Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/744bb112-5178-3437-84f2-d1b1e82f313b.roa
File:                     744bb112-5178-3437-84f2-d1b1e82f313b.roa (raw, json)
Hash identifier:          lieaCyl+t8/9gbemCKV8IGbhEjPCM4PuSQYglj/Zqvg=
Subject key identifier:   B8:80:09:5E:B5:00:D3:3B:D7:39:D1:78:93:C6:69:E7:12:9F:4E:B3
Certificate issuer:       /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial:       010D0C9F43285846A5843B5F4CF6B2E9C2422FE0
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/744bb112-5178-3437-84f2-d1b1e82f313b.roa
Signing time:             Wed 24 Jul 2024 17:27:49 +0000
ROA not before:           Wed 24 Jul 2024 17:27:49 +0000
ROA not after:            Tue 22 Oct 2024 17:27:49 +0000
asID:                     0
IP address blocks:        192.64.68.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 09 Aug 2024 20:19:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:a5:84:3b:5f:4c:f6:b2:e9:c2:42:2f:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
        Validity
            Not Before: Jul 24 17:27:49 2024 GMT
            Not After : Oct 22 17:27:49 2024 GMT
        Subject: CN=13353157-4455-4aba-9f2f-cc8ba6df3439
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:72:49:84:ed:95:ec:5a:77:f2:f2:c2:77:0d:
                    90:e3:b5:f3:13:38:cf:7b:f7:04:9e:1e:b9:90:ac:
                    a1:f2:e6:e3:c7:e8:b9:b2:ae:99:15:11:b9:a1:92:
                    5c:d0:43:78:8c:e2:1f:b8:b3:3c:ae:48:f3:ae:54:
                    24:e5:7f:d2:34:75:67:e6:cc:59:ef:2f:18:3f:86:
                    e3:54:75:aa:32:b0:6e:1f:b4:07:22:2a:dd:6f:35:
                    99:c8:3e:7f:f3:29:f9:bd:6d:07:ba:74:23:29:7a:
                    ea:77:15:11:38:ea:77:24:ec:73:a8:41:04:0f:4b:
                    23:7d:06:ec:ac:9b:1c:45:d5:29:0b:53:51:44:38:
                    39:3e:3d:39:b8:8f:a4:ce:52:0f:68:13:95:f7:9a:
                    76:42:28:d9:2d:0b:69:cf:d7:6d:ea:89:fc:18:4c:
                    31:5e:74:a9:c2:7f:bb:e9:2f:39:e6:14:49:90:bf:
                    56:d0:0e:1f:10:49:ce:7f:d0:b7:62:bb:85:ff:02:
                    c3:e2:8c:f7:1d:37:36:cf:b7:5c:0a:d7:06:6b:6d:
                    69:15:b1:0a:dc:60:5a:7e:dd:89:b2:00:c1:c8:e2:
                    0e:9d:14:d2:6f:27:83:2e:e0:c1:61:7e:54:8b:95:
                    5a:bf:d4:b9:d2:b3:dc:16:bd:8c:f2:aa:be:4c:b5:
                    18:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:80:09:5E:B5:00:D3:3B:D7:39:D1:78:93:C6:69:E7:12:9F:4E:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/744bb112-5178-3437-84f2-d1b1e82f313b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl

            X509v3 Authority Key Identifier:
                keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.64.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:07:5d:7f:6e:4c:be:9e:a6:b3:06:39:a9:f7:4a:91:f9:c4:
         91:b7:ae:da:88:7b:c3:7d:89:19:83:3f:fb:0d:9b:d7:48:9e:
         71:e3:5d:4b:f6:90:13:e0:98:29:68:58:70:01:3b:42:f8:23:
         aa:3e:c2:ed:53:86:49:13:88:9f:dd:21:70:37:42:5a:22:4c:
         ca:69:53:61:dd:89:72:da:c0:36:4e:29:bd:80:27:4f:17:32:
         68:01:6c:47:af:5b:37:1d:a8:82:8f:82:8b:28:9d:0a:40:db:
         52:9d:09:3d:c3:4e:b7:a8:3f:f9:77:5a:22:37:bf:62:96:1f:
         5d:63:fd:aa:64:64:a4:fe:87:94:41:e5:b2:e2:ff:b7:44:57:
         98:59:5b:e4:ff:5e:5c:7c:33:e8:12:a3:a0:47:80:9b:25:0f:
         06:0f:f1:ce:a6:ab:d7:49:64:52:12:6e:a2:f1:71:b5:1a:b9:
         76:03:a5:ef:ef:bf:1a:82:9f:30:54:26:da:52:59:58:09:91:
         9b:f1:c2:1b:5b:5c:d3:ec:60:3a:f3:db:f2:e4:1e:52:1b:9b:
         0e:d7:5d:4a:aa:99:83:0a:11:a0:3f:3f:57:c1:81:24:eb:bc:
         3d:0f:97:b9:96:ae:82:40:8e:d4:f9:c2:21:b0:8a:4c:8f:af:
         97:12:10:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----