee:f2:44:38:c1:
         eb:6e:e6:4f:fc:f3:17:d6:ff:47:11:71:be:13:23:71:de:f0:
         f9:fe:c7:64:2a:c5:03:ca:41:f4:65:6d:4f:5d:f6:a6:dc:50:
         32:76:ed:04:98:ed:2d:7d:36:8b:15:3b:5a:70:2a:4f:3d:8b:
         e6:30:57:12:25:19:9b:4f:19:06:88:e2:ba:e6:c5:78:ea:ad:
         df:22:79:5a:46:3c:17:7c:79:6d:3c:15:38:4a:b2:9b:ba:ca:
         ed:42:35:84:01:aa:76:7a:a0:c1:6e:a7:75:c3:9c:ee:48:3d:
         2e:61:ac:97:ae:c1:13:aa:60:82:4c:e0:55:aa:50:e5:b8:3f:
         c0:01:02:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----