Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/79b1fe7a-eca9-422f-9043-5a93ca5145c8/4c11b520-f0f1-364c-9acb-1004f4834754.roa
File:                     4c11b520-f0f1-364c-9acb-1004f4834754.roa (raw, json)
Hash identifier:          LdXF5KNfV1PDL/oGPZrxmz5pxrfe5ZdpEY+TJCyOrYg=
Subject key identifier:   D6:14:90:FA:41:E7:0F:68:85:C2:C8:AE:5A:6D:74:35:0C:AB:91:84
Certificate issuer:       /CN=79b1fe7a-eca9-422f-9043-5a93ca5145c8
Certificate serial:       010D0C9F4328584332DE83475B3256C21C982000
Authority key identifier: 0C:61:A1:93:6A:44:3C:E2:11:31:FA:40:42:68:F7:A6:E7:34:84:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/79b1fe7a-eca9-422f-9043-5a93ca5145c8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/79b1fe7a-eca9-422f-9043-5a93ca5145c8/4c11b520-f0f1-364c-9acb-1004f4834754.roa
Signing time:             Tue 12 Sep 2023 13:30:57 +0000
ROA not before:           Tue 12 Sep 2023 13:30:57 +0000
ROA not after:            Mon 11 Dec 2023 14:30:57 +0000
asID:                     14618
IP address blocks:        149.48.128.0/21 maxlen: 21

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:32:de:83:47:5b:32:56:c2:1c:98:20:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79b1fe7a-eca9-422f-9043-5a93ca5145c8
        Validity
            Not Before: Sep 12 13:30:57 2023 GMT
            Not After : Dec 11 14:30:57 2023 GMT
        Subject: CN=aee9d3dd-ee41-40ee-9674-102322fdafaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:1f:fa:d4:4b:df:d9:1b:cb:a0:ba:7a:96:f4:
                    a5:2d:0c:0f:11:57:2d:93:86:73:3f:37:0d:3f:6f:
                    2c:de:c6:55:4d:da:c0:e4:86:76:c6:e7:7a:9c:f1:
                    2d:c0:50:53:b7:c7:46:41:37:47:f0:6f:64:87:28:
                    8e:de:45:ca:78:79:4b:c8:ed:9c:b4:b0:04:ca:e2:
                    f3:17:58:88:2c:76:e2:9e:33:89:48:83:3a:77:f1:
                    d5:03:ac:94:36:d3:b6:c3:6f:64:93:31:51:b9:7a:
                    d1:13:19:fd:11:a0:50:28:70:67:bb:e1:95:1f:8f:
                    0a:2e:77:f3:b8:51:65:63:8c:f2:0d:bf:72:64:b3:
                    61:06:b0:5d:97:7a:54:7e:96:20:c6:21:58:a0:b6:
                    7b:d7:65:79:58:41:f1:b0:5c:88:f7:1b:0f:d1:f3:
                    a8:54:93:34:66:d0:8a:2d:58:6f:87:09:93:28:04:
                    6b:33:cb:3a:bd:8a:ee:02:5e:c5:81:fa:26:57:ba:
                    d0:0f:e9:f0:e7:35:4b:41:4b:ef:5d:8e:13:9b:c8:
                    98:8c:92:3d:0d:48:d3:f0:7b:f3:21:69:40:4a:11:
                    e0:f3:7f:ee:8d:08:7d:ac:0a:27:07:e7:4e:9f:7f:
                    27:53:f3:d5:c2:da:3e:5a:7f:c2:4b:97:66:9e:20:
                    d3:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:14:90:FA:41:E7:0F:68:85:C2:C8:AE:5A:6D:74:35:0C:AB:91:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/79b1fe7a-eca9-422f-9043-5a93ca5145c8/4c11b520-f0f1-364c-9acb-1004f4834754.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/79b1fe7a-eca9-422f-9043-5a93ca5145c8/79b1fe7a-eca9-422f-9043-5a93ca5145c8.crl

            X509v3 Authority Key Identifier:
                keyid:0C:61:A1:93:6A:44:3C:E2:11:31:FA:40:42:68:F7:A6:E7:34:84:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/79b1fe7a-eca9-422f-9043-5a93ca5145c8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.48.128.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c1:ea:5c:d5:19:20:e7:86:6b:63:13:37:59:c4:23:94:fa:ae:
         2a:2a:70:3c:4d:7a:18:04:4b:51:64:12:a2:70:54:d3:d1:74:
         c8:5b:72:f2:01:92:68:20:56:56:23:6a:3b:44:46:d3:d1:f5:
         7f:82:6c:4b:5b:dd:1b:5a:9c:fa:e6:fc:90:fb:b8:84:43:02:
         ab:8d:80:7e:37:40:f1:69:31:4c:42:c7:39:7a:ab:b2:ba:c6:
         af:99:6e:0b:b0:18:30:19:b7:90:df:da:9a:d6:c1:15:7b:b9:
         03:9b:78:81:a5:ed:a6:6c:bb:98:f9:db:9f:85:62:d0:85:b1:
         54:09:42:3f:26:2d:1d:bc:e9:ce:07:42:df:68:4b:2a:8b:c6:
         61:ec:2f:c3:20:a2:88:61:b3:d6:22:3d:4d:1a:6d:2e:27:fc:
         8c:20:e0:c3:bc:13:f6:c1:3d:ba:f0:c8:72:0d:87:2c:a8:e2:
         e7:64:60:83:f6:c0:36:62:46:87:06:06:b8:75:b4:68:3d:41:
         c7:5a:3c:f5:9e:54:78:e3:b6:62:ef:31:88:70:f8:19:91:28:
         7a:c6:7f:e2:e6:75:3c:f2:8b:3d:97:c0:77:b7:8a:dc:6a:ce:
         4d:58:0b:63:df:a7:be:5e:1d:78:9b:54:2c:f7:b2:27:ed:f8:
         cd:3b:ad:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----