Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294/ff6a44ae-4b17-33ab-ab37-f7e83c0bc29c.roa
File:                     ff6a44ae-4b17-33ab-ab37-f7e83c0bc29c.roa (raw, json)
Hash identifier:          G1pHkY7DWhMAVBKRAds0Ah5UNLNS8+Qzb2slwhgDpqM=
Subject key identifier:   28:51:FD:2C:C4:50:A9:5C:BC:4A:4E:DC:9F:FB:89:EF:C6:2A:78:62
Certificate issuer:       /CN=866b2df4-0f0a-4b84-9eb7-c185258f5294
Certificate serial:       010D0C9F43285843DFFADD2C0229361C9C91AD80
Authority key identifier: 95:76:5B:F1:DC:12:D1:40:FA:AD:5B:D4:EB:65:17:42:16:BE:5A:7B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294/ff6a44ae-4b17-33ab-ab37-f7e83c0bc29c.roa
Signing time:             Mon 13 Nov 2023 13:42:55 +0000
ROA not before:           Mon 13 Nov 2023 13:42:55 +0000
ROA not after:            Sun 11 Feb 2024 13:42:55 +0000
asID:                     8075
IP address blocks:        67.210.129.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:df:fa:dd:2c:02:29:36:1c:9c:91:ad:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=866b2df4-0f0a-4b84-9eb7-c185258f5294
        Validity
            Not Before: Nov 13 13:42:55 2023 GMT
            Not After : Feb 11 13:42:55 2024 GMT
        Subject: CN=59e5bff9-2a4d-48fe-8e2a-c7edf524fc32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:6b:02:29:d0:83:f1:f1:ba:e3:da:a9:f5:ee:
                    a7:15:59:60:c1:77:3a:8e:27:50:a2:bd:47:d5:06:
                    21:40:36:53:96:23:e4:2f:49:12:e5:a9:27:85:cc:
                    5f:2e:3d:08:12:f8:30:67:7e:c0:25:ec:b3:88:6c:
                    77:54:a8:fd:97:6f:51:54:f1:0d:52:d2:1a:c4:3b:
                    8b:08:b6:fa:3e:5f:71:ff:69:44:02:9b:68:6f:ec:
                    52:49:6e:72:25:d5:2b:58:cf:5e:1c:3d:c3:28:27:
                    49:65:9f:cd:2a:04:87:b9:9c:b5:bc:bd:7b:d2:48:
                    19:0a:e7:1b:df:e5:b2:56:ac:52:ef:92:03:63:04:
                    a5:07:6e:58:9d:2e:95:8d:16:a6:1f:1c:20:cd:d1:
                    90:89:12:03:d4:b4:25:cf:4c:5a:6f:31:ae:eb:9c:
                    23:de:51:a1:ad:32:92:e6:12:c9:79:0e:14:9b:58:
                    e0:e7:eb:15:7c:20:31:e3:3a:f5:4c:8c:c3:6a:54:
                    37:12:a4:8c:77:2a:59:75:ad:10:51:0b:b8:81:27:
                    02:2d:ef:4f:91:a2:26:b9:0a:a4:f7:06:95:37:c0:
                    49:ab:77:66:f3:c7:82:ca:ed:dd:6a:ea:f6:37:a3:
                    5c:8b:68:85:d5:fb:00:9c:f7:8f:ce:97:e9:4c:df:
                    35:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:51:FD:2C:C4:50:A9:5C:BC:4A:4E:DC:9F:FB:89:EF:C6:2A:78:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294/ff6a44ae-4b17-33ab-ab37-f7e83c0bc29c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294/866b2df4-0f0a-4b84-9eb7-c185258f5294.crl

            X509v3 Authority Key Identifier:
                keyid:95:76:5B:F1:DC:12:D1:40:FA:AD:5B:D4:EB:65:17:42:16:BE:5A:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.210.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:32:5b:35:e7:a7:83:07:7a:ad:6b:3d:12:94:b6:f3:dd:be:
         5f:c2:82:6d:6f:1f:15:f2:b6:89:f9:12:6a:83:ec:5a:5b:66:
         67:bc:c2:5f:75:3e:9f:49:55:f9:ac:31:f6:cd:1d:fa:16:21:
         ac:f6:44:91:18:d5:b6:b9:4d:ed:b6:40:eb:59:44:6e:34:d8:
         22:4b:f4:2f:96:9e:94:be:a8:82:5e:ba:62:74:38:35:3e:54:
         bb:9f:a7:66:78:7e:28:ab:7c:65:5e:8d:61:ef:a3:4b:db:82:
         64:7b:a4:46:42:d9:c7:31:d7:8d:3f:91:6c:22:84:b0:19:5c:
         0d:ce:0b:58:f1:5c:2b:81:59:21:66:0a:d7:a5:ef:d8:92:31:
         41:61:f0:b6:1d:02:4b:b6:00:09:37:65:fb:a6:0d:ba:ad:53:
         21:44:50:fb:2b:1a:a5:08:b0:c9:68:a2:6f:89:a3:03:22:10:
         f1:f3:84:75:b9:07:7e:81:a2:1e:2d:18:58:e8:51:18:9f:6c:
         be:e7:6f:14:9b:26:6c:10:4f:1d:53:a7:57:e1:df:a9:ab:96:
         83:42:fc:a1:22:1d:8a:1b:d7:1d:fa:c2:1e:3d:2b:7f:ef:de:
         c6:56:40:73:87:13:78:6f:3b:b5:04:0f:9e:02:55:85:79:2a:
         e7:29:c4:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----