Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/5144e1b6-c5fc-3910-9547-175c59797656.roa
File:                     5144e1b6-c5fc-3910-9547-175c59797656.roa (raw, json)
Hash identifier:          4+MxpZw7nZ8uEuOp6sgMzFNp0VmjCZTiJ6PUXui2R9Y=
Subject key identifier:   5A:20:CC:45:36:43:62:08:93:E2:6A:9A:76:74:F0:4F:E3:D4:8A:2D
Certificate issuer:       /CN=ccdced21-8f04-4273-8f8a-07593c3968fb
Certificate serial:       010D0C9F43285841A6860D5B786F22955000F400
Authority key identifier: B2:D4:9D:85:44:98:EF:59:EA:08:76:0F:CF:BD:75:03:B0:E2:47:C7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/5144e1b6-c5fc-3910-9547-175c59797656.roa
Signing time:             Fri 24 Mar 2023 16:27:10 +0000
ROA not before:           Fri 24 Mar 2023 16:27:10 +0000
ROA not after:            Sun 15 Jun 2025 04:00:00 +0000
asID:                     61317
IP address blocks:        23.150.72.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:a6:86:0d:5b:78:6f:22:95:50:00:f4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccdced21-8f04-4273-8f8a-07593c3968fb
        Validity
            Not Before: Mar 24 16:27:10 2023 GMT
            Not After : Jun 15 04:00:00 2025 GMT
        Subject: CN=3e634a2c-8603-4d83-9913-c15284359d45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:51:a0:89:24:dc:94:11:c8:23:0d:5c:cb:94:
                    4c:2c:bb:d9:a5:b2:ef:3b:b2:74:12:62:ee:74:39:
                    c4:38:f9:3c:c3:f0:9b:aa:89:b3:c1:70:98:fa:33:
                    d9:6f:42:d5:0c:70:3f:82:1f:67:4d:bb:ae:b6:e2:
                    83:b6:89:cc:94:00:f5:6e:b8:81:da:c8:5b:48:01:
                    77:8e:5e:e9:ae:d5:4d:bf:4e:26:0f:ce:86:62:c8:
                    41:9e:ea:de:04:4a:96:34:9a:57:e1:3e:2e:89:6e:
                    8a:b6:d8:80:d9:f4:9f:8f:67:9e:5a:cf:d1:f0:4e:
                    c9:00:ee:32:9a:ab:48:35:15:90:8f:a1:cb:d7:9d:
                    33:07:1f:0c:7d:0a:cd:35:91:6c:ab:40:2b:7b:e3:
                    1c:fe:65:3c:cb:2f:6e:13:a0:bf:36:62:0d:ad:23:
                    69:38:eb:c3:5f:da:35:46:5b:93:19:c9:f3:5e:59:
                    fe:4c:3c:17:e5:30:ce:eb:2f:b5:6a:3d:82:e8:c8:
                    ea:53:1f:68:c5:6e:c2:77:f5:a6:8e:37:c6:cc:04:
                    11:93:10:3d:50:3f:e8:ca:c6:3d:e8:3b:88:dd:7b:
                    6f:01:07:86:75:8e:d0:b4:e2:81:08:38:bf:6c:41:
                    ed:30:06:de:34:67:1c:15:74:38:b0:7f:6e:a7:7d:
                    d4:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:20:CC:45:36:43:62:08:93:E2:6A:9A:76:74:F0:4F:E3:D4:8A:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/5144e1b6-c5fc-3910-9547-175c59797656.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/ccdced21-8f04-4273-8f8a-07593c3968fb.crl

            X509v3 Authority Key Identifier:
                keyid:B2:D4:9D:85:44:98:EF:59:EA:08:76:0F:CF:BD:75:03:B0:E2:47:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.150.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:b4:1c:ba:27:5a:69:48:00:f4:7a:ec:ea:2e:fe:63:2b:b0:
         c4:9f:31:49:23:f9:83:10:72:fe:48:9e:eb:1b:09:19:6f:03:
         1b:69:a2:85:90:36:66:46:0f:96:18:c1:5a:b5:35:1e:b6:3e:
         70:11:15:99:9f:a8:45:7d:74:ec:2c:fa:67:f4:21:4b:f0:d6:
         ad:1a:c4:90:e3:91:6d:a5:4c:c3:d8:c5:a2:97:d0:85:09:a2:
         22:0a:cd:a5:24:48:d8:62:4e:71:98:9e:cd:4b:98:b1:9b:33:
         0d:ae:8d:6e:a5:3a:42:a7:00:18:11:33:e7:39:15:f4:cd:43:
         c9:04:e1:10:db:fd:26:92:d8:15:e0:bf:0f:dd:d9:54:01:34:
         ef:48:96:d9:69:95:64:78:e5:ed:75:f9:22:dc:55:e0:c3:8d:
         80:61:0b:c4:e0:f9:a4:55:0f:16:32:a6:5c:77:05:18:db:dd:
         8f:ea:72:0c:70:09:87:19:cf:9b:83:a3:dc:73:5e:22:eb:c1:
         12:43:f4:8c:75:bf:10:12:59:df:30:5d:10:2d:6d:6e:41:33:
         cb:69:30:f6:0f:ef:8c:35:40:31:5d:77:2a:6e:f9:ec:b8:cb:
         7d:2f:1f:76:51:bd:14:dd:3f:0c:30:d8:49:38:1a:07:a1:2d:
         c0:b2:2c:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----