Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/995ba439-603b-39c9-8baf-c43d5631e946.roa
File:                     995ba439-603b-39c9-8baf-c43d5631e946.roa (raw, json)
Hash identifier:          fcv/NP+yX8jTODAyNpqwt4OtwfYtksplGz60Svc4Itg=
Subject key identifier:   38:CB:1D:83:7B:66:71:70:BE:98:20:8E:F9:97:D6:7B:2F:98:7C:3E
Certificate issuer:       /CN=0d1fca78-9d98-4559-bd51-80a6c47ba01e
Certificate serial:       010D0C9F43285841B1773D7A241A9A04F3DC4180
Authority key identifier: CA:61:9B:E8:AC:A4:3A:07:D0:BF:6A:5F:5B:AA:3F:D4:20:E9:5A:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/995ba439-603b-39c9-8baf-c43d5631e946.roa
Signing time:             Tue 24 May 2022 21:33:00 +0000
ROA not before:           Tue 24 May 2022 21:33:00 +0000
ROA not after:            Mon 26 Aug 2024 04:00:00 +0000
asID:                     19551
IP address blocks:        160.129.128.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:b1:77:3d:7a:24:1a:9a:04:f3:dc:41:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d1fca78-9d98-4559-bd51-80a6c47ba01e
        Validity
            Not Before: May 24 21:33:00 2022 GMT
            Not After : Aug 26 04:00:00 2024 GMT
        Subject: CN=f68f24ca-131c-45ec-b955-3dd4917620e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:db:90:d7:88:1f:f6:99:30:40:2c:a6:ba:e0:
                    8f:17:3c:ed:32:00:25:85:be:ab:94:cb:85:b5:7f:
                    ad:92:49:35:fe:6a:aa:e7:06:f6:36:67:ef:a8:b7:
                    9d:00:8f:3f:ad:de:3f:bd:7f:84:9b:75:f3:b2:02:
                    58:f7:6d:68:46:ec:c1:60:80:7d:bf:34:68:48:de:
                    fe:fb:44:04:33:69:10:40:6d:4d:a3:2a:81:a7:e5:
                    c4:b0:02:56:1c:bc:e8:c9:90:86:90:1a:8d:43:70:
                    a2:3d:a3:70:57:35:0a:15:b9:38:57:a7:6f:15:fd:
                    ad:2c:a6:c0:ee:c3:4b:dc:f6:f5:c3:be:13:54:38:
                    0f:0e:ac:8f:68:3f:4c:3f:53:fd:35:04:b4:f3:1c:
                    62:85:fb:65:e3:6d:97:c0:8c:11:12:39:f5:aa:8a:
                    a4:1b:7a:2a:ad:30:1f:18:ce:42:a2:1e:bc:de:d0:
                    c2:c6:43:3e:08:18:e8:cd:9a:5b:ee:d1:27:af:7a:
                    85:48:56:61:86:0c:59:49:0c:cc:3a:39:af:fc:9b:
                    57:20:91:93:2c:60:bd:5c:a4:87:f4:0a:67:7b:ec:
                    a9:b7:5d:d8:36:b9:5c:75:07:f5:bd:10:c1:d6:8a:
                    04:f2:21:da:b9:d9:d3:16:63:1a:dd:63:f3:17:25:
                    be:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:CB:1D:83:7B:66:71:70:BE:98:20:8E:F9:97:D6:7B:2F:98:7C:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/995ba439-603b-39c9-8baf-c43d5631e946.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/0d1fca78-9d98-4559-bd51-80a6c47ba01e.crl

            X509v3 Authority Key Identifier:
                keyid:CA:61:9B:E8:AC:A4:3A:07:D0:BF:6A:5F:5B:AA:3F:D4:20:E9:5A:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.129.128.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:f1:f7:2e:f8:dc:ba:64:13:57:98:14:4c:cd:ca:9f:4d:ee:
         a4:1d:e3:6c:98:6b:ee:5e:52:fc:81:b0:44:4e:96:89:1e:12:
         da:f5:46:e4:57:a3:5f:20:14:7a:35:b9:ae:1b:6d:51:94:29:
         8c:34:79:13:35:37:d8:ec:ac:9e:9f:0e:68:86:f3:45:fb:42:
         2c:03:2f:53:d5:31:17:e0:2a:13:95:7e:7d:93:e5:12:86:2e:
         86:e9:9b:4a:f0:95:24:90:11:0f:8c:1f:cf:3f:84:c7:9a:e5:
         07:4c:be:28:1e:e6:97:a2:c7:82:7b:d2:88:0c:f8:d8:97:90:
         3e:a4:a1:72:1c:03:de:85:69:53:a1:72:cf:ec:00:da:bc:ae:
         b2:ea:a3:57:c0:1c:b8:4e:1a:ee:f9:de:54:83:27:e7:88:81:
         ba:50:f7:68:7d:b5:00:de:27:ce:f7:e3:bb:ae:e6:7c:62:41:
         fd:a2:dd:fb:d0:64:11:02:2e:0c:a5:f2:46:c2:56:3b:5e:54:
         f0:45:4b:59:69:81:d5:8b:7b:9a:ac:8d:d6:95:0c:62:6c:42:
         aa:be:11:c3:43:9b:ad:02:7c:77:1c:f7:e8:e2:3f:50:87:3a:
         34:28:97:89:f1:64:d5:55:4c:6f:28:5b:8a:85:f3:52:75:43:
         98:1f:3e:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----