Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/b0690be5-6494-30e8-a63d-6675f39ea2d0.roa
File:                     b0690be5-6494-30e8-a63d-6675f39ea2d0.roa (raw, json)
Hash identifier:          tojTslgXiwwZmjyCoovid6Rik9SVlL0vINEw2xE04DI=
Subject key identifier:   2C:D2:AE:C7:CA:7A:AC:45:8C:77:20:AE:F8:B0:57:39:6A:64:14:D0
Certificate issuer:       /CN=65506c68-611f-46ed-9e78-36da39f8ee7d
Certificate serial:       010D0C9F4328583F3E2F4247FBA755996C59DF80
Authority key identifier: 64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/b0690be5-6494-30e8-a63d-6675f39ea2d0.roa
Signing time:             Wed 14 Sep 2022 14:46:13 +0000
ROA not before:           Wed 14 Sep 2022 14:46:13 +0000
ROA not after:            Tue 17 Dec 2024 05:00:00 +0000
asID:                     19905
IP address blocks:        69.12.104.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 15 Sep 2022 15:28:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:3e:2f:42:47:fb:a7:55:99:6c:59:df:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65506c68-611f-46ed-9e78-36da39f8ee7d
        Validity
            Not Before: Sep 14 14:46:13 2022 GMT
            Not After : Dec 17 05:00:00 2024 GMT
        Subject: CN=e0f22dbb-614f-4c90-bd01-d99c5b2cb52b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:74:d9:67:43:3e:a5:95:d4:11:44:4f:c1:68:
                    dc:f8:73:64:78:3e:9d:17:57:8a:ef:16:ca:e2:b3:
                    32:d5:d6:e5:6f:50:76:5a:b1:15:01:b7:ce:d1:f1:
                    a7:49:2c:0f:cb:db:85:a6:d0:f5:9d:dd:dc:c9:54:
                    63:2d:45:ba:cd:f4:69:43:cd:e1:22:9d:33:21:83:
                    be:a8:bd:45:40:14:0e:57:b9:d0:2d:a1:71:9f:0e:
                    bf:60:88:a8:f7:c3:ed:dd:14:9a:cc:0a:76:d7:e4:
                    f2:91:fb:10:4c:06:93:e4:1e:f2:34:2a:a1:01:a9:
                    18:6c:38:8f:d2:29:71:b7:a5:de:d9:5f:31:1e:0e:
                    29:63:af:ca:b6:03:d2:3c:6b:74:f3:c0:2f:b1:1c:
                    32:8f:85:8a:ab:43:89:6d:73:ca:5a:4c:65:2c:30:
                    e9:c1:76:f3:6e:20:e2:62:61:cf:32:33:b7:33:a4:
                    78:e6:d6:61:43:35:ca:7e:53:d8:cc:f4:a2:e6:3a:
                    20:f2:6d:27:de:b8:0f:34:5a:a3:74:4f:da:d0:b8:
                    b5:a3:84:43:45:2f:4f:c7:ce:53:44:e3:60:3c:71:
                    82:4c:c9:e8:29:f7:ea:1f:66:1d:d8:b1:69:9e:0a:
                    c4:ac:6d:a1:cd:82:b8:44:d1:e7:2c:11:76:b1:e8:
                    3d:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:D2:AE:C7:CA:7A:AC:45:8C:77:20:AE:F8:B0:57:39:6A:64:14:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/b0690be5-6494-30e8-a63d-6675f39ea2d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl

            X509v3 Authority Key Identifier:
                keyid:64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.12.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:68:e4:90:14:4f:e7:93:34:83:5d:ca:2c:18:ae:00:7d:93:
         6b:ce:6d:8d:bf:33:b6:bf:c5:d8:e8:c3:e1:e3:cc:cd:19:28:
         ae:09:26:cc:99:30:ce:b1:54:45:01:b5:b1:59:8c:f8:5e:c3:
         c2:b7:57:4c:9b:21:61:55:b7:19:fd:f9:6e:59:22:3b:9a:81:
         a9:f7:d1:6f:70:00:cd:b5:36:59:f7:72:db:32:45:02:bf:ee:
         12:f4:5b:0d:06:4d:0b:50:49:27:b2:5a:15:05:f8:49:05:7e:
         bc:6a:cb:c7:54:7e:c5:2c:c0:40:f1:63:73:ce:f6:be:ce:35:
         c4:7c:ad:f6:78:0a:54:dd:cc:fd:f3:ff:51:9b:f6:1b:f8:bc:
         64:aa:72:53:42:3c:ac:5e:59:20:4d:0e:5a:25:09:13:cc:e7:
         5e:e8:e1:31:d9:52:f2:fa:7c:1b:9b:a5:f6:79:bd:43:d0:58:
         ed:86:7f:b9:b0:e7:77:df:57:ab:86:22:f9:7d:44:cd:ac:18:
         e6:69:2d:9f:f9:50:71:a7:02:1d:94:c3:73:3c:04:80:e4:bd:
         a7:21:a8:71:af:0a:82:51:87:45:e4:9d:4b:03:19:f2:57:cf:
         32:34:c7:b6:83:12:3b:21:e8:a0:b9:2b:ee:49:32:ec:d8:6e:
         7b:bf:59:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----