Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/822f9974-af88-4d0b-a65f-065fdd26c645/965991e9-204b-39b5-ac18-27bb3feff644.roa
File:                     965991e9-204b-39b5-ac18-27bb3feff644.roa (raw, json)
Hash identifier:          tCPPtmyopwwvVKPJqVpAD/bqMjwd1PVJxMFSt1h++fo=
Subject key identifier:   E4:47:64:84:12:01:F4:61:38:FA:69:88:9B:74:D5:06:24:DC:07:F0
Certificate issuer:       /CN=822f9974-af88-4d0b-a65f-065fdd26c645
Certificate serial:       010D0C9F4328583FBD8A4480D5AD2DE7619EB300
Authority key identifier: 3C:FD:AA:02:90:05:D1:73:A5:12:3B:E6:2C:2B:A0:C9:51:C9:26:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/822f9974-af88-4d0b-a65f-065fdd26c645.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/822f9974-af88-4d0b-a65f-065fdd26c645/965991e9-204b-39b5-ac18-27bb3feff644.roa
Signing time:             Fri 08 Oct 2021 16:33:04 +0000
ROA not before:           Fri 08 Oct 2021 16:33:04 +0000
ROA not after:            Sat 01 Feb 2025 05:00:00 +0000
asID:                     197890
IP address blocks:        23.247.244.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:bd:8a:44:80:d5:ad:2d:e7:61:9e:b3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=822f9974-af88-4d0b-a65f-065fdd26c645
        Validity
            Not Before: Oct  8 16:33:04 2021 GMT
            Not After : Feb  1 05:00:00 2025 GMT
        Subject: CN=3740c604-3700-4dd9-9174-c29a127987d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:12:69:05:40:b8:e8:2d:58:a5:c2:47:0c:62:
                    ca:b1:52:08:bb:45:ec:a0:99:f1:54:15:ab:00:4d:
                    bf:20:18:1b:6d:20:47:36:d1:90:87:64:46:f6:b5:
                    51:fc:f5:a6:c8:87:13:2e:d4:35:2f:73:f6:84:ea:
                    05:45:f9:7f:51:55:7e:32:da:fa:ce:92:d0:60:42:
                    71:23:3c:16:f3:13:06:0c:90:43:2a:ce:f0:db:98:
                    18:9f:be:5b:15:3f:89:4c:dc:a6:dc:2d:4e:f1:41:
                    dd:c7:83:41:32:eb:db:d0:93:9f:b2:e0:62:b0:30:
                    07:a1:6c:5b:f8:36:d7:e7:02:47:6b:a7:d7:82:93:
                    43:ac:22:75:f8:27:92:aa:3a:cb:a2:05:3b:c8:63:
                    07:1f:10:b8:28:ff:59:a3:f3:3f:40:f2:d7:6f:84:
                    de:3e:f0:0f:27:64:b6:80:2a:0b:07:d3:7f:4a:06:
                    cd:da:95:a8:42:59:77:f5:16:38:c0:b3:51:1b:c7:
                    1c:42:cc:20:d6:ab:54:7e:69:2c:f1:4b:cd:12:ee:
                    15:13:c9:93:27:69:58:40:7b:40:19:0f:8f:99:4f:
                    ba:66:ec:44:00:b3:31:11:d9:b4:73:33:dc:36:ae:
                    cf:08:0c:e7:4d:4e:11:e0:52:60:b0:8c:a9:d9:d4:
                    a9:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:47:64:84:12:01:F4:61:38:FA:69:88:9B:74:D5:06:24:DC:07:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/822f9974-af88-4d0b-a65f-065fdd26c645/965991e9-204b-39b5-ac18-27bb3feff644.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/822f9974-af88-4d0b-a65f-065fdd26c645/822f9974-af88-4d0b-a65f-065fdd26c645.crl

            X509v3 Authority Key Identifier:
                keyid:3C:FD:AA:02:90:05:D1:73:A5:12:3B:E6:2C:2B:A0:C9:51:C9:26:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/822f9974-af88-4d0b-a65f-065fdd26c645.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.247.244.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:78:60:dc:4a:14:28:28:9f:56:d6:dc:7c:dc:a2:1a:3d:4d:
         03:7b:e8:76:10:10:94:b9:ea:5a:e4:d2:80:a8:5b:e5:eb:9a:
         37:95:ce:f1:05:d8:c9:3c:f2:3a:65:32:6b:23:01:6a:d1:ad:
         7e:ba:59:48:05:cc:bb:6a:13:d1:47:8f:03:67:08:e8:9d:ad:
         67:b7:d2:3a:36:1d:92:59:f8:b7:35:20:64:02:4f:08:19:d3:
         63:d1:84:85:bc:62:b6:36:a9:af:6d:d7:60:74:dd:61:a1:69:
         b5:c7:b2:40:5f:45:23:52:8d:12:84:67:7b:50:f9:70:bd:02:
         23:64:68:16:b2:ff:bd:b5:cf:7b:87:a3:bd:4d:20:d8:30:f9:
         a7:63:b1:29:c8:d7:f8:3a:86:b3:74:a7:c7:54:27:05:dd:37:
         a6:1b:dc:c4:d5:7e:c9:fc:51:bc:8a:47:90:51:ac:93:02:ea:
         89:bc:3b:4c:bc:30:14:e8:62:73:cf:0a:d9:06:36:64:92:af:
         5e:1d:85:08:55:97:8d:d3:5d:87:ab:c1:12:9d:08:f5:e0:32:
         8b:a7:70:c8:fd:8c:4e:63:a6:8b:12:82:12:c1:33:57:3a:72:
         f0:4b:e7:ce:ef:ba:cd:2b:0b:a7:7d:2a:71:f4:d9:b9:f8:78:
         9c:ba:ce:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----