Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06507b45-b73b-4208-b43d-b7dc7a6fbfa9/02ea64b7-e335-3ce9-96a6-f7cce1645583.roa
File:                     02ea64b7-e335-3ce9-96a6-f7cce1645583.roa (raw, json)
Hash identifier:          jiv+wYUo8M6kgBQKaH+IhQ5sKQs9+rrzwVvbWcOYMqo=
Subject key identifier:   1F:AC:FB:E3:DD:DE:08:DC:06:1D:86:53:24:FD:6A:32:27:CA:F2:69
Certificate issuer:       /CN=06507b45-b73b-4208-b43d-b7dc7a6fbfa9
Certificate serial:       010D0C9F43285842838DAB9A0B54CEF3B7D6BC40
Authority key identifier: 36:23:A7:B2:74:A1:08:5A:0D:45:20:D5:78:BC:CB:34:88:A8:BB:98
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06507b45-b73b-4208-b43d-b7dc7a6fbfa9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06507b45-b73b-4208-b43d-b7dc7a6fbfa9/02ea64b7-e335-3ce9-96a6-f7cce1645583.roa
Signing time:             Tue 11 Jul 2023 18:21:36 +0000
ROA not before:           Tue 11 Jul 2023 18:21:36 +0000
ROA not after:            Mon 09 Oct 2023 18:21:36 +0000
asID:                     399471
IP address blocks:        206.168.88.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:83:8d:ab:9a:0b:54:ce:f3:b7:d6:bc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06507b45-b73b-4208-b43d-b7dc7a6fbfa9
        Validity
            Not Before: Jul 11 18:21:36 2023 GMT
            Not After : Oct  9 18:21:36 2023 GMT
        Subject: CN=3af41e1e-ac64-4e94-ac01-8125754b55cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:2c:fd:b9:d4:bb:c0:88:fb:df:04:c5:b9:a6:
                    a5:77:14:85:04:08:1e:b0:cd:b2:90:5f:ec:35:e2:
                    c6:08:76:63:de:e9:a6:83:9b:95:7e:ee:87:7f:20:
                    0a:eb:2a:47:cc:2b:01:d1:7e:6b:b9:59:39:6a:ee:
                    b8:67:c8:97:43:c8:08:a7:12:32:1d:54:c4:c3:f2:
                    a9:6d:ff:24:f2:dc:ee:53:3d:17:82:46:bc:37:c3:
                    c6:ef:ba:82:c6:b6:67:93:1f:55:41:77:a5:d0:33:
                    3d:6e:ad:52:34:e4:66:d2:5a:2a:4d:6e:e9:a7:3a:
                    a6:34:47:e8:37:cb:f8:0e:7a:73:16:e1:13:19:9e:
                    24:53:a0:15:6f:da:b3:03:15:04:87:48:05:49:b2:
                    0c:d4:f6:42:12:cd:71:29:a4:d1:29:26:24:6f:6b:
                    40:18:c4:c9:b4:bf:29:da:3a:24:ee:53:06:b1:c0:
                    a1:d1:f3:56:c0:f8:c3:17:4a:cc:88:27:a2:15:90:
                    54:08:47:1e:67:8e:4e:55:6f:50:59:b0:85:d9:db:
                    74:18:0e:8d:d6:e6:ad:28:a1:15:05:8e:04:92:61:
                    1b:a1:61:68:fb:4d:1e:0f:66:bb:5d:8e:b7:2b:ef:
                    77:b3:ec:0c:c0:ed:06:d1:e6:ca:39:e0:ac:17:fc:
                    79:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:AC:FB:E3:DD:DE:08:DC:06:1D:86:53:24:FD:6A:32:27:CA:F2:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06507b45-b73b-4208-b43d-b7dc7a6fbfa9/02ea64b7-e335-3ce9-96a6-f7cce1645583.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06507b45-b73b-4208-b43d-b7dc7a6fbfa9/06507b45-b73b-4208-b43d-b7dc7a6fbfa9.crl

            X509v3 Authority Key Identifier:
                keyid:36:23:A7:B2:74:A1:08:5A:0D:45:20:D5:78:BC:CB:34:88:A8:BB:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06507b45-b73b-4208-b43d-b7dc7a6fbfa9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.168.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:02:45:90:d6:ef:9b:ec:b9:77:d0:47:88:04:23:b2:ff:d8:
         c0:7f:2f:cf:af:57:90:23:a1:2b:cc:62:a0:d7:5f:56:f6:02:
         27:7d:d1:cd:85:f3:4c:91:c2:08:20:e5:f0:58:9f:d6:f3:2a:
         62:6e:56:4b:da:7b:0e:25:81:d5:54:0d:9a:97:d8:fb:23:42:
         05:b0:ba:49:50:68:c2:df:10:e8:0b:2d:a3:b3:d3:76:fc:69:
         60:3e:b5:bf:dd:8f:ee:7c:7c:cf:7d:ef:f2:fa:36:09:06:f3:
         01:f0:24:77:00:c4:b3:5d:ce:64:52:b9:33:0b:df:71:59:5f:
         42:a1:69:f4:e2:dd:60:5f:2e:65:86:63:60:e7:b1:18:1b:14:
         5e:a7:09:c2:3c:1d:83:c9:ac:84:ae:e0:d5:31:5f:2a:d6:70:
         5a:42:99:74:c7:39:d3:04:9d:3c:25:35:bb:cd:64:f0:53:10:
         1e:77:e1:82:da:94:cf:6f:ae:ac:ae:a8:2b:42:5c:4e:42:72:
         29:f6:53:cd:29:b2:c1:c9:7f:1c:7c:11:6d:cb:e7:7b:ec:1e:
         17:0a:c7:cc:c2:4f:0f:24:2f:79:51:f6:fd:d9:e4:39:0c:07:
         96:7e:d6:c7:2a:e8:e8:c4:c1:b3:42:76:38:f2:5c:db:7d:d6:
         a2:5d:94:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----