Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279/8719e8ec-967a-3f4c-b877-5ca7523a61b4.roa
File:                     8719e8ec-967a-3f4c-b877-5ca7523a61b4.roa (raw, json)
Hash identifier:          fsMMH9tnlnU+l3F8WxNR4mT8LLXoLi7zqxESJCVpP/A=
Subject key identifier:   F8:7E:37:D3:BF:B2:95:5A:E7:F4:1F:6F:A7:C4:BC:C6:62:20:C4:88
Certificate issuer:       /CN=a38a1dde-b7fb-4bfc-9f3c-cd84003b0279
Certificate serial:       010D0C9F43285842E4DA3A0103F77C7B4A398000
Authority key identifier: 0D:F1:37:EA:66:82:94:C3:D7:BE:A6:80:5B:BD:1D:86:DD:14:E1:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279/8719e8ec-967a-3f4c-b877-5ca7523a61b4.roa
Signing time:             Tue 15 Aug 2023 14:49:16 +0000
ROA not before:           Tue 15 Aug 2023 14:49:16 +0000
ROA not after:            Mon 13 Nov 2023 15:49:16 +0000
asID:                     834
IP address blocks:        206.251.0.0/21 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:e4:da:3a:01:03:f7:7c:7b:4a:39:80:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a38a1dde-b7fb-4bfc-9f3c-cd84003b0279
        Validity
            Not Before: Aug 15 14:49:16 2023 GMT
            Not After : Nov 13 15:49:16 2023 GMT
        Subject: CN=8acbc62a-fd8c-4bc1-a594-0fecc550642e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:02:68:dc:23:f9:1f:36:70:d7:2b:3f:68:f4:
                    10:66:92:3b:7a:e2:b5:75:a5:2b:8f:cf:1b:4f:66:
                    b3:30:25:ef:e1:e9:dd:bb:84:b1:5a:be:07:30:22:
                    0b:44:2a:ca:04:13:0b:c7:fd:03:36:9d:8e:f3:76:
                    7c:10:19:c6:3c:da:bc:ed:b5:81:af:09:8a:1a:62:
                    48:25:be:4b:a1:81:ec:5d:7e:e3:68:93:2e:3b:f5:
                    5b:45:8b:07:9e:98:a2:09:5a:49:8e:d4:2f:16:a1:
                    62:11:9c:22:31:d8:dc:cc:76:56:51:a3:33:7d:b3:
                    4b:d2:a4:a5:4f:23:11:90:88:d4:42:69:16:5f:c9:
                    7f:7f:24:b9:fa:30:be:1e:01:c2:9e:c6:85:e0:02:
                    4f:aa:89:66:f8:f7:7f:4c:86:0e:f1:6c:e6:69:47:
                    05:f9:ff:56:17:d3:86:f0:8e:22:48:d2:18:4f:32:
                    b3:e5:ef:20:94:f8:00:fd:d3:43:08:a9:bd:b4:c6:
                    4d:fe:5a:57:38:51:81:15:b3:75:b4:f5:71:2d:56:
                    ee:97:d4:3b:44:d1:05:84:0d:1a:d6:5e:50:48:61:
                    b2:94:43:2d:ce:96:35:4b:ea:6c:30:00:c8:77:19:
                    aa:d2:60:c5:da:e7:9a:87:a5:51:40:b8:33:03:0f:
                    b5:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:7E:37:D3:BF:B2:95:5A:E7:F4:1F:6F:A7:C4:BC:C6:62:20:C4:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279/8719e8ec-967a-3f4c-b877-5ca7523a61b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279.crl

            X509v3 Authority Key Identifier:
                keyid:0D:F1:37:EA:66:82:94:C3:D7:BE:A6:80:5B:BD:1D:86:DD:14:E1:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a38a1dde-b7fb-4bfc-9f3c-cd84003b0279.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.251.0.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:19:8e:94:db:74:f5:86:ca:34:f7:dd:8a:79:2b:06:04:1b:
         6d:b7:90:5f:f9:ff:c3:a8:5d:4b:4c:94:e4:ee:53:7a:e4:41:
         aa:b8:8b:ee:0c:a2:f9:e7:ae:c5:3d:cb:51:f3:90:b4:31:31:
         b4:a9:56:91:2d:d3:b6:33:96:2c:a0:fd:64:76:d7:b8:bb:49:
         d6:35:3e:44:58:9b:e9:61:03:8a:ae:43:98:1c:3b:c0:fc:c1:
         6f:96:2c:d4:bd:eb:2e:b3:87:65:bc:7c:09:35:9d:95:1f:90:
         d9:a6:c9:e9:22:b6:0c:0a:50:59:5b:bc:3d:97:df:72:03:2c:
         35:0d:f3:bb:e1:5b:5d:77:dc:83:04:14:c4:eb:75:d0:18:a0:
         7b:f4:90:3e:82:3e:53:92:17:78:f1:b7:97:41:7e:c6:3d:23:
         d1:55:93:30:2e:06:66:27:a1:09:48:e9:1b:22:3e:20:3c:63:
         02:8d:db:e6:9d:f3:cf:62:81:09:57:8d:ca:e6:4c:1b:65:ad:
         ed:31:e7:21:37:ac:2d:2b:8f:09:54:94:41:df:69:50:3a:35:
         d1:d8:61:fb:37:3d:8d:9b:5e:9f:90:e6:d6:e3:b6:b1:28:70:
         df:99:97:a4:75:ed:bf:3f:9b:f8:18:65:7d:d8:b3:30:1f:31:
         2c:37:db:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----