Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06507b45-b73b-4208-b43d-b7dc7a6fbfa9/b2d4581d-fdd8-3386-a089-170928d8d303.roa
File:                     b2d4581d-fdd8-3386-a089-170928d8d303.roa (raw, json)
Hash identifier:          OZ7EIZqxPHit6hy2ncwc/jTKEnb+X865jmaGyDXW6BI=
Subject key identifier:   DC:F5:FE:DC:E3:97:18:7D:30:DA:D0:EE:82:CE:D3:69:98:C9:EF:AB
Certificate issuer:       /CN=06507b45-b73b-4208-b43d-b7dc7a6fbfa9
Certificate serial:       010D0C9F432858439B6AD59A4EB7EB32A0AB3800
Authority key identifier: 36:23:A7:B2:74:A1:08:5A:0D:45:20:D5:78:BC:CB:34:88:A8:BB:98
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06507b45-b73b-4208-b43d-b7dc7a6fbfa9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06507b45-b73b-4208-b43d-b7dc7a6fbfa9/b2d4581d-fdd8-3386-a089-170928d8d303.roa
Signing time:             Fri 20 Oct 2023 00:17:45 +0000
ROA not before:           Fri 20 Oct 2023 00:17:45 +0000
ROA not after:            Thu 18 Jan 2024 01:17:45 +0000
asID:                     203963
IP address blocks:        192.67.160.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:9b:6a:d5:9a:4e:b7:eb:32:a0:ab:38:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06507b45-b73b-4208-b43d-b7dc7a6fbfa9
        Validity
            Not Before: Oct 20 00:17:45 2023 GMT
            Not After : Jan 18 01:17:45 2024 GMT
        Subject: CN=80d81b5d-4a82-461e-a5be-ad2abdcc7769
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:06:64:65:51:9d:38:39:8b:7a:30:5e:42:33:
                    cc:1b:36:b8:ed:42:aa:e1:fe:16:82:70:83:3c:88:
                    23:9c:da:e5:47:c1:55:7c:5a:18:1b:71:a8:ec:b4:
                    f9:73:ab:9c:b8:05:df:03:52:9c:61:e0:d2:ec:4c:
                    51:08:03:90:2c:b9:f3:56:59:76:34:4a:da:14:85:
                    1e:d7:5c:ee:99:e5:50:30:f6:7a:57:0d:08:2a:51:
                    6d:5d:ad:7c:cf:d8:a6:4f:6b:fa:0e:37:fe:1a:e3:
                    8b:fe:47:a9:51:5b:f3:32:c2:47:1e:52:90:df:5d:
                    87:26:23:6a:3b:29:94:ff:20:30:e8:32:ea:6b:b8:
                    c5:32:66:58:b2:8d:bf:6b:24:4f:b1:c0:67:7e:01:
                    5e:60:0c:91:57:bb:94:a6:dd:4e:04:db:4c:e5:80:
                    c8:fb:b2:84:eb:2c:7c:be:33:91:b7:4a:26:31:cf:
                    83:f0:09:f1:41:ac:d6:4d:2e:e6:4f:3f:80:51:9f:
                    d8:68:34:51:92:1c:ac:06:d1:80:b1:9e:b9:f6:a7:
                    af:6c:f2:63:44:78:e5:bf:a9:1c:95:db:1a:ac:5f:
                    b3:9f:f6:26:a2:73:b3:bb:e8:7c:09:04:08:b4:4e:
                    45:20:4a:7e:fe:3e:72:bf:41:59:b8:c3:18:ba:88:
                    3d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:F5:FE:DC:E3:97:18:7D:30:DA:D0:EE:82:CE:D3:69:98:C9:EF:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06507b45-b73b-4208-b43d-b7dc7a6fbfa9/b2d4581d-fdd8-3386-a089-170928d8d303.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06507b45-b73b-4208-b43d-b7dc7a6fbfa9/06507b45-b73b-4208-b43d-b7dc7a6fbfa9.crl

            X509v3 Authority Key Identifier:
                keyid:36:23:A7:B2:74:A1:08:5A:0D:45:20:D5:78:BC:CB:34:88:A8:BB:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06507b45-b73b-4208-b43d-b7dc7a6fbfa9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.67.160.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:ef:39:58:36:f1:d7:1b:23:7f:fd:ed:91:8a:86:2e:b6:25:
         9e:7c:43:3f:5d:c8:86:d5:2f:d5:3d:be:52:de:fb:21:3d:df:
         1a:15:c7:a1:e4:c9:b8:ea:cb:72:75:68:da:2c:7e:88:a4:32:
         87:ea:dc:28:1e:89:50:c1:ea:66:e4:10:ea:fe:e2:b6:f2:8b:
         71:94:13:c8:e4:7d:c7:8d:91:c3:0e:68:b6:11:5e:5a:e0:0c:
         ed:12:2d:10:c7:c2:71:5a:e7:2d:f5:c4:42:6b:82:db:07:ef:
         1b:92:3f:0a:75:d1:ae:ae:b0:3d:80:9a:4a:1e:97:da:9c:59:
         c5:a4:0f:b1:54:74:44:db:56:99:19:e2:e8:35:d5:de:db:f1:
         ea:8a:dd:d3:71:e9:48:7e:fb:f5:51:ff:28:f4:81:60:77:ef:
         cd:2b:7e:32:39:42:a6:15:fe:26:40:7b:1e:1c:9a:b1:df:da:
         40:d1:33:d3:66:3c:53:8e:af:9e:12:13:61:67:48:5f:56:12:
         07:6f:22:16:0e:83:e2:d3:6a:6e:02:fa:fc:92:3a:c7:4c:d6:
         45:f1:fd:e2:0f:e2:5b:df:44:70:73:64:05:ff:bc:54:9b:34:
         0f:d8:84:f3:c0:44:26:e5:fa:6e:56:73:4b:c9:52:db:ad:7a:
         ea:86:08:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----