Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/9239ac36-677a-3efe-a851-b43edbbd1ebb.roa
File:                     9239ac36-677a-3efe-a851-b43edbbd1ebb.roa (raw, json)
Hash identifier:          EWjfcFmH90rwwvPIbXHbMZVTbFTn2HiNna9C4LAjYeg=
Subject key identifier:   EA:50:39:ED:7F:2F:AB:ED:2C:94:18:7F:F9:9B:0D:92:10:1E:91:12
Certificate issuer:       /CN=65506c68-611f-46ed-9e78-36da39f8ee7d
Certificate serial:       010D0C9F4328583F8E908C5171E27FDAA1515C80
Authority key identifier: 64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/9239ac36-677a-3efe-a851-b43edbbd1ebb.roa
Signing time:             Wed 14 Sep 2022 14:46:13 +0000
ROA not before:           Wed 14 Sep 2022 14:46:13 +0000
ROA not after:            Tue 17 Dec 2024 05:00:00 +0000
asID:                     19905
IP address blocks:        104.221.0.0/17 maxlen: 24

Validation:               Failed, certificate revoked on Fri 31 Mar 2023 15:02:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:8e:90:8c:51:71:e2:7f:da:a1:51:5c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65506c68-611f-46ed-9e78-36da39f8ee7d
        Validity
            Not Before: Sep 14 14:46:13 2022 GMT
            Not After : Dec 17 05:00:00 2024 GMT
        Subject: CN=993d6621-8be7-490c-a123-f4864a987b43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:01:61:04:49:7c:b1:9d:9c:19:63:e1:af:b9:
                    87:34:40:ed:e5:19:5d:71:e1:07:9b:9d:6b:dd:cd:
                    e3:ce:2f:be:5d:f6:89:92:b8:94:0c:7b:bd:2a:d8:
                    0e:41:16:5b:5e:63:36:b4:be:b5:67:ea:fa:b2:36:
                    4d:f3:0e:f0:07:40:44:e5:99:d8:ed:12:a3:7a:f5:
                    a7:56:5e:ff:7f:90:1e:6c:62:4f:f2:51:97:1d:75:
                    e1:85:8b:e3:68:cb:17:ed:36:72:2a:47:39:a5:70:
                    c9:91:eb:28:83:1d:00:5b:89:8b:a6:1c:5b:2f:24:
                    83:33:43:17:c4:93:31:5a:6a:19:51:d0:61:3f:1d:
                    09:e4:09:bb:a3:47:4a:85:8f:3f:dc:41:f8:a9:c5:
                    a0:94:ca:f4:b4:23:83:40:e4:05:76:00:9e:b5:88:
                    d7:25:67:11:a0:80:36:e1:12:4b:98:17:11:0f:68:
                    73:a0:3c:46:4d:72:d7:b0:16:92:c2:57:b8:3c:c7:
                    17:38:48:59:37:2c:5a:b0:d6:5d:ae:59:57:cb:53:
                    5d:10:c6:50:d1:ef:ce:0d:1f:90:12:d5:52:23:2a:
                    bf:fa:8c:fe:df:66:1a:d3:0f:21:aa:7e:ca:f9:e9:
                    f3:70:c3:fd:c7:32:9c:5d:25:7b:fe:6b:a4:07:6d:
                    ef:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:50:39:ED:7F:2F:AB:ED:2C:94:18:7F:F9:9B:0D:92:10:1E:91:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/9239ac36-677a-3efe-a851-b43edbbd1ebb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl

            X509v3 Authority Key Identifier:
                keyid:64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.221.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:8f:24:8b:16:93:e1:ca:18:e6:63:8a:cb:78:6b:83:77:2f:
         c5:f9:26:8f:27:e2:35:e8:b3:51:79:9b:4b:41:47:98:9a:f8:
         8d:b6:0a:13:1c:73:95:5e:80:48:41:aa:38:73:df:92:35:02:
         f4:fe:0f:dc:b3:89:df:75:8e:3b:6c:05:80:6b:ee:c2:90:ad:
         c8:54:05:50:78:12:6d:0b:ef:34:0c:1f:4a:93:a0:1d:5d:88:
         86:28:ee:9c:aa:5d:24:30:f1:3f:b2:f2:0f:55:58:86:76:78:
         d5:9a:5f:0b:ff:55:09:88:af:ac:33:13:8a:d1:3d:28:5e:57:
         d9:59:8b:df:a0:8b:92:a7:e8:15:58:1b:8d:c2:7e:d0:59:b4:
         8b:1e:35:c0:ae:6f:e5:92:61:77:0a:9b:7f:21:a4:fc:32:d2:
         db:9c:a9:ca:c7:a7:6a:42:a6:03:97:6e:32:67:3d:fb:97:f9:
         d8:19:ab:bd:20:d1:8e:14:3f:86:f0:6c:f0:d3:71:ad:21:11:
         c8:ed:c4:32:00:81:21:f3:a7:8b:06:96:b7:42:25:7f:f9:98:
         8e:56:27:a3:8a:da:87:14:4c:05:21:90:54:95:45:67:77:ce:
         d7:ff:43:e4:fd:fa:e0:72:68:13:a3:54:7c:57:1a:09:7d:bb:
         28:c2:ae:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----