Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/d5ce80ea-16e2-308e-b763-a39f563d0503.roa
File:                     d5ce80ea-16e2-308e-b763-a39f563d0503.roa (raw, json)
Hash identifier:          0/L6e1OaMsRZZfaaHFvc2k2adC31UQqsr9D3LhcoB6s=
Subject key identifier:   3C:4A:D3:05:3E:15:53:14:D1:72:15:22:85:76:FC:07:23:C0:B6:A6
Certificate issuer:       /CN=65506c68-611f-46ed-9e78-36da39f8ee7d
Certificate serial:       010D0C9F4328583F75D6E9633C97B16E396A59C0
Authority key identifier: 64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/d5ce80ea-16e2-308e-b763-a39f563d0503.roa
Signing time:             Wed 14 Sep 2022 14:46:13 +0000
ROA not before:           Wed 14 Sep 2022 14:46:13 +0000
ROA not after:            Tue 17 Dec 2024 05:00:00 +0000
asID:                     19905
IP address blocks:        147.253.128.0/18 maxlen: 24

Validation:               Failed, certificate revoked on Fri 31 Mar 2023 15:07:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:75:d6:e9:63:3c:97:b1:6e:39:6a:59:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65506c68-611f-46ed-9e78-36da39f8ee7d
        Validity
            Not Before: Sep 14 14:46:13 2022 GMT
            Not After : Dec 17 05:00:00 2024 GMT
        Subject: CN=c452744d-e836-46b6-81d7-7f7aa4e40712
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:2c:27:85:31:83:38:2b:75:d6:c5:e4:a7:ca:
                    3f:91:c1:0f:de:b9:7a:37:af:a0:04:96:af:c0:c5:
                    3a:7c:3c:89:7a:5d:3d:87:1b:a6:fe:e4:de:08:3d:
                    ec:a9:b0:00:3b:ed:01:80:f2:75:e6:43:f8:96:31:
                    aa:4e:3a:62:5e:1a:be:68:24:35:ad:59:6f:14:26:
                    29:09:e0:82:d6:40:31:58:7b:fd:c1:a0:dd:5d:6b:
                    5e:61:1f:7c:69:22:f2:c9:47:85:15:30:12:05:93:
                    76:1c:5e:87:00:84:13:21:e3:f4:14:dc:20:a9:b5:
                    d1:ce:79:73:bf:8a:aa:7b:3c:27:06:71:00:ac:9d:
                    e1:a8:7f:c8:9c:5d:98:37:ec:43:a7:0c:a4:b0:ba:
                    d9:c8:27:5c:60:82:81:54:b0:50:92:4f:e7:a9:96:
                    0f:0e:0d:6a:8d:a2:46:2f:01:ac:e3:c3:2a:0b:78:
                    92:9d:84:e4:1d:40:e1:bc:1c:88:35:ed:53:be:ff:
                    27:ef:c9:60:28:8e:7d:b2:7b:a3:79:71:b5:05:14:
                    9a:d4:c7:a2:52:5a:36:f9:58:4b:d3:50:ef:90:67:
                    47:4c:d6:bb:11:f8:53:b3:01:e6:94:00:e8:41:65:
                    c1:5e:94:b3:dc:8c:30:7b:6d:13:07:b0:09:d6:0c:
                    1d:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:4A:D3:05:3E:15:53:14:D1:72:15:22:85:76:FC:07:23:C0:B6:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/d5ce80ea-16e2-308e-b763-a39f563d0503.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl

            X509v3 Authority Key Identifier:
                keyid:64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.253.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:ce:fa:26:44:b0:5b:d8:9a:0c:29:ac:35:37:1c:1f:bc:90:
         fb:2f:db:5c:09:ce:ac:c2:30:a5:f0:03:d2:d4:89:c2:73:af:
         5e:ba:30:b2:2a:dc:bc:f0:43:d8:10:ef:e8:6d:39:da:d3:30:
         1e:2b:82:83:c9:f0:6b:a6:c0:3a:45:28:99:20:ed:03:e9:70:
         87:b2:de:f7:c7:9b:80:43:76:f2:20:fd:0e:ee:88:af:59:cd:
         59:a2:b6:f1:13:58:81:e1:b3:0d:9f:23:d5:55:dc:46:a5:3c:
         6e:28:14:c1:4b:56:c7:b0:01:0b:a6:7f:b7:9e:93:09:b4:7e:
         2f:9a:6c:61:2d:bc:2c:bc:eb:58:19:49:18:f0:8c:8a:61:38:
         94:de:bc:35:86:04:8c:d6:1b:78:b5:90:d8:70:31:b8:69:a3:
         17:8c:f8:36:46:a7:05:b1:55:40:b1:da:49:56:14:b0:e9:fe:
         50:80:39:86:e4:39:60:c4:c8:cf:60:86:6d:99:2f:14:cb:4e:
         fa:ba:61:04:6c:5d:c4:3c:e3:e8:8b:a4:db:5b:87:46:dd:5d:
         aa:1f:11:b3:35:44:9d:c4:7d:74:bb:e7:57:9f:bd:93:db:9e:
         f8:88:95:2d:dc:68:a3:95:9c:b2:4f:a9:e2:c6:7d:24:c1:0a:
         88:a2:24:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----