Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd/6d0232c3-d9ba-377b-ba91-de43d7003a53.roa
File:                     6d0232c3-d9ba-377b-ba91-de43d7003a53.roa (raw, json)
Hash identifier:          bdHLwMDDU0BKal9DTsix8sOTqaCLESocrMoNbXe22sQ=
Subject key identifier:   86:48:58:9E:E8:B7:FB:17:22:4F:93:F2:DB:E0:65:67:C0:95:76:8B
Certificate issuer:       /CN=fee7b67e-5e4f-4a05-a59e-9e820c898fcd
Certificate serial:       010D0C9F4328583C94996C56B9B80EF9AE885780
Authority key identifier: C9:40:9E:5D:CC:E9:AC:92:1D:01:F2:B4:97:5A:8D:27:F7:2F:01:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd/6d0232c3-d9ba-377b-ba91-de43d7003a53.roa
Signing time:             Tue 11 Jan 2022 05:00:00 +0000
ROA not before:           Tue 11 Jan 2022 05:00:00 +0000
ROA not after:            Wed 17 Apr 2024 04:00:00 +0000
asID:                     398555
IP address blocks:        192.111.36.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:94:99:6c:56:b9:b8:0e:f9:ae:88:57:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fee7b67e-5e4f-4a05-a59e-9e820c898fcd
        Validity
            Not Before: Jan 11 05:00:00 2022 GMT
            Not After : Apr 17 04:00:00 2024 GMT
        Subject: CN=777773d5-175e-46fa-ae36-d3c8e5d2b4a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:33:c7:de:d8:5d:29:5f:12:bf:43:06:d5:ef:
                    d2:8d:32:8d:aa:91:55:ff:71:53:69:b2:c0:e0:3b:
                    ec:19:4a:b8:da:16:74:41:5b:f2:ca:35:c4:2a:0d:
                    c2:60:49:cb:94:85:85:09:cd:3c:3e:c9:a8:b2:e2:
                    bd:e0:ff:7b:6e:ea:b4:dc:e8:25:34:09:38:a4:ee:
                    3b:b1:26:f6:d8:81:4c:96:94:9d:10:cc:2d:43:c6:
                    81:f6:ea:e6:0b:c0:ee:58:46:60:f9:20:df:18:d3:
                    c8:9b:fb:ad:5f:7b:8c:3f:7e:bb:53:be:97:9e:3c:
                    7e:16:b5:d1:df:7e:80:36:b6:a1:6d:89:5f:15:71:
                    fa:23:d9:2a:2f:68:fb:26:52:5a:21:96:ea:fb:7f:
                    a6:0e:4a:92:c6:cd:a0:11:85:f8:09:5e:1d:69:db:
                    dd:2c:35:55:31:d5:b8:2f:a5:8c:35:00:ac:04:9b:
                    f2:e1:53:42:08:c3:ea:b7:ca:ae:6b:e8:1b:0a:3b:
                    0a:80:e5:f6:64:e6:8a:a1:83:56:cc:9c:bf:f6:47:
                    e6:84:dd:36:a9:e4:2e:3c:0c:c1:ff:c7:b2:0b:2c:
                    0f:93:12:3f:dd:0b:dd:20:7e:e5:01:d6:0d:9d:c6:
                    86:2d:3a:37:54:3b:e2:b5:51:bc:ef:a1:3d:66:88:
                    ca:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:48:58:9E:E8:B7:FB:17:22:4F:93:F2:DB:E0:65:67:C0:95:76:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd/6d0232c3-d9ba-377b-ba91-de43d7003a53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd/fee7b67e-5e4f-4a05-a59e-9e820c898fcd.crl

            X509v3 Authority Key Identifier:
                keyid:C9:40:9E:5D:CC:E9:AC:92:1D:01:F2:B4:97:5A:8D:27:F7:2F:01:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.111.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:37:0a:00:5e:9e:d1:ec:09:6f:68:06:31:d3:0b:81:ce:4a:
         b9:94:f0:0e:86:a2:8e:83:09:de:c7:38:d1:73:16:9b:b8:55:
         e2:10:d1:22:bc:26:c5:0f:15:de:10:e8:53:95:22:f0:e6:74:
         5a:9d:6c:f4:fb:c0:77:68:5e:40:3e:6d:ef:fc:a3:b9:c5:7e:
         74:e1:3e:4c:8c:f6:34:3c:a4:81:f5:ff:e1:20:65:2e:78:8f:
         e4:1c:de:4f:30:58:9a:31:a2:28:f9:30:d2:19:c6:ed:85:18:
         48:1d:85:77:06:79:98:79:80:48:7d:58:8f:3e:d6:80:03:7e:
         05:77:02:47:38:70:2f:46:45:80:26:2f:d2:de:e9:9d:8a:a5:
         bc:7e:2d:8a:b2:f6:6e:0d:1f:36:7a:bf:fa:29:6b:c7:b7:a1:
         7f:57:37:c8:d0:78:22:7a:7a:17:b8:2c:cd:60:9b:33:a5:56:
         52:5b:13:3a:0c:9e:a1:81:3c:42:9a:35:64:92:6a:e1:05:60:
         78:3a:a3:4a:0f:ab:4e:e7:a3:41:c2:1d:2a:f6:6a:95:de:cc:
         23:d5:6b:05:e0:6d:84:d1:92:61:e0:42:4a:f0:ad:ff:56:1a:
         58:ff:7b:5e:93:d0:2f:85:1f:eb:ff:96:55:25:8e:64:28:4b:
         53:cc:47:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----