Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/87f870e9-9188-3ef9-a809-043d78fc33b2.roa
File:                     87f870e9-9188-3ef9-a809-043d78fc33b2.roa (raw, json)
Hash identifier:          Mnw/hFoJZ36LQVOPTkcccSgTP4tA1ud2QVmnaKiISsw=
Subject key identifier:   D2:6D:F7:0C:09:E2:3D:39:82:0D:D2:29:F4:37:D2:61:28:DF:BB:DB
Certificate issuer:       /CN=65506c68-611f-46ed-9e78-36da39f8ee7d
Certificate serial:       010D0C9F4328583F8E90398919EA89A0A5C5E200
Authority key identifier: 64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/87f870e9-9188-3ef9-a809-043d78fc33b2.roa
Signing time:             Wed 14 Sep 2022 14:46:13 +0000
ROA not before:           Wed 14 Sep 2022 14:46:13 +0000
ROA not after:            Tue 17 Dec 2024 05:00:00 +0000
asID:                     19905
IP address blocks:        107.171.128.0/17 maxlen: 24

Validation:               Failed, certificate revoked on Fri 31 Mar 2023 15:03:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:8e:90:39:89:19:ea:89:a0:a5:c5:e2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65506c68-611f-46ed-9e78-36da39f8ee7d
        Validity
            Not Before: Sep 14 14:46:13 2022 GMT
            Not After : Dec 17 05:00:00 2024 GMT
        Subject: CN=ef3c3d32-a5d6-4150-8d3c-9c1d8f0b6fb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:70:d5:ae:67:91:4a:1c:75:a3:82:ab:b0:10:
                    cc:b8:8f:9d:2b:b1:5f:e6:bf:62:89:e2:16:b1:1f:
                    28:24:e4:86:47:a9:b5:81:e7:05:52:7f:69:fe:a6:
                    bf:3e:46:44:5d:6d:2e:e6:2d:75:a1:3b:79:f1:84:
                    96:67:ac:b3:80:1a:db:6f:54:2b:0b:0d:e0:76:31:
                    8e:1a:0a:b3:ff:0e:f8:6b:7d:93:15:c3:d7:82:f5:
                    52:64:5f:95:55:fb:bf:67:38:cf:ae:51:29:94:54:
                    69:fe:ee:90:c0:e0:22:29:46:3a:0a:a2:1d:fe:a6:
                    a7:f2:d9:44:1b:c4:6f:4a:c3:4a:38:bc:7c:a3:be:
                    00:da:d3:c5:b8:b6:52:95:50:8a:84:6c:fc:91:23:
                    2c:0d:54:de:9e:60:ae:cb:a8:1d:b5:0c:fb:10:f9:
                    38:29:06:42:7c:65:2a:e5:8a:d2:3b:32:1f:f5:3b:
                    90:02:a8:fb:78:c2:03:a2:79:d6:c6:be:b6:69:9d:
                    47:c9:68:02:68:5a:16:b1:c6:5d:18:c7:be:d7:03:
                    a0:79:0b:67:fd:e3:15:d7:71:59:4d:ae:ec:5f:ad:
                    c1:42:ba:f9:a4:a8:5d:a0:c1:8d:72:5f:ea:c6:1f:
                    f2:b8:ea:61:da:af:62:26:7c:ba:4b:35:a6:31:0d:
                    8b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:6D:F7:0C:09:E2:3D:39:82:0D:D2:29:F4:37:D2:61:28:DF:BB:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/87f870e9-9188-3ef9-a809-043d78fc33b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl

            X509v3 Authority Key Identifier:
                keyid:64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.171.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:de:61:11:88:60:6d:f4:09:e3:6f:b8:1e:7b:0e:23:3b:7b:
         bc:98:a7:e0:ab:4d:1d:7e:a0:90:6e:21:6a:63:c8:ce:b2:ea:
         9c:2b:43:0c:7b:fc:00:f4:c5:5b:49:79:70:6f:a2:29:4a:89:
         e5:53:9c:59:16:c2:e8:e3:ac:0b:6d:ae:f3:f9:fa:1c:a9:fc:
         3a:12:cd:33:86:f6:9f:5e:7a:87:ee:1b:c4:31:2c:7a:41:47:
         18:cc:4a:bb:9d:06:93:cb:65:95:ab:4b:3b:77:f3:e4:6e:30:
         81:2d:ea:28:0f:c6:83:e5:e8:89:95:3c:82:18:b6:51:0a:64:
         b0:cf:93:ed:60:4b:9d:d4:d2:2c:bd:bd:80:b6:2f:f6:47:a9:
         13:25:b3:ba:3c:0a:31:4a:e3:a8:a3:4f:ee:17:2d:56:65:b2:
         56:97:2d:fa:f4:10:4b:72:14:48:3b:d9:ce:b6:e0:c7:40:ad:
         62:fb:3b:19:a2:41:9e:19:cc:22:e0:dd:9f:74:10:9e:16:d3:
         37:d0:8b:d8:82:6e:d4:b0:f3:0d:d3:6f:02:04:8d:65:c4:f3:
         2a:f8:5b:bb:0f:59:e1:78:6e:6e:1f:5b:35:cc:76:5a:69:b7:
         fc:2e:1e:88:5a:10:9e:21:b2:b5:e1:c1:99:9b:aa:d2:78:0e:
         9f:fb:60:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----