Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c582d6cf-85cc-313f-adee-83d534ddb3c9.roa
File:                     c582d6cf-85cc-313f-adee-83d534ddb3c9.roa (raw, json)
Hash identifier:          hiXT/9hQcXY20HpU2aR25ooCzbJwTt29Z7RMSckQKXU=
Subject key identifier:   10:2C:AE:AE:E7:D8:52:C6:6A:6A:20:2E:AB:E6:92:5C:09:17:CD:53
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328583FC72349038A491C757FE26240
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c582d6cf-85cc-313f-adee-83d534ddb3c9.roa
Signing time:             Tue 10 Apr 2018 11:26:02 +0000
ROA not before:           Tue 10 Apr 2018 11:26:02 +0000
ROA not after:            Tue 04 Feb 2025 05:00:00 +0000
asID:                     40676
IP address blocks:        204.2.62.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:c7:23:49:03:8a:49:1c:75:7f:e2:62:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 11:26:02 2018 GMT
            Not After : Feb  4 05:00:00 2025 GMT
        Subject: CN=6b8fff30-a486-4a5c-b541-c551709c2fd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:4d:71:9e:df:51:46:d2:ef:35:83:04:46:e0:
                    6f:f2:1f:c0:9e:30:b4:1f:0e:c0:dc:17:ef:60:e4:
                    2a:5f:7f:f8:84:e1:8c:4b:9c:3b:a3:5e:13:ef:75:
                    ea:95:7a:f6:62:2d:f5:6d:3b:e8:dc:96:86:d6:06:
                    55:03:f4:ec:99:2b:51:58:3c:98:eb:6a:30:1e:4e:
                    b2:f2:c3:a9:5e:0c:be:ab:35:8f:8b:30:83:e0:85:
                    ea:53:e3:7e:20:72:b9:39:40:02:76:2a:bf:a4:59:
                    f1:bc:73:5f:b9:84:57:f6:ca:06:1f:b4:97:b1:ec:
                    bd:a7:a1:82:a6:d1:34:70:30:05:4c:df:47:01:ad:
                    36:b0:59:28:db:2a:ee:f2:08:30:3d:16:93:e4:4e:
                    c2:a1:94:1c:49:69:56:72:5a:f7:8a:40:90:84:c1:
                    9a:1e:40:c8:da:e4:09:b3:a5:a0:97:c1:4a:4c:87:
                    a9:e5:3d:5a:c4:d6:7b:d8:d4:62:2b:c9:98:2e:20:
                    54:e4:07:fd:52:e4:df:ad:ce:02:58:74:b8:2e:3e:
                    fc:ce:f8:7a:10:a9:14:d8:c2:57:56:be:84:58:87:
                    b4:d9:63:8c:de:99:cb:79:a1:eb:84:17:c8:7c:49:
                    12:dd:e0:65:18:21:5f:9a:06:9f:30:0f:33:b2:3b:
                    a6:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:2C:AE:AE:E7:D8:52:C6:6A:6A:20:2E:AB:E6:92:5C:09:17:CD:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c582d6cf-85cc-313f-adee-83d534ddb3c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.2.62.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:7d:24:f9:2b:43:82:b8:e4:fa:f8:7f:59:dd:a9:e3:e8:61:
         19:83:75:0c:0b:8b:22:f0:a2:43:da:9e:68:fe:e9:b4:3c:f9:
         2f:d4:db:4f:92:c8:f9:ce:2a:00:d1:96:ad:5a:37:de:b1:d5:
         e0:5e:bc:68:3b:d9:13:c4:18:71:ad:67:f3:21:86:52:53:5b:
         cb:02:62:84:96:4d:81:fa:a2:2c:0b:5c:23:c1:85:b9:14:81:
         47:80:8a:dc:47:5d:dd:22:1a:23:10:90:a4:ad:e4:67:92:33:
         f3:d3:46:a9:dd:18:2d:6e:87:9e:f6:24:bc:25:5e:53:66:92:
         3e:93:16:78:d1:ef:f0:b6:72:39:49:d5:c4:d2:26:e5:fa:84:
         8c:e4:cb:40:1b:83:3a:fd:aa:81:e5:b0:7e:dc:e7:13:59:dc:
         d1:77:07:18:f5:2a:81:d9:1c:7c:41:c7:39:4b:6b:69:9f:3b:
         d1:d3:d7:84:4f:79:88:7b:30:71:dd:f4:30:cb:a8:96:0e:50:
         43:4a:79:b4:dd:7a:1d:8a:16:04:b3:83:e7:63:c5:bb:38:fa:
         2a:87:bf:6b:a3:1b:a5:eb:d5:66:11:f9:d4:67:00:63:26:f4:
         24:6f:29:77:d6:50:c7:b7:38:a6:37:97:ea:78:f4:ed:9d:54:
         f0:66:9c:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----