Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb6338e8-3b98-45c0-936a-f7532d14c16b/4f4f3e25-8c6d-39ae-9f89-8a98ecad7b43.roa
File:                     4f4f3e25-8c6d-39ae-9f89-8a98ecad7b43.roa (raw, json)
Hash identifier:          xEr7m7/aHvhKM7IPnnD48DA58II0v9N6eZJRw+W0zwU=
Subject key identifier:   1C:78:8E:17:17:9C:A6:C0:DA:38:6E:1B:6A:E5:CF:52:3A:C7:3A:E3
Certificate issuer:       /CN=bb6338e8-3b98-45c0-936a-f7532d14c16b
Certificate serial:       010D0C9F43285841D069DFA632E189FE5B45E808
Authority key identifier: 34:F6:D7:F6:1D:96:AC:9E:90:42:E7:55:B9:11:10:5E:09:CD:4C:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb6338e8-3b98-45c0-936a-f7532d14c16b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb6338e8-3b98-45c0-936a-f7532d14c16b/4f4f3e25-8c6d-39ae-9f89-8a98ecad7b43.roa
Signing time:             Fri 02 Sep 2022 12:29:26 +0000
ROA not before:           Fri 02 Sep 2022 12:29:26 +0000
ROA not after:            Thu 05 Dec 2024 05:00:00 +0000
asID:                     19808
IP address blocks:        74.220.121.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:d0:69:df:a6:32:e1:89:fe:5b:45:e8:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb6338e8-3b98-45c0-936a-f7532d14c16b
        Validity
            Not Before: Sep  2 12:29:26 2022 GMT
            Not After : Dec  5 05:00:00 2024 GMT
        Subject: CN=445a238d-c188-4f49-984e-73f3955498fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:79:aa:82:0b:9c:22:36:17:05:66:d8:df:a1:
                    50:bc:d0:49:2d:4e:7d:f4:1c:86:46:9a:c9:f5:70:
                    3c:f5:45:a2:f6:04:47:17:14:eb:57:c1:a1:e8:9a:
                    58:01:9b:36:06:c7:80:48:18:ba:76:0c:1b:73:0b:
                    40:47:54:db:d6:82:2a:b1:ee:0b:40:95:4f:8f:b2:
                    da:76:51:51:d0:bf:c1:6d:dd:fc:98:47:f2:d4:9b:
                    86:c4:09:7a:a9:25:b7:f8:27:26:88:3b:f2:0a:c7:
                    ad:34:b1:1b:8d:fb:01:9f:ca:33:df:f7:20:c9:f8:
                    41:66:c2:1d:c8:e8:77:64:39:fc:bd:78:d0:31:fd:
                    be:fc:ca:ba:94:33:bb:08:af:5b:c4:4e:a8:81:a6:
                    be:83:9f:f7:90:80:59:11:24:f1:b6:37:8a:d7:3d:
                    5c:2e:31:d1:b1:f6:b6:0c:e5:a7:c7:2c:88:fd:c6:
                    56:e8:10:be:95:a9:f8:45:6b:91:b7:21:dd:1a:5a:
                    26:f6:55:96:93:df:1f:79:90:a3:cd:7d:2f:76:05:
                    81:ce:e2:ae:90:2d:37:73:16:b3:3b:f9:b9:93:31:
                    e5:56:bd:51:87:92:a3:b3:69:bd:bc:e3:c5:62:41:
                    f9:77:a2:55:1b:2b:16:f3:2f:a6:ef:3a:71:4d:02:
                    c1:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:78:8E:17:17:9C:A6:C0:DA:38:6E:1B:6A:E5:CF:52:3A:C7:3A:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb6338e8-3b98-45c0-936a-f7532d14c16b/4f4f3e25-8c6d-39ae-9f89-8a98ecad7b43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb6338e8-3b98-45c0-936a-f7532d14c16b/bb6338e8-3b98-45c0-936a-f7532d14c16b.crl

            X509v3 Authority Key Identifier:
                keyid:34:F6:D7:F6:1D:96:AC:9E:90:42:E7:55:B9:11:10:5E:09:CD:4C:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb6338e8-3b98-45c0-936a-f7532d14c16b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.220.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:03:2e:c9:08:64:93:e1:56:2b:2b:ed:5d:dd:0e:88:75:b0:
         f2:52:c2:a9:5f:f5:e0:83:b4:e6:8f:01:11:f5:d5:8d:4c:67:
         10:56:b8:2f:c4:5c:45:e1:f1:f9:5f:b7:1f:5c:2d:5b:54:93:
         d3:ee:39:d7:e4:40:23:89:43:3d:90:5f:71:3b:be:2d:10:d6:
         a5:13:aa:61:06:32:fb:80:a1:71:1e:2f:9b:b5:1b:a3:f1:4c:
         1c:14:08:70:3b:fa:a0:c1:ee:e8:73:53:51:d2:24:ff:be:b5:
         62:b2:c9:ae:1e:91:3c:d8:47:9c:ec:54:ba:8a:bb:fd:66:2c:
         73:fb:36:31:25:a4:8d:33:9c:7c:ac:4d:bd:f1:59:1f:d9:49:
         c5:6b:e4:93:d0:73:db:35:56:5b:5d:e0:8d:c7:97:e5:c3:eb:
         b5:40:f7:6f:d7:6d:3d:bb:68:64:67:fe:aa:fa:74:ef:4d:15:
         bf:33:ac:fa:92:f9:62:44:d1:3e:65:58:95:72:39:b0:b4:78:
         4b:17:24:f9:b0:29:b8:67:93:5a:75:f1:92:94:63:75:27:a4:
         45:a9:45:57:43:b8:7e:e7:76:68:89:a5:21:85:a8:22:54:c7:
         a6:1f:d7:05:94:3f:3f:f6:15:45:28:18:da:e2:a3:25:ae:eb:
         82:15:d7:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----