Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/46f1e7e5-632a-3fcc-8505-a52ac451d70c.roa
File:                     46f1e7e5-632a-3fcc-8505-a52ac451d70c.roa (raw, json)
Hash identifier:          gxn+M1Dp2OwbNcgsiDeaN6DmUS8fLl8T2bwilo5JeZo=
Subject key identifier:   F0:45:93:73:7C:A9:6C:40:3E:72:66:51:01:98:15:F5:3D:5E:3D:E7
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328583D551BB48B22623DB2FCB63085
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/46f1e7e5-632a-3fcc-8505-a52ac451d70c.roa
Signing time:             Wed 23 Mar 2022 04:00:00 +0000
ROA not before:           Wed 23 Mar 2022 04:00:00 +0000
ROA not after:            Wed 15 Mar 2028 04:00:00 +0000
asID:                     54142
IP address blocks:        98.16.120.0/22 maxlen: 24
Validation:               Failed, certificate revoked on Fri 05 Jan 2024 06:30:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:55:1b:b4:8b:22:62:3d:b2:fc:b6:30:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 23 04:00:00 2022 GMT
            Not After : Mar 15 04:00:00 2028 GMT
        Subject: CN=18b2544a-a00d-4cc2-a493-0f9e3175b883
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:5b:48:13:d5:fa:95:93:7b:19:e2:4c:42:54:
                    b9:b4:8e:7e:26:65:8c:e0:36:54:00:a9:5c:b8:1e:
                    cf:25:bc:80:42:19:a3:52:e3:f7:99:af:97:d1:0c:
                    be:86:60:6f:ff:16:91:7b:ff:e0:1e:6e:83:6c:39:
                    06:a3:e8:60:9c:c1:d4:e0:84:39:9c:18:f6:88:0a:
                    96:a4:90:b0:35:06:41:aa:44:98:86:dd:0a:dc:70:
                    de:ec:c3:46:87:c4:9e:0b:14:a2:a7:df:3c:21:5c:
                    b7:74:7c:ef:46:74:af:70:91:a7:8c:85:f3:0e:44:
                    57:b3:d7:b4:6d:75:b2:cd:41:23:9b:23:5a:e4:d4:
                    b8:6e:f9:0c:f1:d3:28:4a:c7:ae:f7:37:6c:8c:c1:
                    e2:10:ab:eb:bd:36:c7:90:92:65:75:21:69:b1:b9:
                    9d:8f:41:54:a5:6e:34:05:81:72:d2:a8:da:ec:5c:
                    f8:eb:1d:4f:8c:a2:c3:c6:c2:c8:34:76:b8:0e:56:
                    9d:f2:69:af:a2:27:bf:6e:b9:8c:3c:ef:e5:23:da:
                    0b:95:d3:a3:64:45:79:7f:13:79:30:36:dd:95:ec:
                    d2:78:f3:4a:e9:cb:f7:76:56:39:e6:bf:41:87:c8:
                    b3:54:7a:ae:e1:a8:53:48:72:eb:b6:bc:93:b8:7f:
                    d6:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:45:93:73:7C:A9:6C:40:3E:72:66:51:01:98:15:F5:3D:5E:3D:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/46f1e7e5-632a-3fcc-8505-a52ac451d70c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.16.120.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:d6:a6:6f:18:39:5b:cd:e7:cd:a0:33:68:c8:64:3b:b5:02:
         a8:da:b9:86:27:ad:48:e0:34:b8:8b:84:17:39:a7:78:32:d3:
         29:0e:fc:91:f5:ae:c0:9c:58:5a:cb:a1:e4:90:ea:32:86:29:
         2a:3a:f2:5c:95:7a:c3:11:cb:57:f2:c0:c5:af:55:87:5c:e1:
         90:fa:17:07:5b:b0:65:3e:1a:26:65:52:99:e8:67:ba:2b:e7:
         2d:13:ab:c5:87:08:e6:6f:c1:ae:05:93:eb:b3:20:81:22:a4:
         12:eb:02:67:42:1e:a3:f4:52:43:41:e1:f4:a5:42:98:9e:b1:
         5f:2f:11:23:d1:86:9d:58:de:b5:c1:e6:76:61:52:89:44:b1:
         21:02:fe:bd:45:66:db:40:62:dd:fc:78:7c:4f:8d:ae:a8:dd:
         f2:58:97:ac:f4:c5:ee:9c:70:f1:71:dc:b5:71:6a:45:56:36:
         3e:41:f4:16:8f:3d:97:93:bf:65:7e:01:e3:93:0d:92:9e:ef:
         f5:e7:09:33:eb:01:f5:9c:46:73:8e:26:f2:47:1c:c7:fe:c9:
         ae:f6:c8:6a:b3:1b:eb:d4:2e:48:7d:31:7d:bd:55:2b:cb:6b:
         30:81:0a:18:47:b7:20:1d:03:3f:cb:3c:c3:b8:d3:63:da:86:
         0e:04:a4:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----