Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06507b45-b73b-4208-b43d-b7dc7a6fbfa9/d9cad08b-f938-32b0-ae27-f8e98a4bf3c0.roa
File:                     d9cad08b-f938-32b0-ae27-f8e98a4bf3c0.roa (raw, json)
Hash identifier:          7yY5L5hXPJuDh+G42YskAcGcyaJZtaULjwr+5bpaYV4=
Subject key identifier:   73:02:0A:B9:EB:23:F2:1E:D5:4C:D7:DC:6A:99:90:B9:42:ED:75:05
Certificate issuer:       /CN=06507b45-b73b-4208-b43d-b7dc7a6fbfa9
Certificate serial:       010D0C9F432858429178E6BEA694EBD1EC2BF200
Authority key identifier: 36:23:A7:B2:74:A1:08:5A:0D:45:20:D5:78:BC:CB:34:88:A8:BB:98
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06507b45-b73b-4208-b43d-b7dc7a6fbfa9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06507b45-b73b-4208-b43d-b7dc7a6fbfa9/d9cad08b-f938-32b0-ae27-f8e98a4bf3c0.roa
Signing time:             Sun 16 Jul 2023 18:01:04 +0000
ROA not before:           Sun 16 Jul 2023 18:01:04 +0000
ROA not after:            Sat 14 Oct 2023 18:01:04 +0000
asID:                     198802
IP address blocks:        206.168.89.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:91:78:e6:be:a6:94:eb:d1:ec:2b:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06507b45-b73b-4208-b43d-b7dc7a6fbfa9
        Validity
            Not Before: Jul 16 18:01:04 2023 GMT
            Not After : Oct 14 18:01:04 2023 GMT
        Subject: CN=485d95e9-1e17-44dc-8e42-122cfbc4f105
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:22:63:b6:89:87:36:58:c5:74:ad:5b:21:91:
                    de:b7:dd:88:5b:17:fd:e1:e5:31:e3:98:7e:d0:80:
                    61:cb:a1:43:0d:0c:eb:7b:2f:e4:c8:fb:f8:4e:95:
                    32:52:f5:6c:25:a2:69:50:e8:f1:b3:3a:3b:90:0b:
                    f4:b3:a3:d6:44:12:f1:b1:de:60:4f:04:b8:10:ee:
                    0c:18:07:09:ad:28:07:77:50:ed:9e:cb:00:84:c3:
                    ec:33:5b:cd:08:e7:9e:e7:b4:1b:5c:d4:f0:a9:88:
                    b1:47:cc:08:7b:06:e0:cc:8f:be:aa:c6:fc:94:22:
                    3d:8c:fc:6c:74:7e:87:75:d6:f3:c4:f6:b5:6c:87:
                    c1:d7:61:e9:8a:52:b3:29:4a:12:f7:1c:91:6c:ec:
                    f9:28:0a:07:a1:78:73:eb:0a:8b:26:0d:32:be:54:
                    44:13:cc:38:bb:3e:d4:aa:b1:fb:b3:3d:74:71:30:
                    1b:97:3d:fc:eb:46:e5:d2:e9:37:c3:ea:4f:e0:8f:
                    86:23:68:76:e5:d2:1e:e7:39:29:5d:1c:01:98:b9:
                    98:72:d1:0a:06:f4:36:d2:d7:ee:2e:0a:b0:b9:0e:
                    c5:83:de:e5:18:5f:23:1a:cc:48:7a:9c:c0:2c:f8:
                    1d:31:15:58:e8:82:90:ea:ef:ea:f6:c4:1d:82:1a:
                    22:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:02:0A:B9:EB:23:F2:1E:D5:4C:D7:DC:6A:99:90:B9:42:ED:75:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06507b45-b73b-4208-b43d-b7dc7a6fbfa9/d9cad08b-f938-32b0-ae27-f8e98a4bf3c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06507b45-b73b-4208-b43d-b7dc7a6fbfa9/06507b45-b73b-4208-b43d-b7dc7a6fbfa9.crl

            X509v3 Authority Key Identifier:
                keyid:36:23:A7:B2:74:A1:08:5A:0D:45:20:D5:78:BC:CB:34:88:A8:BB:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06507b45-b73b-4208-b43d-b7dc7a6fbfa9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.168.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:5d:cd:16:4b:8c:33:8b:bb:ee:97:d0:05:91:88:cd:e8:52:
         fb:5a:84:08:fe:66:9a:ce:b4:63:ef:6c:93:d4:23:d3:8d:98:
         6e:bf:88:a5:c3:e2:81:d2:5a:e3:8b:4b:a5:c0:e5:58:ac:d3:
         7b:01:0f:d8:eb:dc:90:80:e0:11:c7:18:fc:a3:a5:67:6b:06:
         68:12:c3:94:01:41:3c:00:20:0e:52:25:5c:37:b9:16:8e:98:
         e2:6a:5d:8b:b9:3f:ac:ff:c4:0f:b3:b6:75:fa:ee:b5:62:44:
         f9:fe:72:dc:b0:02:e2:32:24:6f:f2:c0:a7:cf:f7:0a:6e:1b:
         83:a2:52:5c:17:f9:e6:13:f9:4d:0b:55:e1:b0:61:b1:76:ed:
         bf:37:1e:76:60:d3:6f:c9:37:19:f6:f7:6c:d7:e4:5f:1d:df:
         05:3a:24:47:72:0e:3c:4b:99:01:3a:bf:82:b3:f0:c0:61:ac:
         8f:bf:5e:58:57:d5:f1:2f:ee:31:a5:0c:14:84:33:7f:69:45:
         be:4a:18:97:ad:4c:e3:3a:8b:85:cf:03:31:c6:da:00:cf:0e:
         0f:47:b4:65:2d:42:92:95:8a:37:b1:09:0f:a2:4d:58:13:19:
         c6:fd:97:35:3a:a5:2c:6b:a9:55:77:73:65:c4:34:7e:f6:65:
         66:c4:fd:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----