Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd/3b9e6274-0423-34a0-85b2-21f42475e4ce.roa
File:                     3b9e6274-0423-34a0-85b2-21f42475e4ce.roa (raw, json)
Hash identifier:          eKgV+1HKI/z1gDvZXYKAnvqr8JMnC/8bu3C4+0VmNSk=
Subject key identifier:   8B:73:AB:C1:FD:B4:43:66:F2:67:2B:B1:AF:30:70:33:7E:5C:B7:94
Certificate issuer:       /CN=55feeaf5-abfd-4f9c-9707-9236ce5397bd
Certificate serial:       010D0C9F43285840FAA7EDF3A0E9D6C2A3E48AC0
Authority key identifier: C9:EF:4B:01:33:02:5C:34:66:53:86:01:A7:05:AC:03:48:05:9A:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd/3b9e6274-0423-34a0-85b2-21f42475e4ce.roa
Signing time:             Fri 14 Oct 2022 20:14:24 +0000
ROA not before:           Fri 14 Oct 2022 20:14:24 +0000
ROA not after:            Thu 16 Jan 2025 05:00:00 +0000
asID:                     11272
IP address blocks:        173.235.0.0/16 maxlen: 16

Validation:               Failed, certificate revoked on Tue 21 Feb 2023 19:40:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:fa:a7:ed:f3:a0:e9:d6:c2:a3:e4:8a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55feeaf5-abfd-4f9c-9707-9236ce5397bd
        Validity
            Not Before: Oct 14 20:14:24 2022 GMT
            Not After : Jan 16 05:00:00 2025 GMT
        Subject: CN=03800943-340c-4518-9f69-7f7656744fd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:fa:85:2a:52:00:de:a0:0b:72:a5:24:4c:fe:
                    32:4e:df:f5:0a:85:d6:f6:a5:a5:05:bd:7c:9d:3a:
                    7d:cf:35:76:8b:c2:16:b5:16:03:41:f9:6c:e0:f9:
                    56:b1:4c:72:91:d0:e9:12:f0:ee:de:b6:d8:93:63:
                    34:20:ab:f9:45:b6:ac:05:95:d8:9f:b0:ae:6d:15:
                    90:1b:41:ff:cd:43:75:27:3f:f6:c2:71:8d:47:e7:
                    3d:78:a5:14:ea:a6:9f:5e:9a:f2:e5:43:e0:cf:7a:
                    37:38:fd:2f:f4:e0:fd:58:2b:27:0f:4b:ec:1d:9f:
                    c6:fa:8c:b6:9a:a8:bb:2e:0e:9e:b6:12:f5:0f:f8:
                    aa:3e:41:ed:98:a4:e0:db:9e:83:6f:b6:81:54:2d:
                    ed:0a:02:ec:3a:da:1a:88:3b:52:9d:47:2b:25:65:
                    83:cc:0e:d4:88:54:c4:32:d1:f9:64:03:66:3d:50:
                    6f:a4:da:f3:68:07:e6:53:7e:81:c8:24:66:5c:af:
                    be:fc:06:81:f2:c6:bc:de:9c:99:39:55:01:f6:92:
                    71:3b:a0:32:eb:8e:32:f4:e5:4d:c8:9e:ca:39:c6:
                    a6:30:99:14:82:50:de:fa:37:2d:d1:ce:16:3f:32:
                    3a:ba:c5:c5:32:42:4a:20:d4:9b:bf:05:bd:f5:ee:
                    0e:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:73:AB:C1:FD:B4:43:66:F2:67:2B:B1:AF:30:70:33:7E:5C:B7:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd/3b9e6274-0423-34a0-85b2-21f42475e4ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd/55feeaf5-abfd-4f9c-9707-9236ce5397bd.crl

            X509v3 Authority Key Identifier:
                keyid:C9:EF:4B:01:33:02:5C:34:66:53:86:01:A7:05:AC:03:48:05:9A:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.235.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:cb:1e:5e:9a:57:7f:c1:d3:23:3b:38:b7:8a:34:6c:43:5e:
         39:d3:9e:31:a9:4e:0b:33:74:5a:27:5d:86:da:da:a9:db:98:
         f4:51:65:e2:ad:ee:d7:e0:f9:ce:f6:02:1a:91:9c:a3:f0:f0:
         b9:30:9b:01:7c:93:47:23:61:26:54:cc:d7:8d:41:3d:5e:a2:
         8a:a6:62:bc:46:7e:aa:b7:b9:dc:fa:0c:11:80:d9:5a:83:c9:
         6f:20:bc:8e:be:55:68:64:02:09:8c:08:17:92:15:bf:17:bd:
         db:31:cc:0f:5e:10:4f:53:13:31:04:4b:82:1a:e2:b3:2d:4e:
         48:d7:ab:ea:e5:0c:bc:76:9c:21:25:60:30:8e:c1:3a:ee:65:
         17:95:87:4b:20:26:0c:a7:46:af:5c:4f:e7:61:9e:4c:52:50:
         aa:2e:61:97:e8:2b:fb:32:0f:57:d2:3f:89:59:72:81:2a:a0:
         9a:f3:f3:9c:94:0d:3c:b5:3e:9a:5d:5d:7c:85:12:1b:9e:2e:
         dc:14:0d:6a:fc:30:91:13:a2:85:e1:29:f9:f3:30:58:07:39:
         81:ee:88:6f:ba:0f:ef:f3:e3:07:d8:c4:5d:61:86:b7:3a:3b:
         f6:b7:06:52:b8:e6:89:6e:9f:23:ce:ad:8f:6e:51:ad:bd:d2:
         f8:51:e6:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----