Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/12817fd6-57b8-371e-b3a8-6ba62368474a.roa
File:                     12817fd6-57b8-371e-b3a8-6ba62368474a.roa (raw, json)
Hash identifier:          GzXX6r8orMARwwzJWiIMkFDk29Q6Twlmol23ryKIYi0=
Subject key identifier:   F6:AE:9D:CC:AB:C2:78:40:9F:70:F6:41:12:C4:11:2C:B2:DA:2B:9A
Certificate issuer:       /CN=f3e09673-5c6e-4340-ad11-4da8dfb8c777
Certificate serial:       010D0C9F432858417773BB45D07B751B6D792600
Authority key identifier: 6B:3F:AD:C6:78:35:65:4F:18:4F:BB:AA:8E:7B:24:08:DE:32:DA:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/12817fd6-57b8-371e-b3a8-6ba62368474a.roa
Signing time:             Wed 15 Mar 2023 14:07:50 +0000
ROA not before:           Wed 15 Mar 2023 14:07:50 +0000
ROA not after:            Tue 17 Jun 2025 04:00:00 +0000
asID:                     14464
IP address blocks:        131.109.40.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:77:73:bb:45:d0:7b:75:1b:6d:79:26:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3e09673-5c6e-4340-ad11-4da8dfb8c777
        Validity
            Not Before: Mar 15 14:07:50 2023 GMT
            Not After : Jun 17 04:00:00 2025 GMT
        Subject: CN=63ea5a1a-a1a8-41c2-ab45-11a8be958710
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b7:29:a2:9a:b8:5b:ab:53:09:56:91:d3:61:
                    48:f7:da:02:cf:ae:63:a8:0a:2b:0f:e4:5f:aa:01:
                    d2:dd:9d:61:35:46:0b:87:9a:40:0d:e9:df:20:31:
                    ae:bd:92:0e:d9:06:92:bd:22:d5:b6:a9:d9:44:b5:
                    dd:a1:70:c9:13:14:ec:1d:49:a3:44:54:e3:27:64:
                    5c:b7:a0:eb:80:33:c6:68:1f:d5:56:53:bd:98:13:
                    43:5a:33:43:d3:6a:68:b1:60:1a:ab:69:d9:fa:80:
                    e8:3a:7a:b5:96:98:f4:86:0f:a1:44:f9:34:5c:99:
                    d3:fd:60:5e:95:59:be:37:23:c9:49:37:f3:72:bd:
                    54:50:a0:99:c4:9e:71:fc:7c:5f:04:ae:1d:e8:6a:
                    01:34:d5:38:eb:87:33:27:3c:2c:26:b7:9e:ae:e3:
                    90:9b:70:ef:1a:f8:54:91:fb:52:c7:83:21:20:6c:
                    28:f1:cd:73:25:76:db:ea:42:1d:73:8f:1c:bc:40:
                    16:49:2e:62:90:e8:5c:bb:b9:2c:44:82:90:2d:54:
                    84:65:d0:23:f0:a7:61:60:4a:cd:48:b1:53:40:f2:
                    84:a6:cc:4f:f1:0b:37:5f:d5:ed:e5:a0:ca:44:4b:
                    62:81:75:a5:ac:27:40:e7:5e:19:2a:be:c8:d1:b4:
                    9c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:AE:9D:CC:AB:C2:78:40:9F:70:F6:41:12:C4:11:2C:B2:DA:2B:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/12817fd6-57b8-371e-b3a8-6ba62368474a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/f3e09673-5c6e-4340-ad11-4da8dfb8c777.crl

            X509v3 Authority Key Identifier:
                keyid:6B:3F:AD:C6:78:35:65:4F:18:4F:BB:AA:8E:7B:24:08:DE:32:DA:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.109.40.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:fc:7d:f3:dd:87:6f:6b:d6:62:11:4a:e5:63:d7:f5:21:80:
         f9:1c:67:b7:e6:a2:61:e3:40:37:bf:16:c9:ff:b6:6a:b8:63:
         98:eb:25:2f:b0:c4:e9:25:13:c2:c5:1b:1d:1b:38:7b:85:bb:
         26:01:52:58:79:21:9f:0c:fb:17:c4:a6:16:53:cc:6b:88:94:
         73:b9:99:32:0f:0d:28:b7:49:ef:d5:68:10:4e:dd:c3:93:d3:
         ea:bc:1f:2c:b8:b1:47:82:57:7b:8e:e5:74:50:36:a8:fd:36:
         0d:80:cb:3c:49:87:37:d6:cf:8d:c4:75:7f:43:02:95:c3:8f:
         96:6b:1e:af:b9:0d:cf:b7:e3:5f:fc:2e:88:b4:23:8f:c6:68:
         14:4e:9b:69:dc:30:63:b1:cd:26:80:9a:31:86:66:b0:70:a2:
         20:22:7b:52:f7:45:57:14:a7:9c:51:bc:7d:04:9b:f7:1b:67:
         3b:b6:81:d9:51:2f:a9:8f:dd:b3:04:df:e8:ce:ed:53:a7:b1:
         c6:00:34:bc:12:1c:6d:2b:86:5f:06:4a:99:59:e4:75:24:05:
         ba:6c:1e:49:67:2e:11:65:66:cd:72:ec:78:59:80:40:6b:bc:
         f6:d1:a3:ae:69:af:ff:2f:3c:38:57:e9:6a:18:be:2d:b9:14:
         65:c7:ea:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----