Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/b5f02fde-821c-3161-902c-14c04bc33d47.roa
File:                     b5f02fde-821c-3161-902c-14c04bc33d47.roa (raw, json)
Hash identifier:          /MWGmXMzbjWTaNTZgT+mzMnC2bvfVtDiAYjiOj9DX7M=
Subject key identifier:   5F:DA:E2:E3:59:D9:6A:39:F1:8A:53:6E:64:0C:DA:14:54:EA:D1:D4
Certificate issuer:       /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Certificate serial:       010D0C9F432858419F9AA16B49573AD238ED7580
Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/b5f02fde-821c-3161-902c-14c04bc33d47.roa
Signing time:             Thu 24 Mar 2022 13:53:16 +0000
ROA not before:           Thu 24 Mar 2022 13:53:16 +0000
ROA not after:            Thu 24 Jul 2025 04:00:00 +0000
asID:                     55933
IP address blocks:        198.44.166.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:9f:9a:a1:6b:49:57:3a:d2:38:ed:75:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
        Validity
            Not Before: Mar 24 13:53:16 2022 GMT
            Not After : Jul 24 04:00:00 2025 GMT
        Subject: CN=608ec20d-5f47-4c9f-b400-24805a8ca5af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:1f:f9:f9:31:24:94:0a:e4:18:71:19:5a:23:
                    74:c5:a1:a0:9b:e3:7c:34:8a:ee:51:29:92:d3:46:
                    ee:02:79:7a:52:53:1e:72:ec:00:fa:fa:c9:16:35:
                    e5:b3:68:a4:1a:63:a3:ed:41:7b:61:a0:04:5a:b9:
                    c5:b4:3d:0c:49:56:44:30:59:4b:42:8d:21:f1:39:
                    00:a1:d9:ac:48:82:fa:64:92:39:8b:3a:54:4e:da:
                    15:04:b6:c4:1c:7d:76:33:aa:0e:28:bc:6d:0a:68:
                    55:e9:00:b6:f5:03:0e:22:59:ea:c3:25:4b:24:d0:
                    62:f4:62:07:02:9c:4e:e0:c7:1b:1e:0d:92:48:8b:
                    6d:51:76:be:5e:37:c3:e8:9b:bf:67:d8:fe:68:1c:
                    5a:4b:b0:3e:90:fb:b1:5e:8c:c3:19:5a:59:4e:e7:
                    97:02:6c:0c:0e:60:57:ce:9b:f7:72:e1:fa:db:8b:
                    25:ed:96:b1:aa:1a:14:3e:15:58:5d:8a:44:b8:ca:
                    9f:8b:9b:ee:fe:91:99:fc:2a:62:89:11:99:a3:38:
                    32:d9:69:e1:d7:6b:c2:80:55:e2:2f:f6:fc:38:a3:
                    ab:55:6c:cd:40:34:9e:cc:da:81:b7:f1:7e:a7:08:
                    e6:eb:8c:e4:18:28:f0:26:7d:ef:48:51:de:3f:7f:
                    6b:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:DA:E2:E3:59:D9:6A:39:F1:8A:53:6E:64:0C:DA:14:54:EA:D1:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/b5f02fde-821c-3161-902c-14c04bc33d47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl

            X509v3 Authority Key Identifier:
                keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.44.166.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:9c:15:2d:3a:fd:76:de:bd:65:5d:c9:a4:78:69:3f:32:b3:
         df:a7:b7:0d:1e:be:93:f4:3f:c7:17:91:6e:f5:20:dd:c1:8d:
         74:1d:d1:c7:cf:c9:b4:3e:6f:bd:e1:f0:92:9a:da:4d:88:c0:
         4d:3c:4e:d9:26:79:68:34:f7:81:60:40:01:fc:58:38:20:70:
         be:db:4c:12:f6:b2:24:23:24:57:45:c1:24:bc:83:1d:c2:49:
         82:9e:27:2d:13:08:06:f2:c9:f2:5b:a5:1e:fe:73:2f:50:73:
         63:39:a3:ef:ab:b6:ab:11:b7:15:f9:9a:9a:26:80:ca:79:76:
         bb:e7:74:cd:fe:c6:b8:17:17:82:23:b8:18:94:98:c4:b2:f7:
         aa:05:b4:1c:9d:fa:19:9f:1e:d8:1c:46:f6:e8:b2:40:ba:21:
         fe:23:5d:83:86:0a:db:1a:19:00:ee:56:03:76:c9:1b:23:5a:
         65:48:ee:ce:12:34:d3:eb:6a:6e:15:36:f1:be:bf:ea:ee:48:
         4a:bf:77:eb:8e:d0:09:22:fc:5e:a2:e0:ca:41:a9:5d:7e:3c:
         ef:ce:8a:68:85:88:c9:48:b5:c1:43:de:11:e4:41:28:57:fe:
         10:d0:79:78:d7:c7:1e:ec:ee:0d:2c:3d:bc:60:40:e4:de:26:
         28:f9:20:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----