Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d01255b9-0ba9-3cc9-82d0-8b8052109c7a.roa
File:                     d01255b9-0ba9-3cc9-82d0-8b8052109c7a.roa (raw, json)
Hash identifier:          ilnCFLOo7eatfIebM772EE3hj3y8GW/X/uwcq33pcoQ=
Subject key identifier:   77:38:F4:4F:F6:1D:33:E8:FB:9B:80:CD:36:EA:85:BE:30:A8:B6:CA
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F43285841773862F0394417267877C300
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d01255b9-0ba9-3cc9-82d0-8b8052109c7a.roa
Signing time:             Tue 10 Apr 2018 11:26:02 +0000
ROA not before:           Tue 10 Apr 2018 11:26:02 +0000
ROA not after:            Sun 09 Apr 2028 04:00:00 +0000
asID:                     22576
IP address blocks:        128.242.148.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:77:38:62:f0:39:44:17:26:78:77:c3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 11:26:02 2018 GMT
            Not After : Apr  9 04:00:00 2028 GMT
        Subject: CN=aecfc17a-c4da-4c21-a679-59a809548000
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:a2:6b:28:5d:1e:e2:49:50:59:e3:39:85:5b:
                    3c:39:29:09:58:90:ef:f6:1f:1f:0b:12:64:39:b2:
                    62:2a:3a:51:f5:10:4a:40:d2:2c:52:3c:4c:23:ab:
                    30:f4:7c:d3:ad:5c:56:72:64:ae:2c:e7:23:85:6c:
                    7e:c5:11:cb:bd:55:79:0d:6e:ad:e5:9b:4a:f3:d4:
                    af:1a:ac:3d:55:82:11:14:79:8b:b4:a6:f4:f3:2e:
                    3b:71:e9:44:64:b0:7d:ed:1b:c6:57:fd:8b:42:ce:
                    72:5b:c7:d5:d4:47:4f:4f:43:bd:a2:87:14:2f:71:
                    0e:ba:f8:6c:71:fe:31:6d:a3:25:04:1e:c7:98:a3:
                    15:b3:57:14:5d:e9:d9:15:75:2c:a5:1e:4d:9f:ec:
                    ae:50:23:cb:18:bb:6a:1e:09:ad:f1:06:9c:88:4f:
                    ee:ec:06:f8:fa:cc:d8:0e:13:6b:36:43:1c:f6:de:
                    be:73:b3:cd:1a:8e:eb:13:ab:11:a6:06:b1:df:1b:
                    50:00:e5:45:17:75:22:75:e5:55:73:7b:6c:8f:3b:
                    80:47:ae:06:65:24:6a:02:80:9f:d5:5b:c2:a0:fa:
                    68:85:5a:72:ad:1d:e6:ad:7a:a5:89:3d:71:e2:c2:
                    08:c2:1c:51:f8:f1:47:d8:9d:2c:5f:3e:82:bd:84:
                    86:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:38:F4:4F:F6:1D:33:E8:FB:9B:80:CD:36:EA:85:BE:30:A8:B6:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d01255b9-0ba9-3cc9-82d0-8b8052109c7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.242.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:66:06:96:44:14:b3:3b:71:1f:43:c8:a7:49:c3:f7:c9:dc:
         36:d2:e8:cb:4e:30:a2:c4:8c:bf:c0:06:c0:89:1d:a0:4e:40:
         49:65:a0:28:7c:4c:94:6f:f7:52:12:f8:54:c8:bd:80:cf:50:
         6c:29:2f:d7:36:21:73:f5:e9:42:c8:fd:9a:ca:a2:7c:14:0f:
         9e:11:09:26:19:62:fa:2c:c0:e3:33:1b:fb:46:5f:7c:45:66:
         0a:c0:b1:06:97:e2:1e:51:d3:2e:30:c9:dd:93:c3:7c:cf:f1:
         74:a6:d7:99:a5:a4:36:04:ce:0f:ef:fc:2a:8c:f6:c2:7c:79:
         a8:bc:2b:04:c6:34:14:b1:c8:f1:86:ca:b6:d2:a5:25:dc:d0:
         42:e4:68:e1:9b:43:cb:1f:d0:47:d4:75:a7:b3:8f:2d:e2:29:
         9a:50:16:8b:d1:a6:22:fb:b0:a4:d5:f0:fe:e9:08:52:cf:d0:
         37:b6:3c:94:e3:71:c3:ed:99:22:79:88:e1:d1:00:d6:ec:52:
         a8:1f:26:7d:fe:dc:5b:f5:24:9d:2a:0e:47:c8:a8:6c:25:5d:
         e8:b7:22:1b:dc:60:8e:ad:1a:12:2e:b3:a8:0e:ad:1c:8a:98:
         69:9c:1b:22:8b:42:be:7e:16:28:42:3a:4d:8e:90:cf:41:bf:
         6d:89:e5:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----