Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1b737b88-e5c0-453e-99fa-9767cead3db6/42aabab3-133d-365c-8259-dee016083d09.roa
File:                     42aabab3-133d-365c-8259-dee016083d09.roa (raw, json)
Hash identifier:          IrPovpcfczXfypZUqLempRPXxI4wJVrBkIGCrsSz0q0=
Subject key identifier:   B7:87:2A:90:7D:CA:EF:AE:E9:CD:F7:39:5A:85:82:FD:8D:43:D7:87
Certificate issuer:       /CN=1b737b88-e5c0-453e-99fa-9767cead3db6
Certificate serial:       010D0C9F4328576D51CC73C042CFC162985E9BF5
Authority key identifier: 60:A8:EC:1A:3C:41:BD:E1:CB:5E:2F:3F:53:52:F4:4F:B5:6A:8B:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1b737b88-e5c0-453e-99fa-9767cead3db6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1b737b88-e5c0-453e-99fa-9767cead3db6/42aabab3-133d-365c-8259-dee016083d09.roa
Signing time:             Fri 06 Apr 2018 00:32:39 +0000
ROA not before:           Fri 05 May 2017 04:00:00 +0000
ROA not after:            Wed 05 May 2027 04:00:00 +0000
asID:                     11554
IP address blocks:        74.123.244.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Sat 03 Dec 2022 17:53:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:62:98:5e:9b:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b737b88-e5c0-453e-99fa-9767cead3db6
        Validity
            Not Before: May  5 04:00:00 2017 GMT
            Not After : May  5 04:00:00 2027 GMT
        Subject: CN=ee68d15f-7faf-49b0-8607-c1b1b28da435
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:1b:28:17:5c:48:1c:d1:b2:34:ad:e7:d0:0f:
                    5a:49:47:9a:76:5c:8b:7f:fa:1a:7c:ef:b1:23:66:
                    69:21:6a:b1:a5:2f:f5:f2:84:72:fc:ab:79:29:00:
                    8c:c8:ac:2c:85:ed:78:ed:84:83:10:73:ea:7b:34:
                    57:c3:4f:e8:74:6e:f8:8c:45:d5:d2:a0:3b:eb:ff:
                    ef:4d:48:27:7d:39:28:d1:e8:9d:96:37:a8:1d:33:
                    cb:d6:16:af:1e:ac:82:9f:13:7d:76:8b:da:b8:4b:
                    23:df:33:8e:e4:10:eb:38:ab:07:1b:7e:33:d2:03:
                    61:d5:fb:f0:ec:3a:43:dd:5c:c5:63:0f:a5:30:25:
                    f0:f4:a7:0f:21:d6:1b:6c:ee:7c:bd:0a:22:c8:28:
                    5f:7d:26:96:7d:e6:3e:b2:94:c0:13:30:e7:2f:8a:
                    71:31:ff:e0:b4:14:3b:d9:1a:b5:30:2d:bc:e6:84:
                    f9:cd:3a:d3:7a:5b:64:b6:19:0f:b9:3c:c3:10:ce:
                    92:e1:f7:80:6d:db:1a:a2:24:fe:b1:dc:44:01:ce:
                    39:12:42:fc:44:00:17:c8:55:84:4d:43:78:f5:e1:
                    7d:7d:9f:65:67:18:89:85:c4:71:c8:16:8d:d6:22:
                    55:7d:62:26:75:61:f4:97:73:fd:75:69:ad:45:7a:
                    d0:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:87:2A:90:7D:CA:EF:AE:E9:CD:F7:39:5A:85:82:FD:8D:43:D7:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1b737b88-e5c0-453e-99fa-9767cead3db6/42aabab3-133d-365c-8259-dee016083d09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1b737b88-e5c0-453e-99fa-9767cead3db6/1b737b88-e5c0-453e-99fa-9767cead3db6.crl

            X509v3 Authority Key Identifier:
                keyid:60:A8:EC:1A:3C:41:BD:E1:CB:5E:2F:3F:53:52:F4:4F:B5:6A:8B:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1b737b88-e5c0-453e-99fa-9767cead3db6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.123.244.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:e2:83:54:37:3c:7f:35:22:c6:fc:e5:2c:14:26:6c:07:5e:
         f5:b3:46:af:7e:23:c7:f0:70:d3:f2:77:f3:37:a7:54:ea:f9:
         97:14:3c:f6:45:ce:75:8c:b7:bc:e7:23:63:95:ec:9c:2e:f3:
         60:08:39:63:ce:a7:2f:36:7d:f1:b9:5a:56:7d:d1:40:de:ac:
         2a:54:67:70:3c:6b:34:1d:7d:c2:f5:4e:dc:b5:95:97:6a:b0:
         03:33:b0:aa:4e:dc:06:ff:74:b9:51:fa:ff:fa:e8:97:52:db:
         50:66:fd:84:f5:0a:13:9b:c6:4a:82:f9:fe:01:39:93:59:22:
         a7:98:10:d0:8c:a3:d6:90:a7:18:03:45:ab:07:83:3d:8c:b4:
         d6:a4:d4:65:6e:c3:2e:ba:cf:fe:14:f8:33:dc:89:35:7a:7f:
         64:25:62:8c:28:a0:84:50:ce:c1:d4:7d:e0:59:65:40:a7:48:
         d9:0c:08:f0:ae:e2:c8:76:92:85:ff:6b:ba:63:04:75:3c:2b:
         a8:d7:83:b5:d8:fb:fc:a9:c6:87:19:ff:19:bd:63:ca:d8:9a:
         9d:05:45:97:ec:d7:93:e6:b2:8d:f6:3d:5b:76:9e:a4:44:5c:
         0f:48:61:08:0d:ca:7e:b8:a0:81:e9:95:4c:0b:33:1d:1d:16:
         c0:98:5e:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----