Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/9648cbb6-e5e0-3e34-9acd-825af03a7857.roa
File:                     9648cbb6-e5e0-3e34-9acd-825af03a7857.roa (raw, json)
Hash identifier:          7drDWkmW6A3jJKdhmDixOOV75jUgu0n9SpgriQBXyUE=
Subject key identifier:   8B:E2:EF:52:91:81:E4:D3:6E:3F:2E:89:DA:D2:51:C2:30:F5:0D:C6
Certificate issuer:       /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
Certificate serial:       010D0C9F4328583FC795D4320AFF4332A73CD040
Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/9648cbb6-e5e0-3e34-9acd-825af03a7857.roa
Signing time:             Tue 01 Nov 2022 12:00:00 +0000
ROA not before:           Tue 01 Nov 2022 12:00:00 +0000
ROA not after:            Thu 14 Nov 2024 05:00:00 +0000
asID:                     49999
IP address blocks:        72.14.147.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:c7:95:d4:32:0a:ff:43:32:a7:3c:d0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
        Validity
            Not Before: Nov  1 12:00:00 2022 GMT
            Not After : Nov 14 05:00:00 2024 GMT
        Subject: CN=49002430-1e53-4acc-9f55-c92a2846111f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:9d:21:21:83:33:76:01:4d:fd:83:2c:f6:7e:
                    f4:0e:06:ea:33:59:19:95:9a:54:d4:01:8f:6d:c9:
                    8c:d8:32:65:57:bf:bf:c7:ea:5a:8f:c7:6c:aa:a4:
                    88:2a:3b:25:3e:ef:02:9b:5f:c9:b9:fc:8f:d0:12:
                    9a:71:52:82:5e:1a:b8:0c:dd:3e:ce:be:08:b3:49:
                    21:19:25:1c:73:6e:7d:34:60:5a:a4:0e:d9:b7:29:
                    1b:22:01:db:62:6e:d7:53:d3:a4:80:fe:e8:9b:dc:
                    38:f2:6b:ef:68:91:63:3f:d4:f5:84:83:3c:db:97:
                    f3:bb:11:b1:d4:0e:1a:be:36:21:a1:b8:43:c4:e1:
                    6f:f1:a6:e8:b9:d1:9b:25:2d:a1:a4:93:7f:9a:bd:
                    59:36:16:e4:58:d3:1a:70:5d:c5:fb:f7:ef:60:5f:
                    71:37:ff:43:a8:dd:40:43:ea:d0:e1:66:12:ab:13:
                    cd:0d:cc:8f:38:63:6f:ec:78:00:ca:79:fc:4b:fb:
                    ee:74:2b:88:85:3d:d0:fd:a9:1c:e2:fc:d0:1a:49:
                    a8:5f:87:91:24:35:15:b3:80:45:75:c1:aa:9e:28:
                    2a:9a:8c:bd:19:fa:2b:78:c6:6f:d9:b1:bb:79:9a:
                    a7:20:4a:9a:b4:ca:07:f1:8d:28:74:ef:ad:2b:01:
                    e4:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:E2:EF:52:91:81:E4:D3:6E:3F:2E:89:DA:D2:51:C2:30:F5:0D:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/9648cbb6-e5e0-3e34-9acd-825af03a7857.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl

            X509v3 Authority Key Identifier:
                keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.14.147.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:9e:f5:5a:b7:f7:57:67:dc:b7:1f:de:7e:76:1c:87:8e:75:
         5a:4a:4e:14:14:b1:ff:98:04:4f:f0:97:2b:ac:3b:a8:81:51:
         c7:db:55:be:ab:73:b1:32:d5:96:6f:95:99:00:a5:8a:93:e5:
         23:1b:c0:d4:bc:30:6c:6b:85:9b:d9:16:67:8c:c8:c3:33:12:
         9b:d3:76:81:f4:85:96:49:e7:bc:4b:47:9f:52:c0:94:dc:23:
         7b:33:d3:5d:46:86:e7:08:a4:a3:00:f7:c5:a3:7b:92:f7:97:
         ad:c4:7d:ba:91:8e:39:7e:22:57:d8:18:80:55:a1:a3:ba:42:
         54:6f:3f:2f:2b:4e:b3:a5:41:aa:ee:d2:f2:ee:cf:6a:86:72:
         cd:ee:ba:9e:c4:2d:90:56:46:86:a6:9c:99:41:96:47:cb:67:
         70:c3:60:24:b4:70:ce:61:e0:bb:35:90:d9:a5:b9:47:88:ca:
         dd:4b:40:ca:99:4e:73:7d:f2:90:f2:5b:05:97:42:40:a5:db:
         0a:a4:e4:0d:ae:86:5c:1d:1b:dc:9f:4e:a1:3a:37:1f:5c:5a:
         8d:88:d3:4c:be:a0:b3:14:fb:22:32:7e:82:d0:39:b5:c7:ae:
         69:24:f3:38:2b:85:c7:96:51:26:a4:dc:21:96:a9:1f:ba:40:
         b5:c4:e6:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----