Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/43a57ba2-ad6b-3998-b714-390b5590c874.roa
File:                     43a57ba2-ad6b-3998-b714-390b5590c874.roa (raw, json)
Hash identifier:          HXeqVZSiXb2cGyl2Tksdbv/mEYXihp24jOOZHZjfCnc=
Subject key identifier:   82:6D:4F:49:EA:98:36:40:FF:9E:49:C9:F1:5C:65:60:54:6B:8A:ED
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328583B59BBAF55812BC8CCD12CD080
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/43a57ba2-ad6b-3998-b714-390b5590c874.roa
Signing time:             Tue 10 Apr 2018 04:00:00 +0000
ROA not before:           Tue 10 Apr 2018 04:00:00 +0000
ROA not after:            Tue 26 Dec 2023 05:00:00 +0000
asID:                     397601
IP address blocks:        204.2.178.80/28 maxlen: 28

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:59:bb:af:55:81:2b:c8:cc:d1:2c:d0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 04:00:00 2018 GMT
            Not After : Dec 26 05:00:00 2023 GMT
        Subject: CN=606c0bed-33eb-4453-a79b-79fc35453391
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:33:95:fd:41:61:94:0b:10:52:e7:ee:96:1b:
                    2e:ea:16:7e:45:a6:d2:64:b1:16:d5:c4:95:14:81:
                    03:d8:b7:ec:15:93:2f:1a:08:83:6c:d4:b6:04:05:
                    de:70:83:70:5e:0c:e7:8f:2c:31:56:bf:b1:ff:4f:
                    8b:4d:6d:37:ce:0e:33:8a:bf:cd:23:93:1d:6d:3e:
                    a0:70:bf:de:41:cc:9c:6f:15:e3:9b:0a:b3:02:01:
                    18:a3:97:94:be:cb:53:f8:38:43:d3:e3:0e:0c:47:
                    37:6e:79:5c:ff:78:36:03:5f:ab:08:7b:e0:30:13:
                    a3:22:a1:0c:db:0b:eb:cd:c3:58:4b:66:be:59:44:
                    08:ad:35:e0:09:19:cf:68:05:d5:84:1f:b1:a1:d5:
                    21:83:e7:4b:40:c4:7a:07:76:21:96:07:03:30:94:
                    7e:20:ca:4d:53:af:0a:27:83:51:a8:bb:13:a3:7d:
                    e7:60:56:39:11:cd:7d:56:10:bd:61:cb:9c:26:a5:
                    15:91:61:bc:84:a0:c0:95:8c:c9:ed:af:ab:8a:aa:
                    2a:3a:46:57:26:5e:7b:36:50:37:2d:61:04:72:a7:
                    63:30:49:7d:3b:96:30:bb:c9:8b:88:1a:a9:2e:2d:
                    e2:1a:94:86:8b:4a:77:81:bc:65:af:6c:47:19:6f:
                    d0:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:6D:4F:49:EA:98:36:40:FF:9E:49:C9:F1:5C:65:60:54:6B:8A:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/43a57ba2-ad6b-3998-b714-390b5590c874.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.2.178.80/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c7:09:d0:2a:53:ff:1d:91:11:33:07:cb:dd:92:dd:3d:26:48:
         06:e0:eb:17:5d:01:24:e7:40:4e:49:bb:72:a2:f3:75:9d:2c:
         73:41:6e:80:2d:fa:31:dd:04:26:8f:f0:c2:fd:c7:68:ec:5e:
         78:42:c8:ad:21:b0:d4:46:0c:69:ad:68:ad:ae:dc:4c:75:2b:
         b5:d8:da:45:6c:66:38:5a:62:a5:b9:23:4b:f5:c1:e8:ad:d8:
         1c:04:64:df:1a:e4:71:f9:95:b9:46:59:d3:4f:e3:86:3d:1d:
         3e:fe:d9:69:26:21:03:e1:84:f2:b9:dd:7f:b5:ab:26:bb:ca:
         98:8f:8b:6e:8e:ab:74:6f:92:42:89:75:d2:13:7f:46:16:f7:
         e8:cf:94:89:9b:52:18:0a:17:23:4a:f6:7f:38:49:79:43:3c:
         42:c0:b5:81:0c:a8:63:c3:ce:0a:a0:59:6b:a9:55:2d:ae:57:
         20:ec:95:17:2d:d4:9f:3c:30:7c:6d:15:ce:36:e8:90:32:02:
         e2:8a:aa:51:9e:d8:93:09:ff:7c:a5:4a:f5:15:e0:42:d5:96:
         6f:08:b5:7e:93:d2:d5:65:03:29:1b:a5:58:b1:ff:9a:81:31:
         dc:40:cf:07:c9:14:cb:d5:86:4a:e0:66:7b:00:a0:aa:a0:e0:
         9a:64:b6:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----