Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/0a0a0f29-136c-3dc0-ab3d-a16926718ab8.roa
File:                     0a0a0f29-136c-3dc0-ab3d-a16926718ab8.roa (raw, json)
Hash identifier:          wukxb4pyA9Q/7qkqCcLGrL8hIqu9ErxwrPRbScRnKs0=
Subject key identifier:   0D:48:A7:F5:6A:2A:A8:C9:23:84:E5:61:6B:C6:27:D0:36:73:8A:14
Certificate issuer:       /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
Certificate serial:       010D0C9F43285840723F2C060F332CBFDBAE2400
Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/0a0a0f29-136c-3dc0-ab3d-a16926718ab8.roa
Signing time:             Fri 12 Aug 2022 20:12:17 +0000
ROA not before:           Fri 12 Aug 2022 20:12:17 +0000
ROA not after:            Thu 14 Nov 2024 05:00:00 +0000
asID:                     61138
IP address blocks:        72.14.141.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:72:3f:2c:06:0f:33:2c:bf:db:ae:24:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
        Validity
            Not Before: Aug 12 20:12:17 2022 GMT
            Not After : Nov 14 05:00:00 2024 GMT
        Subject: CN=bcefd20c-170c-4002-bf13-c427b21b3656
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:2f:bf:26:75:d0:39:2c:4f:a0:87:a8:64:fd:
                    b2:77:75:da:d1:77:92:94:86:54:f9:d2:1a:cb:c7:
                    9d:c5:a0:f4:29:f3:12:3d:47:6a:7b:9d:04:e1:29:
                    1c:04:7b:4f:e4:05:eb:f3:84:2b:31:a7:1f:05:02:
                    3b:b3:9e:85:66:bd:55:ae:88:a7:45:fd:0d:7a:d5:
                    15:3a:d4:84:bd:eb:75:bc:56:84:09:c1:3e:76:2e:
                    7a:ea:f9:47:e0:9d:87:ca:c1:ed:43:8b:cc:3b:67:
                    d6:95:a9:f1:60:f3:f2:3c:a9:e1:41:73:40:02:a2:
                    ec:48:05:f4:cb:be:be:50:5f:b2:1c:34:4e:f5:08:
                    31:f8:f5:dd:ce:2a:37:e3:4c:e5:2a:88:c8:9f:c3:
                    ac:42:94:24:d8:3c:44:97:99:76:50:ad:c7:aa:7c:
                    cd:f7:53:ff:7e:ee:1e:50:b9:8b:0b:7a:79:f2:9a:
                    89:b0:09:c4:01:4e:32:e9:50:83:71:34:7e:f0:f5:
                    09:1a:d8:f5:de:9f:89:c6:b4:d3:24:ea:5c:f8:6e:
                    e8:6e:d3:de:2a:07:c9:bf:18:41:30:f8:9a:b6:07:
                    f7:20:29:35:55:9a:1f:c2:37:77:42:47:96:09:54:
                    7d:0b:4a:cc:bd:29:4d:a8:54:f2:c6:3a:03:6a:cc:
                    67:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:48:A7:F5:6A:2A:A8:C9:23:84:E5:61:6B:C6:27:D0:36:73:8A:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/0a0a0f29-136c-3dc0-ab3d-a16926718ab8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl

            X509v3 Authority Key Identifier:
                keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.14.141.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:55:be:1d:ad:af:25:a1:7a:c9:df:99:30:03:10:08:e0:a9:
         93:f6:fb:b5:b2:c6:78:d2:a2:4c:ba:a7:63:80:5f:82:d3:92:
         cf:50:63:d2:d5:57:a9:a5:63:ee:66:93:b0:d0:e8:b8:25:4d:
         2b:db:e6:80:e7:6c:57:0f:1b:20:c6:82:f9:d4:85:0e:bb:9c:
         9d:53:07:48:97:ef:7d:2e:2a:0a:c0:16:e9:44:b9:da:00:a9:
         29:32:2b:32:12:78:2f:e9:2a:3d:00:69:ff:7b:fe:47:dc:90:
         76:9f:82:8a:41:d4:50:73:fa:4b:cf:d3:16:61:85:48:40:58:
         a1:b7:41:8f:9b:e0:9e:2d:1c:62:77:ac:cb:4c:8a:9a:b1:59:
         77:1b:99:64:34:4c:3e:7e:77:da:21:bc:9a:4a:e3:8e:80:59:
         9d:2a:d0:d7:c8:db:84:27:1f:ab:6f:24:83:67:51:54:27:9f:
         c4:5c:2d:30:34:3c:92:10:c1:c3:2e:21:84:50:1f:7e:c1:5a:
         cc:a6:00:e0:94:3e:d7:1a:4e:c1:41:41:b4:ec:8c:9a:f7:a8:
         2a:a8:ad:89:61:35:2c:e8:5d:20:aa:d6:a6:4c:ea:d0:ad:9d:
         ea:0a:d5:32:05:c9:99:b2:78:40:b9:7f:51:91:6f:59:e0:ed:
         54:93:44:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----