Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1b737b88-e5c0-453e-99fa-9767cead3db6/c036eeab-2d13-3290-9eb4-0e350cbdd4e4.roa
File:                     c036eeab-2d13-3290-9eb4-0e350cbdd4e4.roa (raw, json)
Hash identifier:          zQCfMb4Lk6ZEp7ScoVJHhGvDmaasQ1m7y2KkcH1Ztl0=
Subject key identifier:   D9:1B:09:59:0E:19:40:13:FB:60:2A:74:E2:DB:19:E3:8A:97:F7:B5
Certificate issuer:       /CN=1b737b88-e5c0-453e-99fa-9767cead3db6
Certificate serial:       010D0C9F4328584267036CC5CF45D7817A2D4F80
Authority key identifier: 60:A8:EC:1A:3C:41:BD:E1:CB:5E:2F:3F:53:52:F4:4F:B5:6A:8B:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1b737b88-e5c0-453e-99fa-9767cead3db6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1b737b88-e5c0-453e-99fa-9767cead3db6/c036eeab-2d13-3290-9eb4-0e350cbdd4e4.roa
Signing time:             Sat 01 Jul 2023 13:00:18 +0000
ROA not before:           Sat 01 Jul 2023 13:00:18 +0000
ROA not after:            Fri 29 Sep 2023 13:00:18 +0000
asID:                     14401
IP address blocks:        104.247.89.0/24 maxlen: 24
                          104.247.90.0/23 maxlen: 23
                          2607:6880::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:67:03:6c:c5:cf:45:d7:81:7a:2d:4f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b737b88-e5c0-453e-99fa-9767cead3db6
        Validity
            Not Before: Jul  1 13:00:18 2023 GMT
            Not After : Sep 29 13:00:18 2023 GMT
        Subject: CN=545e27fb-37e7-4514-a874-3282dfee391d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:a3:31:ec:bc:7a:09:a1:97:82:d8:f8:31:91:
                    c1:ef:65:2d:a4:c8:bf:a0:e8:e7:76:9e:08:57:8d:
                    d5:bb:84:bc:49:24:8d:8c:a8:56:c4:bf:64:0c:ab:
                    80:a5:d8:70:ee:0b:87:71:f3:2f:7a:78:6b:19:de:
                    b6:b4:a3:df:fc:7e:26:1e:0b:86:23:94:ae:b8:3a:
                    76:60:50:ae:7a:a1:47:f4:7f:0b:96:08:89:c8:7b:
                    a0:29:74:af:39:c5:44:cb:84:bb:54:a4:42:0e:b5:
                    78:1e:81:05:66:12:8a:9d:9f:49:e2:c2:b3:17:30:
                    49:c2:3c:0e:b4:dc:ff:ed:07:a6:58:4e:73:62:b9:
                    2f:1b:0c:c0:0b:08:db:0a:19:8f:49:8e:7f:c3:49:
                    54:d4:11:c6:4b:5b:8a:64:87:78:7f:da:8a:4f:2a:
                    79:1f:4a:ed:90:15:52:00:9f:ad:45:85:67:01:bd:
                    13:ee:a0:3f:33:45:18:2d:e7:f0:37:18:f5:ea:4b:
                    e2:7b:85:16:8d:7d:14:76:8d:d8:e8:c1:3a:d0:5f:
                    b4:15:c3:9b:40:5d:38:3b:fe:8a:27:6d:ce:9f:42:
                    12:08:cc:b6:46:a1:30:06:e1:1d:44:61:43:6b:f0:
                    cd:0b:10:40:e5:e8:b4:28:4b:9f:3f:f3:03:a6:ab:
                    ec:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:1B:09:59:0E:19:40:13:FB:60:2A:74:E2:DB:19:E3:8A:97:F7:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1b737b88-e5c0-453e-99fa-9767cead3db6/c036eeab-2d13-3290-9eb4-0e350cbdd4e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1b737b88-e5c0-453e-99fa-9767cead3db6/1b737b88-e5c0-453e-99fa-9767cead3db6.crl

            X509v3 Authority Key Identifier:
                keyid:60:A8:EC:1A:3C:41:BD:E1:CB:5E:2F:3F:53:52:F4:4F:B5:6A:8B:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1b737b88-e5c0-453e-99fa-9767cead3db6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.247.89.0-104.247.91.255
                IPv6:
                  2607:6880::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:35:45:f0:c1:01:e6:c9:9a:9d:94:12:46:b3:da:03:c0:84:
         1f:07:49:b0:4e:f8:0c:85:04:69:5a:80:1d:f7:a6:9d:5d:1b:
         08:0f:80:7a:f8:f4:81:50:70:86:ac:92:79:24:6f:45:62:a6:
         7f:ec:b9:20:ab:62:ae:bf:2d:50:04:eb:65:af:84:33:cc:0a:
         c8:e4:a1:bf:74:ce:fc:1a:33:08:57:b8:33:21:9f:cf:13:d1:
         84:f2:6a:22:a0:f6:e0:4d:d6:bd:e5:a2:e2:fe:ca:ce:63:63:
         f6:e8:4a:b3:54:7a:09:fd:4a:5b:4a:2d:6e:d9:5b:3d:36:9d:
         dd:48:1a:ac:5c:86:43:70:f4:7b:e5:92:5c:bd:83:dd:63:27:
         98:54:cf:58:7a:cb:87:3a:01:73:90:8f:e8:99:19:e2:02:f3:
         37:20:0c:e0:04:9c:69:5b:c2:c8:54:99:9d:d0:46:9a:fa:79:
         12:8e:65:30:0d:c4:75:74:81:fd:7a:16:b2:bc:fe:21:d8:29:
         e6:c3:6c:bd:38:f4:80:19:3c:54:c2:38:90:13:cd:fd:9f:96:
         49:ae:e8:74:f3:bc:02:13:04:2e:73:3e:09:b0:65:a8:a5:73:
         23:7f:4c:fe:66:e2:c8:70:30:9b:b1:39:15:7f:c8:da:32:39:
         03:e7:9c:59
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----