Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/d975b440-8ee8-3d2c-beee-766223032904.roa
File:                     d975b440-8ee8-3d2c-beee-766223032904.roa (raw, json)
Hash identifier:          c4o9hfGpZJZRVKettdgttd1jXwl5B44Fu91+UsoYGAg=
Subject key identifier:   91:25:D9:D9:FC:8E:EE:39:5F:F5:52:F1:06:92:9B:7B:7F:41:92:EC
Certificate issuer:       /CN=f767ea16-72b4-402a-9b2f-7583fe390bb7
Certificate serial:       010D0C9F4328583F75D71650FB27E87D8D09D900
Authority key identifier: 7A:C6:2E:73:FB:82:27:31:62:5F:C0:8E:76:FB:20:55:A6:05:B9:29
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/d975b440-8ee8-3d2c-beee-766223032904.roa
Signing time:             Tue 04 Oct 2022 18:05:39 +0000
ROA not before:           Tue 04 Oct 2022 18:05:39 +0000
ROA not after:            Mon 30 Dec 2024 05:00:00 +0000
asID:                     14773
IP address blocks:        206.82.20.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:75:d7:16:50:fb:27:e8:7d:8d:09:d9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f767ea16-72b4-402a-9b2f-7583fe390bb7
        Validity
            Not Before: Oct  4 18:05:39 2022 GMT
            Not After : Dec 30 05:00:00 2024 GMT
        Subject: CN=a09578bc-9fbc-477d-a9cb-c9d4629e02f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:7c:f6:be:aa:7d:9e:43:6d:aa:b1:6d:96:20:
                    bf:21:17:95:31:50:90:b6:82:ff:d1:46:83:f7:98:
                    a4:07:85:5d:b1:0f:95:91:88:72:65:6d:86:0b:cd:
                    52:75:bd:8d:9e:51:98:49:5e:f0:04:39:ef:38:d7:
                    f4:85:96:ba:46:7c:bd:88:b1:b7:6c:da:6e:c7:80:
                    ca:fa:e9:c6:a6:e0:4a:80:74:5b:31:00:5e:9f:19:
                    28:93:c5:12:36:82:f3:b3:9c:a0:58:39:3e:c9:2f:
                    01:52:fd:5b:bd:ab:82:0c:6b:d6:e2:28:7f:66:f0:
                    23:09:e9:95:16:5e:01:fa:7c:1a:ab:91:45:c4:00:
                    12:aa:f7:bf:c8:8e:c7:06:bf:e9:78:69:fc:c1:11:
                    12:bb:4f:c7:2b:d9:1b:b5:f7:5c:c7:0c:60:67:f6:
                    a2:61:f4:db:b2:17:a0:9b:50:91:ee:ba:a0:4a:dc:
                    1d:f1:54:57:b5:d0:2a:5e:91:51:f9:dd:a4:5a:9f:
                    17:0d:d1:a2:6f:3f:14:88:65:a7:5c:30:92:70:40:
                    45:13:35:24:51:8d:ff:96:c6:dd:35:b3:b7:bd:c2:
                    6b:08:79:1e:9b:1f:96:93:3f:2b:d1:b7:c8:bd:39:
                    6f:76:7a:0e:5a:5e:d9:bb:ef:c9:b8:05:92:7e:7b:
                    d9:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:25:D9:D9:FC:8E:EE:39:5F:F5:52:F1:06:92:9B:7B:7F:41:92:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/d975b440-8ee8-3d2c-beee-766223032904.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/f767ea16-72b4-402a-9b2f-7583fe390bb7.crl

            X509v3 Authority Key Identifier:
                keyid:7A:C6:2E:73:FB:82:27:31:62:5F:C0:8E:76:FB:20:55:A6:05:B9:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.82.20.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:c7:ec:59:26:06:cc:b5:20:2e:46:5a:7c:46:43:9b:21:08:
         ad:89:3f:c1:91:ff:35:41:fd:cb:80:4b:cb:a6:19:34:60:15:
         d2:80:b8:67:40:ee:bc:f6:44:85:93:0c:11:e2:fd:c7:46:c4:
         16:a7:79:3d:b2:a3:7f:f4:56:9f:f7:c0:b8:ca:fa:a7:7a:b7:
         1c:66:87:d3:7b:f5:ad:bb:30:44:2b:dc:71:71:a7:d3:77:82:
         75:fa:cf:71:1f:02:0c:fc:43:f0:f6:49:09:50:45:cd:87:3a:
         31:f5:d3:9e:96:b7:12:6e:0e:6f:77:26:0d:ed:d7:44:dc:6d:
         3e:da:0e:74:02:16:7c:e0:cb:2a:80:36:60:87:d9:0a:38:5e:
         ff:66:09:d5:2e:94:a5:61:eb:24:7f:81:1b:45:f7:0d:60:58:
         4c:ef:8e:7f:db:00:c1:a4:d7:6b:fc:b1:fe:14:18:43:02:3f:
         0d:ec:82:c7:be:a4:47:9d:96:81:96:de:0f:be:10:ae:60:de:
         88:e7:a5:45:7f:f0:f3:86:3d:97:e9:66:ea:66:ac:9b:5c:31:
         e9:d4:cd:34:1b:36:5f:9a:3a:18:2f:3a:e6:f6:4a:a0:f0:09:
         18:c8:dc:5a:90:cc:f1:4f:a9:e5:bb:ab:37:f7:7f:73:f1:23:
         1e:8b:27:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----