Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e0c4e238-03b2-3744-88ef-e394da1f4a6e.roa
File:                     e0c4e238-03b2-3744-88ef-e394da1f4a6e.roa (raw, json)
Hash identifier:          Z0NE/6+fwDSIuxsq7N9WuaQnDWhimpIyvYMJFQRb7lY=
Subject key identifier:   A3:0C:9F:8F:E8:83:D0:89:97:51:0A:DD:42:14:53:B7:D1:CD:75:CD
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328583D00469C09A8CE35CA21C5B020
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e0c4e238-03b2-3744-88ef-e394da1f4a6e.roa
Signing time:             Thu 09 Sep 2021 04:00:00 +0000
ROA not before:           Thu 09 Sep 2021 04:00:00 +0000
ROA not after:            Sun 26 May 2024 04:00:00 +0000
asID:                     51430
IP address blocks:        206.123.135.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:00:46:9c:09:a8:ce:35:ca:21:c5:b0:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Sep  9 04:00:00 2021 GMT
            Not After : May 26 04:00:00 2024 GMT
        Subject: CN=6a8eefcb-a1d3-48a8-b1ec-1dbb6f036e38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:9c:22:9f:b1:50:44:74:b9:a4:a4:dc:54:6f:
                    d7:04:b7:35:39:ed:6e:a6:49:b8:f0:31:1e:f8:e3:
                    8b:6c:6b:17:ea:d5:ea:3e:ce:21:e4:8d:72:9d:a8:
                    1f:d2:a4:2d:bd:74:c6:f8:38:f0:8b:b1:ac:f9:b5:
                    a1:ab:59:5b:e7:2c:7d:b9:41:ff:39:c6:02:30:dc:
                    aa:c1:5d:65:f0:e0:d2:b6:94:1d:63:1f:76:4b:3e:
                    28:32:d1:a5:79:1a:32:07:e1:08:0d:c6:b5:ba:54:
                    3d:d8:da:11:ac:c6:0d:13:e7:0c:47:b8:fc:6f:ec:
                    f8:ee:89:ab:6d:be:0b:eb:e7:74:91:49:a6:b8:96:
                    dc:10:12:a0:31:49:89:d3:8d:f8:65:48:03:6c:52:
                    97:81:1d:0a:19:1b:79:67:f7:58:95:3d:f3:53:da:
                    bd:8b:d8:3c:57:1a:95:a2:0e:4b:f5:59:6b:b1:6e:
                    73:b8:b8:c0:3e:cd:1e:02:0a:a7:da:29:ba:86:88:
                    bb:c8:97:97:15:28:2b:e3:3c:b6:61:fe:45:fb:46:
                    9b:82:7e:34:d2:8c:dc:55:e6:f6:e9:01:30:47:6c:
                    48:c4:2f:99:aa:15:6b:12:4a:b4:c5:73:c1:8e:a8:
                    5b:b6:f3:b9:6a:4b:37:7a:04:03:26:28:ee:e9:dc:
                    0b:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:0C:9F:8F:E8:83:D0:89:97:51:0A:DD:42:14:53:B7:D1:CD:75:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e0c4e238-03b2-3744-88ef-e394da1f4a6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.123.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:99:9e:82:37:2c:b9:43:48:d5:e5:7c:15:65:6a:b2:db:c9:
         27:64:45:aa:ba:b3:58:9b:5a:d2:60:40:67:be:24:42:40:f8:
         30:48:3b:15:6d:1a:c6:b0:5f:3e:aa:e9:7a:1c:95:2b:2d:8b:
         b4:af:b4:47:fc:b3:2c:cf:82:c3:cc:6f:d0:94:cb:55:19:3f:
         45:7f:c2:98:69:e3:c1:32:a0:5f:9a:d1:62:0c:5e:7c:bd:96:
         27:3b:86:66:61:2a:61:f0:6f:c5:4b:5e:00:44:54:c0:ba:e1:
         39:86:e8:0f:e2:01:ed:a7:84:e2:09:f8:1f:25:a0:a6:5a:cb:
         0b:03:a5:cd:41:9f:67:50:1c:38:3b:77:47:7a:3d:ee:05:46:
         cf:02:0b:6e:26:d9:cf:b9:1e:7e:b7:15:5c:d1:46:76:d9:1f:
         ce:1d:97:2b:5a:3b:9f:1c:06:ed:10:dc:0f:3e:39:0c:39:2a:
         83:91:40:b2:0f:f1:7f:c7:59:2a:19:48:eb:1d:04:c5:f6:33:
         00:ca:c4:6d:8e:32:20:ae:20:b3:aa:fb:c8:57:70:2f:3e:c6:
         03:98:e1:4c:b1:f4:c5:4d:91:dd:3c:c3:6e:d5:cd:20:c6:53:
         0e:c3:b4:de:02:42:57:d9:89:da:5b:ad:3d:f2:bb:67:ec:7e:
         bb:d3:2b:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----