Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f1474790-f371-3198-81df-10f4a9c9ad81.roa
File:                     f1474790-f371-3198-81df-10f4a9c9ad81.roa (raw, json)
Hash identifier:          MOIWFpwNIGeYa7tX0GYfkJyeuraeqIrVfo6vylsi2uI=
Subject key identifier:   B5:53:3D:6E:C8:14:EE:DC:92:2D:7D:37:52:EC:FA:86:91:6C:41:19
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328576D51CC73C042CFC167622A1EB2
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f1474790-f371-3198-81df-10f4a9c9ad81.roa
Signing time:             Fri 30 Nov 2018 01:09:46 +0000
ROA not before:           Thu 29 Nov 2018 05:00:00 +0000
ROA not after:            Sat 27 Nov 2027 05:00:00 +0000
asID:                     13335
IP address blocks:        172.68.44.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Mon 16 Sep 2024 09:27:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:62:2a:1e:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Nov 29 05:00:00 2018 GMT
            Not After : Nov 27 05:00:00 2027 GMT
        Subject: CN=9c2bc32d-a178-49a5-b166-2848811f7ee5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:71:86:a9:24:43:e0:f3:56:22:0e:59:e3:2a:
                    ba:fe:24:98:fb:6b:ac:35:d9:ce:5c:f2:00:1a:bc:
                    2d:0f:69:f7:91:1c:7b:42:d8:f4:4b:1c:da:3d:5d:
                    4d:c7:31:44:6f:db:c9:99:55:75:b8:75:f4:fe:1a:
                    9c:de:b0:ef:89:9a:26:c7:07:55:9f:25:c5:9c:fc:
                    12:1f:23:30:08:58:2c:4c:51:98:e5:33:c6:4a:c2:
                    04:8a:4d:59:6e:f6:93:83:bf:1c:81:9e:b0:c3:b4:
                    20:de:a3:18:77:b6:e0:41:7c:b3:00:69:4f:09:7b:
                    e6:f2:29:32:64:a2:ee:cc:4b:55:c4:c9:69:f4:02:
                    4a:58:c7:0b:32:f8:e2:a3:2e:7e:27:80:13:4c:6c:
                    c7:9c:b7:90:57:dc:27:3e:09:8c:3f:17:e9:77:b7:
                    c6:9b:bf:98:20:4a:e8:87:a2:23:c2:de:76:b7:d0:
                    8d:43:11:f4:68:33:0e:54:dd:1d:d8:f7:d1:82:fb:
                    fc:49:36:3e:a2:e7:db:1e:bb:b7:6d:e1:b0:d7:c0:
                    bd:3f:35:21:ef:de:b9:41:be:0d:1c:3e:14:da:9e:
                    ad:ff:18:4d:37:80:69:46:ce:05:55:d1:89:ac:3a:
                    57:40:12:03:38:4e:2a:0c:8a:8e:2a:5b:96:fb:b8:
                    2a:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:53:3D:6E:C8:14:EE:DC:92:2D:7D:37:52:EC:FA:86:91:6C:41:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/f1474790-f371-3198-81df-10f4a9c9ad81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.68.44.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:03:44:b9:cc:7d:be:bb:ae:c5:07:de:c8:7f:6c:b6:3b:49:
         8d:92:8d:10:eb:d2:49:04:93:aa:47:c3:0e:66:ef:98:f2:d5:
         96:9c:bd:b8:a2:41:32:ac:3a:df:47:06:49:90:89:e1:62:83:
         9f:0d:be:fb:72:3b:c0:18:f6:c0:c0:3a:03:43:f3:89:f1:89:
         7e:cd:71:4f:c1:63:73:ee:ac:79:ad:85:32:76:41:39:77:09:
         e9:a1:75:1a:71:7f:8d:f0:50:04:e0:23:82:22:87:16:0d:d7:
         4f:5a:90:35:1d:48:69:28:1b:31:e4:9e:e1:58:42:5d:c5:68:
         e5:67:da:7f:f3:b0:b7:78:ec:91:e0:29:1e:fa:a4:32:3f:81:
         86:20:f0:1e:ff:31:61:27:27:d1:84:b1:ad:1f:b0:d0:1c:27:
         64:44:67:3a:fa:40:80:07:9e:3a:ba:8b:e6:9f:1f:94:86:91:
         7b:25:67:c0:c4:e9:8d:54:60:56:a5:61:86:47:f3:25:cb:71:
         83:c3:2f:37:61:84:10:0e:34:32:57:3a:f8:be:a2:6e:bf:b1:
         a0:9d:39:34:b9:28:2a:60:ae:2d:5d:fc:47:f1:98:18:5c:f2:
         bd:9e:25:cd:0b:5b:e3:83:a4:1d:f8:be:25:7c:d9:30:5d:7a:
         b5:15:25:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----