Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/55bf3e52-332a-4f98-b430-2ed284592ddb/7bb55923-7652-3556-a1d8-11de8227019d.roa
File:                     7bb55923-7652-3556-a1d8-11de8227019d.roa (raw, json)
Hash identifier:          FJjDJCK6J7m2mKm61n+DCiun0eXd7I5rDEyhiMTFB04=
Subject key identifier:   06:7D:0D:B1:F3:16:3E:77:C7:BD:3A:C9:7F:9A:72:0C:60:F7:AC:49
Certificate issuer:       /CN=55bf3e52-332a-4f98-b430-2ed284592ddb
Certificate serial:       010D0C9F4328583E42E92CBA17992E6B344B9D80
Authority key identifier: 99:52:D0:F3:A7:E2:81:A5:6F:83:82:AE:32:F2:09:0A:7B:65:15:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/55bf3e52-332a-4f98-b430-2ed284592ddb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/55bf3e52-332a-4f98-b430-2ed284592ddb/7bb55923-7652-3556-a1d8-11de8227019d.roa
Signing time:             Thu 06 Jan 2022 15:53:48 +0000
ROA not before:           Thu 06 Jan 2022 15:53:48 +0000
ROA not after:            Wed 18 Sep 2024 04:00:00 +0000
asID:                     1239
IP address blocks:        192.41.102.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 04 Nov 2022 01:08:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:42:e9:2c:ba:17:99:2e:6b:34:4b:9d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55bf3e52-332a-4f98-b430-2ed284592ddb
        Validity
            Not Before: Jan  6 15:53:48 2022 GMT
            Not After : Sep 18 04:00:00 2024 GMT
        Subject: CN=0d57253a-1903-4cb2-8656-04edde8c3aab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:5c:9d:a9:56:cd:ea:87:94:61:7b:43:d2:cc:
                    16:9f:3c:9e:4c:17:e8:e3:4b:23:12:95:73:f7:c9:
                    a7:ea:56:3e:37:38:33:ff:ee:0e:52:87:52:1e:94:
                    11:2f:79:c0:b5:89:c4:6a:a0:b4:83:3b:77:ba:2f:
                    98:12:73:d1:4e:b8:66:8d:4d:c8:fa:f4:05:31:5f:
                    8a:68:22:31:5e:dc:d6:b1:cd:0e:c5:fb:46:34:68:
                    16:5b:20:cd:fd:8a:c2:da:b5:f1:6f:9f:30:cf:39:
                    dd:3b:76:49:92:07:a8:b8:64:0f:77:ba:7b:ac:db:
                    b5:1c:ef:6f:18:c7:e7:eb:3a:ef:3f:5f:cc:ba:56:
                    07:82:94:7f:6e:db:13:4c:4f:45:a1:92:2b:7e:f5:
                    10:1b:1e:cb:f0:5a:d3:7f:1c:de:23:65:aa:3c:b7:
                    ff:4f:7f:78:dc:af:f8:65:78:e8:c4:50:c4:b0:56:
                    ca:0d:ac:25:d7:f4:dc:e5:9e:34:a4:66:99:0d:79:
                    92:14:02:3b:14:d9:f8:84:3e:2d:94:d7:83:93:8e:
                    b0:89:91:02:c1:47:dc:c2:27:a1:41:9a:e8:b9:6c:
                    09:6c:8d:a4:08:94:82:b4:b1:66:73:d9:0e:91:4e:
                    6b:c6:07:98:65:a7:8f:9f:c7:3b:9e:6e:cb:eb:97:
                    8f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:7D:0D:B1:F3:16:3E:77:C7:BD:3A:C9:7F:9A:72:0C:60:F7:AC:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/55bf3e52-332a-4f98-b430-2ed284592ddb/7bb55923-7652-3556-a1d8-11de8227019d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/55bf3e52-332a-4f98-b430-2ed284592ddb/55bf3e52-332a-4f98-b430-2ed284592ddb.crl

            X509v3 Authority Key Identifier:
                keyid:99:52:D0:F3:A7:E2:81:A5:6F:83:82:AE:32:F2:09:0A:7B:65:15:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/55bf3e52-332a-4f98-b430-2ed284592ddb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.41.102.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:82:a3:ab:56:5b:e2:26:25:ca:7d:56:fb:45:7b:7c:24:97:
         28:a8:65:e0:a5:8d:5b:6c:29:92:dc:b0:75:f6:87:9e:39:25:
         d0:66:1f:42:bf:9e:5a:57:7f:16:49:ed:5f:33:7b:c2:6f:a3:
         23:e7:fa:e6:cb:6d:29:7a:1b:1f:fc:97:0d:50:a9:9f:e2:19:
         54:1d:b9:8d:ef:93:59:b0:1b:8c:7d:cf:e7:58:98:f2:09:28:
         92:d9:cc:e4:39:c1:b6:10:4e:28:0a:ca:4d:e9:90:7f:2e:c8:
         e5:44:97:1b:f6:ce:e7:c2:81:6f:9f:23:4e:7b:f8:ab:b0:3d:
         f7:a0:47:58:de:76:a6:e8:ff:e6:4a:7d:ed:9b:2f:c2:00:d3:
         c6:29:1c:a3:27:67:88:6a:03:5f:59:23:14:5f:f8:83:68:b8:
         d3:96:d3:b0:5b:29:57:3d:97:f9:82:bb:b3:42:78:73:1c:4b:
         c6:80:1a:60:ec:f5:41:31:b6:64:b6:52:a4:33:be:57:22:4e:
         35:0a:69:c4:ee:99:c5:ad:f9:0b:b4:82:db:ed:29:21:90:24:
         5c:f7:3c:f8:56:31:94:a9:1a:53:fb:35:82:8b:ac:4c:43:75:
         c2:62:0b:ec:90:e9:f9:16:a7:96:82:aa:20:f4:17:59:27:52:
         8f:c5:32:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----