Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/91309112-c8ec-35cc-8011-bf029cb1eb29.roa
File:                     91309112-c8ec-35cc-8011-bf029cb1eb29.roa (raw, json)
Hash identifier:          uHfquAq7k6mk7NTrhG3QwsXbViFADHGunJmcszULQXY=
Subject key identifier:   73:B0:8B:A6:7A:DE:D0:09:8B:7E:66:8C:87:64:00:00:60:46:E1:FE
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F4328584285FDD879A87B9BD2EB648E80
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/91309112-c8ec-35cc-8011-bf029cb1eb29.roa
Signing time:             Wed 12 Jul 2023 15:19:14 +0000
ROA not before:           Wed 12 Jul 2023 15:19:14 +0000
ROA not after:            Tue 10 Oct 2023 15:19:14 +0000
asID:                     209
IP address blocks:        67.99.180.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:85:fd:d8:79:a8:7b:9b:d2:eb:64:8e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: Jul 12 15:19:14 2023 GMT
            Not After : Oct 10 15:19:14 2023 GMT
        Subject: CN=2adf782d-4ebd-4b62-bddc-af7f2e027d80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:60:d1:92:67:11:10:78:99:9f:82:b3:72:11:
                    8f:d1:64:7e:73:3b:6b:83:47:6a:a2:5d:b5:96:50:
                    0f:4c:72:22:d0:60:12:3f:de:91:ce:5b:dc:94:8f:
                    17:f5:80:d5:ec:e9:6c:c5:b5:41:59:35:58:9b:6b:
                    a0:cf:ba:a1:36:51:74:80:5d:77:4d:96:70:4a:49:
                    7a:8b:55:de:3d:bf:09:f8:8c:96:42:af:b0:eb:9a:
                    13:ce:67:6b:5a:a2:5c:2a:47:85:79:90:4e:32:7a:
                    b4:08:09:f2:e8:cc:57:4c:56:c1:fb:5d:29:f4:a5:
                    7e:a8:45:cd:24:6a:45:b2:84:e0:ce:01:1e:c6:c3:
                    cd:41:4e:a5:99:05:ab:92:ba:32:05:af:f9:cd:a4:
                    e7:7e:f4:2e:90:2c:35:6a:12:de:5f:d9:af:32:d9:
                    34:c5:f4:38:30:5b:32:9d:09:05:25:d2:67:5e:13:
                    7d:4b:6c:d1:01:35:a8:c5:5a:fb:47:9b:b9:ca:77:
                    cc:11:55:bd:41:74:33:9e:ea:8e:c1:77:55:2d:4b:
                    f6:85:c2:b5:9a:e4:81:27:2a:6a:41:eb:13:74:3c:
                    93:5a:ca:3a:58:bf:5b:fa:0d:44:02:87:36:1a:5d:
                    74:41:38:f1:90:7b:b6:d9:56:52:a9:a1:65:b8:16:
                    f2:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:B0:8B:A6:7A:DE:D0:09:8B:7E:66:8C:87:64:00:00:60:46:E1:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/91309112-c8ec-35cc-8011-bf029cb1eb29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.99.180.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:60:d5:7d:8e:9e:53:fb:c1:2b:a8:79:d0:0d:1c:ea:95:25:
         ca:7a:16:32:0b:e5:f6:d8:d5:71:3d:7a:14:0f:1d:f2:07:63:
         07:f8:00:b7:93:74:61:70:29:61:96:63:f7:a1:2f:32:a5:03:
         b7:7d:0b:e4:43:2c:75:2f:87:cd:7a:5e:f5:eb:e3:bb:f6:af:
         23:53:e9:dd:96:29:30:e0:2a:a1:d2:d5:ad:90:f4:d8:41:fb:
         ba:f7:d5:b2:b8:1d:68:72:f7:77:80:fc:44:55:6a:0e:d4:f6:
         ac:56:c5:1d:81:92:97:26:40:44:b6:f4:85:31:66:35:72:86:
         c3:33:17:44:5b:e4:64:a9:34:88:ec:45:71:ed:dc:58:27:7d:
         1f:94:a6:04:e7:4d:8b:0e:76:ed:18:82:dc:4d:15:55:95:ec:
         52:68:1b:c8:52:6d:d3:25:c4:d5:3e:b7:21:13:b9:7a:b9:a1:
         6d:93:45:d3:5b:b2:e8:91:2c:d0:3d:e7:2d:c1:cc:65:72:85:
         9d:c7:79:7a:88:18:90:6b:56:e8:2b:87:a1:6d:d3:27:ef:5f:
         fd:20:e8:59:7c:6e:2e:50:bb:2f:f2:26:1d:92:4a:cb:88:93:
         32:83:13:23:86:90:8d:e6:6f:93:a1:69:f0:20:07:74:7d:09:
         73:91:08:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----