Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/54b4264c-9bb6-36b6-8086-d237f1b87bcb.roa
File:                     54b4264c-9bb6-36b6-8086-d237f1b87bcb.roa (raw, json)
Hash identifier:          +FEH1K/OBmCbsyaa7Q/B7/rUTmrgo48E/okxiEP3b3o=
Subject key identifier:   D7:CF:49:DF:31:37:32:E8:D0:65:1C:1E:A6:43:E4:AE:06:98:20:EC
Certificate issuer:       /CN=b386e256-2dc3-4d21-93b9-c253dcd37e4f
Certificate serial:       010D0C9F43285841B8866E5EE8D9226055BC8780
Authority key identifier: F2:22:5C:07:C2:CC:A7:84:83:BD:D6:14:A6:AB:B3:79:EF:26:DE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/54b4264c-9bb6-36b6-8086-d237f1b87bcb.roa
Signing time:             Wed 15 Sep 2021 14:26:55 +0000
ROA not before:           Wed 15 Sep 2021 14:26:55 +0000
ROA not after:            Fri 01 Aug 2025 04:00:00 +0000
asID:                     834
IP address blocks:        64.112.97.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:b8:86:6e:5e:e8:d9:22:60:55:bc:87:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b386e256-2dc3-4d21-93b9-c253dcd37e4f
        Validity
            Not Before: Sep 15 14:26:55 2021 GMT
            Not After : Aug  1 04:00:00 2025 GMT
        Subject: CN=6b19d7a0-abf3-45e4-8e95-3e4d40c60e69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:33:38:5d:fb:f2:4f:75:57:66:67:a2:42:b4:
                    bf:aa:cc:a2:d2:62:a6:14:25:8f:d1:c4:5f:9d:d6:
                    a3:e3:76:d8:b8:e3:07:0a:07:bf:d8:f4:95:45:40:
                    d7:ea:cf:01:c3:1f:2b:c1:68:bd:1b:d0:09:d7:94:
                    b2:07:1d:9d:6d:16:73:0b:37:2b:f1:25:bc:39:bb:
                    6d:ba:6c:bd:42:6f:a9:a7:73:7f:65:6b:a8:3e:96:
                    23:db:07:a4:05:a1:d5:9a:b3:f6:c8:ae:e2:17:f7:
                    de:6d:8a:dd:e4:a3:c9:6f:c8:fe:94:5f:10:cb:2f:
                    7a:3b:9d:28:9b:7f:f5:6f:c1:ed:2e:fe:d1:54:5f:
                    53:b1:51:4f:7c:83:c1:81:a2:b7:9b:0b:5a:a5:13:
                    ff:80:7c:bd:bb:b4:ce:26:36:70:24:e1:d1:e1:fd:
                    05:8d:02:bb:ad:6f:0b:d1:41:0e:bf:0c:af:5d:88:
                    48:1e:74:72:65:5a:bb:60:2a:01:3a:4d:04:6b:de:
                    8d:58:64:e1:51:46:6b:33:6f:70:28:39:02:9a:af:
                    08:1c:63:8a:22:36:ff:95:26:95:30:d4:cc:14:ef:
                    c0:34:cb:7c:b2:42:af:e3:39:1e:1d:b3:25:0b:be:
                    1e:09:59:bf:c8:dc:73:27:15:ba:50:9e:e8:d0:ae:
                    f0:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:CF:49:DF:31:37:32:E8:D0:65:1C:1E:A6:43:E4:AE:06:98:20:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/54b4264c-9bb6-36b6-8086-d237f1b87bcb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.crl

            X509v3 Authority Key Identifier:
                keyid:F2:22:5C:07:C2:CC:A7:84:83:BD:D6:14:A6:AB:B3:79:EF:26:DE:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.112.97.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:ef:54:32:c2:b3:32:89:83:be:b0:9e:3a:56:46:97:d6:48:
         f0:02:29:d9:af:6e:67:22:5e:b6:91:67:23:0c:19:4f:ff:67:
         c2:ea:3b:5c:1d:d9:57:6a:86:bc:73:54:44:e0:05:d7:8f:61:
         09:09:bf:7e:2b:ae:60:d6:31:77:e8:19:9b:5a:32:11:4a:5b:
         bd:4a:6a:d7:8b:61:67:7b:8a:36:9b:fe:dd:11:50:4d:98:5a:
         cb:70:5f:1d:54:57:3f:a8:5f:01:17:48:4e:9b:a1:50:0e:0d:
         1e:4a:48:21:32:c4:98:6c:fa:7d:5c:31:86:fb:b3:33:35:30:
         b4:59:5a:13:4c:e7:f1:a6:5e:8b:56:e7:a7:aa:72:b5:28:43:
         6e:52:38:69:a4:01:8d:88:21:d6:72:7f:82:b8:46:2a:82:a9:
         4e:98:2e:8a:f8:73:d6:ff:82:33:bd:55:e8:95:e4:9e:42:8c:
         b4:f1:c4:d7:ac:97:14:8e:a0:04:e4:2f:c8:b9:12:17:5b:71:
         2d:b9:9f:c7:72:08:25:5a:ba:65:a7:32:00:f0:57:44:3e:89:
         bf:15:29:8d:af:15:ad:03:65:13:52:c1:cd:4e:ca:fd:7a:d9:
         e9:1a:61:ca:52:19:92:8f:2f:a3:16:a9:4e:7f:95:06:ec:5b:
         87:18:74:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----