Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/271a7899-796d-302c-9ee1-11140e504aeb.roa
File:                     271a7899-796d-302c-9ee1-11140e504aeb.roa (raw, json)
Hash identifier:          AHPmIeZqBHn8cUJmpAHnis8SXUN0MR5P37wQDVXYmHE=
Subject key identifier:   09:EF:F6:ED:A4:AD:37:E6:1A:05:EC:CB:17:34:A3:0C:D1:31:10:45
Certificate issuer:       /CN=0d1fca78-9d98-4559-bd51-80a6c47ba01e
Certificate serial:       010D0C9F43285841B17A5F22F5CB265A0D77B200
Authority key identifier: CA:61:9B:E8:AC:A4:3A:07:D0:BF:6A:5F:5B:AA:3F:D4:20:E9:5A:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/271a7899-796d-302c-9ee1-11140e504aeb.roa
Signing time:             Tue 24 May 2022 21:33:00 +0000
ROA not before:           Tue 24 May 2022 21:33:00 +0000
ROA not after:            Mon 26 Aug 2024 04:00:00 +0000
asID:                     19551
IP address blocks:        160.129.184.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:b1:7a:5f:22:f5:cb:26:5a:0d:77:b2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d1fca78-9d98-4559-bd51-80a6c47ba01e
        Validity
            Not Before: May 24 21:33:00 2022 GMT
            Not After : Aug 26 04:00:00 2024 GMT
        Subject: CN=d333b578-3cdb-481b-929d-974070371935
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:0d:0e:4b:b5:f8:fd:b2:89:c7:e9:a4:a6:97:
                    b1:fe:b2:6a:c4:44:5d:f7:77:b4:8f:90:4b:2f:d7:
                    22:7a:f4:70:1e:4b:37:cf:95:2b:0a:7d:d5:50:e7:
                    f3:a4:2e:c4:80:d7:74:45:8e:53:bd:66:dd:76:d6:
                    60:39:5a:62:27:54:d6:2a:83:e2:a3:62:2c:c3:d5:
                    88:22:d5:c2:74:6f:05:25:13:5a:7f:01:95:7f:99:
                    1f:84:61:c5:eb:f5:da:6d:99:f2:f0:56:03:1f:49:
                    3f:d9:66:fd:b5:b5:cd:95:72:82:ec:cb:5d:98:0e:
                    09:4c:ad:84:f1:0a:13:f4:7f:e7:23:5d:25:23:50:
                    6a:8e:b6:46:52:65:11:e9:3b:63:4b:10:93:b4:db:
                    da:61:e2:6c:60:2c:57:c3:dc:60:b3:db:58:71:b2:
                    91:9f:11:d7:71:81:a0:ed:e0:90:2b:0f:ba:aa:53:
                    89:b1:3d:09:4f:75:0a:db:d5:d0:79:eb:09:37:13:
                    e3:63:cb:b2:e2:12:22:d9:a3:e9:ff:f7:ad:d8:4c:
                    8f:d7:0a:33:1a:65:86:5e:cf:3f:32:cb:91:ed:df:
                    ff:33:9d:a6:f0:d0:e7:cc:af:d7:8d:69:d9:7c:98:
                    72:7f:51:38:5c:ca:9b:2e:64:ca:f9:d0:f2:8d:7a:
                    b7:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:EF:F6:ED:A4:AD:37:E6:1A:05:EC:CB:17:34:A3:0C:D1:31:10:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/271a7899-796d-302c-9ee1-11140e504aeb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/0d1fca78-9d98-4559-bd51-80a6c47ba01e.crl

            X509v3 Authority Key Identifier:
                keyid:CA:61:9B:E8:AC:A4:3A:07:D0:BF:6A:5F:5B:AA:3F:D4:20:E9:5A:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.129.184.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:ab:dc:ce:be:dd:db:5d:fb:3f:5c:f1:d8:7b:40:55:d7:58:
         01:a0:17:3e:e4:ce:e7:b8:9b:a3:9e:f0:27:08:b8:e6:20:61:
         de:98:1b:fe:b0:76:2c:f5:ee:1e:c4:bc:58:fe:4f:f1:ff:75:
         cf:d7:ce:f6:cc:f4:68:f3:e4:50:a0:25:92:8c:b0:9b:64:33:
         47:7a:03:2f:9f:8e:bc:4e:c0:05:34:61:d8:86:8a:7e:47:8d:
         c8:e0:d7:a7:1f:2f:cf:64:c5:0a:cc:d6:55:58:a3:e4:fa:99:
         f9:0d:63:fa:71:10:22:6e:9d:0e:ca:6e:ab:e0:fe:8c:93:e9:
         dc:fe:14:d6:15:e1:7c:97:04:c1:af:b3:19:bf:30:2e:fd:36:
         57:42:e2:61:23:56:cd:f1:0b:65:7f:8a:01:f1:8a:5d:a9:92:
         01:be:58:a6:6c:4d:ae:9d:25:d6:bd:b9:10:2d:34:f2:16:67:
         b5:aa:35:4b:17:67:d2:db:e9:b4:a2:4c:a9:d6:a0:4c:8d:8a:
         db:36:47:e2:b8:ca:c8:97:a9:02:79:80:4f:85:80:9c:23:a5:
         42:f3:0b:88:d6:d3:fd:2f:4b:2a:89:4a:19:06:1f:24:f6:47:
         9d:67:03:1c:4b:37:18:b8:6a:77:3e:d0:ef:9c:5f:d1:d2:fc:
         a3:36:44:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----