Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/4a46aa26-1c6c-30f0-8a36-3d75b5a3cc9b.roa
File:                     4a46aa26-1c6c-30f0-8a36-3d75b5a3cc9b.roa (raw, json)
Hash identifier:          69bb0Ec/WeNv/5w8piHbM/L5zVT1mIrUd2XFAGNbWJk=
Subject key identifier:   9D:23:E0:6F:B0:BB:38:B2:22:B6:F5:C7:72:8F:ED:03:26:F5:F6:09
Certificate issuer:       /CN=b386e256-2dc3-4d21-93b9-c253dcd37e4f
Certificate serial:       010D0C9F4328584214A8337F516BAB1B0EE9CA20
Authority key identifier: F2:22:5C:07:C2:CC:A7:84:83:BD:D6:14:A6:AB:B3:79:EF:26:DE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/4a46aa26-1c6c-30f0-8a36-3d75b5a3cc9b.roa
Signing time:             Fri 02 Jun 2023 01:00:17 +0000
ROA not before:           Fri 02 Jun 2023 01:00:17 +0000
ROA not after:            Thu 31 Aug 2023 01:00:17 +0000
asID:                     7029
IP address blocks:        134.195.43.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:14:a8:33:7f:51:6b:ab:1b:0e:e9:ca:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b386e256-2dc3-4d21-93b9-c253dcd37e4f
        Validity
            Not Before: Jun  2 01:00:17 2023 GMT
            Not After : Aug 31 01:00:17 2023 GMT
        Subject: CN=a34e17e4-0b80-40e8-a754-6fa409d5f2cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:15:34:d0:bb:f4:09:18:1a:5f:af:97:ef:80:
                    6c:6d:49:fa:bf:aa:91:a9:47:bc:65:d4:96:ba:d7:
                    7d:0e:c3:db:61:8f:5a:e7:e6:90:3d:e5:ff:7a:95:
                    c2:66:f5:5a:b6:a4:a4:59:e3:c8:28:52:25:82:c9:
                    86:77:eb:a6:5e:bd:a1:04:48:98:53:41:05:70:e9:
                    c8:66:c7:2e:4d:8e:c7:9f:38:a2:ce:b0:de:7b:a7:
                    29:90:5a:12:7c:d2:df:b4:6a:1e:f2:0d:74:35:fa:
                    9f:1d:d9:bd:1d:64:36:90:08:20:ac:94:ba:4a:9d:
                    20:64:96:86:e2:e6:1a:8f:7d:6b:d1:c7:8f:80:9a:
                    7f:3a:cd:bc:6c:ab:f9:38:83:bb:b3:87:df:d6:89:
                    7f:46:87:c8:2e:d6:40:3b:99:08:b6:11:33:27:30:
                    3e:b1:b4:72:f0:26:ca:c9:e8:c6:ee:b0:de:60:31:
                    bd:2f:36:d9:6d:b4:7e:6c:da:dc:ff:1c:1d:af:6f:
                    1a:2f:a2:19:2f:58:be:a8:8f:08:67:69:d3:50:d8:
                    f3:77:6a:bf:ca:86:68:f6:80:a3:ce:84:03:5d:1b:
                    56:ab:0d:70:90:1e:15:ee:55:7b:48:71:c1:0b:2c:
                    c0:3c:60:d3:48:b3:88:0c:41:9c:52:64:ad:fa:9c:
                    5f:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:23:E0:6F:B0:BB:38:B2:22:B6:F5:C7:72:8F:ED:03:26:F5:F6:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/4a46aa26-1c6c-30f0-8a36-3d75b5a3cc9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.crl

            X509v3 Authority Key Identifier:
                keyid:F2:22:5C:07:C2:CC:A7:84:83:BD:D6:14:A6:AB:B3:79:EF:26:DE:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.195.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:4e:e3:59:3e:66:15:f1:6a:34:13:0f:3d:f6:3a:b8:31:70:
         11:fe:7b:0c:f8:f0:0d:05:85:89:c1:13:f4:97:e2:28:d0:8f:
         df:90:55:50:8b:77:48:2b:7c:c2:eb:bf:18:4b:97:6a:0f:10:
         23:5c:5d:f1:22:d0:2f:93:01:30:44:5a:bd:52:06:60:8f:9b:
         ab:ef:f1:66:38:cf:1d:d9:51:48:3f:43:f8:24:a1:e5:cd:a6:
         56:ad:dd:3b:8e:50:2a:4b:39:cb:85:f8:a2:d9:54:26:e9:d4:
         96:67:29:90:5d:b9:f8:c3:ad:f4:0b:7e:06:c5:f0:14:99:dd:
         9c:73:de:9c:d6:f3:86:f9:77:eb:0b:58:88:1c:eb:3d:d3:f4:
         32:26:7d:df:b0:ec:d7:fe:ce:26:47:f6:49:b5:cb:62:2e:54:
         f3:93:14:b7:c1:fb:d7:49:bd:8f:5d:c4:d5:ba:da:5d:48:21:
         31:5e:35:64:28:5e:3f:8e:80:59:1e:04:4a:ff:f6:17:0a:12:
         54:fe:3b:2e:38:ac:19:29:b1:9b:16:c9:ea:da:ef:22:65:9d:
         66:5c:1f:3c:b9:9f:4f:1f:02:1d:9f:02:a6:ef:4f:3d:38:13:
         92:49:36:4b:6c:ba:8d:0b:fc:63:eb:c0:7e:f4:1e:1c:b2:f6:
         a3:29:47:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----