Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/de2fb186-dad6-34fc-9991-55d14f3e0413.roa
File:                     de2fb186-dad6-34fc-9991-55d14f3e0413.roa (raw, json)
Hash identifier:          jM5NxF3+TUZW6utZE7VWwQtOHeb87c5lNL4UeTMnjSQ=
Subject key identifier:   9F:EA:57:22:22:2D:97:B0:BD:B4:78:18:79:05:CD:75:EF:BA:B1:EA
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F432858430CF17698D80810B6A352C320
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/de2fb186-dad6-34fc-9991-55d14f3e0413.roa
Signing time:             Tue 29 Aug 2023 23:28:25 +0000
ROA not before:           Tue 29 Aug 2023 23:28:25 +0000
ROA not after:            Tue 28 Nov 2023 00:28:25 +0000
asID:                     16509
IP address blocks:        170.85.48.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0c:f1:76:98:d8:08:10:b6:a3:52:c3:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Aug 29 23:28:25 2023 GMT
            Not After : Nov 28 00:28:25 2023 GMT
        Subject: CN=25980f0f-370a-4b07-8cfb-40b9e7fafe3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:db:65:ea:80:d2:c6:5b:78:30:b7:9f:38:c0:
                    ec:eb:39:88:02:11:d8:c8:ac:f8:3b:a2:42:3b:51:
                    ae:e1:2e:32:f2:98:4d:4c:8e:d0:24:46:80:8d:f2:
                    62:e2:1f:75:22:37:f7:6d:7c:fb:97:97:e6:fa:39:
                    dd:73:ce:93:dc:00:05:1d:07:90:b3:fd:fa:6b:9c:
                    f0:a3:9f:6f:a3:57:a0:ac:c0:34:09:8b:6f:27:30:
                    fd:d3:2c:30:8d:3a:74:da:69:02:53:8c:eb:6d:3f:
                    8d:96:8f:d5:0a:05:0a:98:a4:dd:4d:1a:e7:ca:b7:
                    92:69:7c:cb:00:64:c4:b4:3e:1c:2c:71:63:02:88:
                    79:b9:c4:29:c4:22:0f:ff:c4:4c:fc:f4:a2:47:df:
                    30:dc:a4:b2:30:2b:0f:33:df:42:66:70:ff:c7:e9:
                    84:56:f2:17:0f:99:c1:c7:9e:6b:07:da:cd:c7:b5:
                    7a:66:c6:96:e1:3e:d3:95:4d:80:bd:1b:76:f8:7a:
                    07:9a:b6:bd:76:d0:cb:a7:29:c4:a5:8d:ab:60:13:
                    d9:dd:c7:2c:0b:ab:f1:7b:ac:98:3b:30:cf:29:0a:
                    68:d8:d5:82:54:89:06:56:cb:e4:25:76:26:6f:3d:
                    50:20:79:71:d0:26:95:41:91:22:7e:31:06:61:25:
                    2b:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:EA:57:22:22:2D:97:B0:BD:B4:78:18:79:05:CD:75:EF:BA:B1:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/de2fb186-dad6-34fc-9991-55d14f3e0413.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.85.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:66:9b:59:3c:9c:4f:61:83:62:ad:36:64:38:73:b0:99:c0:
         a8:0d:a5:97:60:61:b7:ad:cc:a3:4b:02:95:b4:c2:50:10:8b:
         2b:44:e3:67:b8:b7:ea:b7:e0:8c:77:89:44:a9:c4:17:59:57:
         2a:ba:fe:ae:fc:ff:50:62:c2:02:91:50:75:47:d0:8f:ff:2c:
         b2:45:fc:d1:01:fa:08:a3:11:f4:fc:fa:93:55:bb:2b:e9:d7:
         89:80:2e:93:f9:27:cf:4e:e3:3d:10:46:22:a2:c1:0c:1e:20:
         d0:91:e7:98:44:a4:0a:fb:ce:90:fe:1a:04:ac:20:e5:3a:0a:
         a7:7a:3e:aa:c2:ca:78:e0:d8:72:1a:cf:ac:3f:80:ac:02:7f:
         7b:d8:2c:79:d3:f3:65:bb:d2:1d:3b:b4:f3:2d:41:6c:be:12:
         1d:84:5e:61:11:32:55:e4:36:e9:cf:f0:1f:e6:14:20:1b:12:
         40:b2:d5:20:e1:07:71:8b:dc:61:4e:47:9d:44:32:dd:ee:02:
         63:10:f1:53:fb:aa:d2:de:d0:0b:35:2d:9c:64:f1:d7:72:ab:
         4d:3c:b2:b1:37:79:16:21:44:50:2f:82:05:65:0b:b2:39:36:
         c5:2f:83:58:aa:9e:48:09:16:09:a8:cb:33:3f:0f:9a:7b:03:
         22:78:63:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----