Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/03ea4077-48d7-37f2-bcf4-997aed792630.roa
File:                     03ea4077-48d7-37f2-bcf4-997aed792630.roa (raw, json)
Hash identifier:          KNKwnOQM+2NeMU3Ny+3aL+RfY9vYKGeO9g7GySTi9Wo=
Subject key identifier:   AC:17:AE:E1:6C:D1:CD:2E:9F:34:E1:2E:CD:92:F7:3F:A6:09:CF:A7
Certificate issuer:       /CN=ef710622-7ec4-4bb2-9e87-27c5e5964fae
Certificate serial:       010D0C9F4328583FC66593CCB62B6B5DABF9EB00
Authority key identifier: 8B:4A:0E:7A:84:48:3D:14:18:BD:AC:31:07:96:0F:68:2A:61:ED:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/03ea4077-48d7-37f2-bcf4-997aed792630.roa
Signing time:             Thu 04 Aug 2022 15:39:08 +0000
ROA not before:           Thu 04 Aug 2022 15:39:08 +0000
ROA not after:            Tue 27 Aug 2024 04:00:00 +0000
asID:                     3842
IP address blocks:        167.88.124.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:c6:65:93:cc:b6:2b:6b:5d:ab:f9:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef710622-7ec4-4bb2-9e87-27c5e5964fae
        Validity
            Not Before: Aug  4 15:39:08 2022 GMT
            Not After : Aug 27 04:00:00 2024 GMT
        Subject: CN=527c28d1-da7d-461c-88ef-72761e477616
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:b9:57:51:a0:81:d9:36:a9:25:1d:95:4b:93:
                    2a:61:75:c6:c6:aa:e1:58:f6:46:6d:30:cb:f0:91:
                    01:f0:74:95:ce:fe:51:23:71:72:8d:5e:d9:fd:17:
                    dc:e9:7a:c4:81:92:30:ab:4d:0e:bc:07:3f:7c:c2:
                    70:75:fb:61:e8:b5:99:e8:80:60:ff:a9:45:4c:44:
                    c6:68:ed:ca:e2:ca:8f:c0:40:6a:55:4d:a8:c6:3e:
                    02:3c:66:39:5c:8c:23:d1:09:13:de:82:96:96:da:
                    71:22:33:28:4c:3f:e2:4b:f9:f4:1e:07:59:d8:85:
                    7e:9c:a3:64:be:1e:00:a8:59:95:57:bb:28:da:c4:
                    52:df:5c:ce:b2:a8:f3:e0:b8:44:fa:c8:5d:b7:94:
                    c7:95:37:7d:5a:95:09:de:2b:57:ca:a5:03:c1:4e:
                    17:b8:63:72:a8:4a:86:89:34:2d:98:a2:cc:76:ac:
                    1e:1c:e9:a6:bc:8a:41:ee:e4:9d:5a:4e:0d:be:83:
                    ca:f8:56:f1:48:d0:56:31:c9:fe:54:6d:d2:5c:66:
                    05:5f:14:17:df:ad:2a:0f:de:86:c0:a5:f8:e4:69:
                    9e:42:b3:7b:93:82:8e:99:c0:19:8f:99:ea:cc:56:
                    51:b0:e2:bb:e2:27:bc:fd:49:8e:88:07:11:a3:11:
                    d9:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:17:AE:E1:6C:D1:CD:2E:9F:34:E1:2E:CD:92:F7:3F:A6:09:CF:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/03ea4077-48d7-37f2-bcf4-997aed792630.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.crl

            X509v3 Authority Key Identifier:
                keyid:8B:4A:0E:7A:84:48:3D:14:18:BD:AC:31:07:96:0F:68:2A:61:ED:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.88.124.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:ff:d4:a2:75:32:69:cb:ff:25:71:01:d2:ee:10:f1:6f:ec:
         6f:8b:c0:a0:b4:41:3b:f4:82:a7:6b:1c:fe:2a:1f:e9:aa:30:
         1b:58:05:3d:70:c7:c2:e2:7d:64:3e:3a:35:61:7d:38:3a:39:
         00:74:0a:0c:b9:de:dc:b8:2b:6e:6b:94:f6:65:b3:7f:df:5d:
         10:0a:5d:8d:c4:05:db:b9:fb:be:b2:ba:e2:54:ba:45:4b:df:
         cf:f6:a0:b1:c6:a0:c2:d9:b9:10:26:09:39:3a:bc:85:a4:ec:
         fb:17:de:87:20:54:1b:c9:df:20:23:35:9a:89:32:a1:15:7f:
         0b:9d:0d:76:6d:34:df:c3:74:c2:d4:8e:f6:19:29:c3:b8:a8:
         b4:26:72:53:6a:39:f6:75:20:0d:db:c7:95:21:e3:70:b9:69:
         ea:53:05:29:d9:ed:c2:35:33:eb:1e:83:87:91:4c:31:2c:90:
         12:80:33:f7:b6:c2:8e:ed:d5:f7:48:77:f8:ac:5b:b9:c5:6d:
         f1:22:8d:26:ec:8a:8d:9f:16:6d:2a:1d:2c:5e:5b:0f:7e:fe:
         5e:87:19:eb:a7:65:03:52:dd:c3:08:eb:c9:f4:e1:7a:8b:9f:
         5c:73:1c:86:60:b2:01:0f:83:67:36:7f:fc:52:75:02:8c:76:
         f0:c0:ef:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----