Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b764fe0e-08f6-4216-a719-1ca6386e5571/291e3eb8-3a8c-3153-a41e-c1b9310345bc.roa
File:                     291e3eb8-3a8c-3153-a41e-c1b9310345bc.roa (raw, json)
Hash identifier:          E0BSm5mGBoTwkJA66X1iW2dsdPI7IqgAekJEY1Xo8xM=
Subject key identifier:   DF:09:96:2C:3D:69:20:0D:06:C9:92:C6:C8:38:29:D8:80:61:FC:68
Certificate issuer:       /CN=b764fe0e-08f6-4216-a719-1ca6386e5571
Certificate serial:       010D0C9F432858428C8612BD8E257CD5727B4380
Authority key identifier: 71:B4:5B:6E:B6:C0:E6:28:8D:F0:09:60:B4:B1:71:14:8F:E1:CB:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b764fe0e-08f6-4216-a719-1ca6386e5571.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b764fe0e-08f6-4216-a719-1ca6386e5571/291e3eb8-3a8c-3153-a41e-c1b9310345bc.roa
Signing time:             Fri 14 Jul 2023 23:28:34 +0000
ROA not before:           Fri 14 Jul 2023 23:28:34 +0000
ROA not after:            Thu 12 Oct 2023 23:28:34 +0000
asID:                     400862
IP address blocks:        209.188.110.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:8c:86:12:bd:8e:25:7c:d5:72:7b:43:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b764fe0e-08f6-4216-a719-1ca6386e5571
        Validity
            Not Before: Jul 14 23:28:34 2023 GMT
            Not After : Oct 12 23:28:34 2023 GMT
        Subject: CN=d8cdb3a9-7545-4db8-9441-55a240ea0619
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:b6:ca:aa:94:c1:be:39:bc:6f:e2:b0:d7:f6:
                    2a:5f:8f:24:4c:ac:01:6e:72:c3:ed:9c:b5:60:9d:
                    30:29:41:bd:5f:2c:20:80:5e:0f:d7:a4:13:1f:e5:
                    ba:ef:f3:43:1d:7c:79:3a:6d:6f:b1:69:c9:e5:05:
                    1b:c9:f1:de:42:b8:26:70:f1:f9:b8:9b:70:a1:14:
                    b3:46:17:ee:a7:2b:97:46:27:79:70:a0:ea:40:33:
                    9a:81:72:af:fa:99:e0:9c:bb:88:43:68:dc:62:e3:
                    03:3a:a3:6f:42:49:c7:4f:7a:ee:70:51:b2:12:8d:
                    42:fb:e2:62:6f:50:29:3e:00:30:bd:d1:e1:75:23:
                    da:02:90:77:9b:3e:3f:97:f4:2e:a8:d8:cc:0d:cf:
                    8a:4e:1b:50:7b:e5:14:f0:18:c1:9d:77:30:c3:dd:
                    6d:bc:d8:ed:00:8b:e6:63:95:8a:d9:24:85:67:6a:
                    86:12:94:73:bc:f1:2d:36:5a:b9:ec:25:f2:d6:90:
                    ae:88:ba:91:97:32:18:98:35:c0:15:cd:92:9c:2e:
                    af:df:b6:a4:5d:0b:ee:33:10:eb:a6:1e:a2:76:36:
                    e3:a4:24:f7:7d:01:b1:df:22:4b:a4:86:4f:3b:af:
                    e0:17:30:2e:d9:c1:2d:e7:7f:7f:d4:c2:37:ba:15:
                    42:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:09:96:2C:3D:69:20:0D:06:C9:92:C6:C8:38:29:D8:80:61:FC:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b764fe0e-08f6-4216-a719-1ca6386e5571/291e3eb8-3a8c-3153-a41e-c1b9310345bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b764fe0e-08f6-4216-a719-1ca6386e5571/b764fe0e-08f6-4216-a719-1ca6386e5571.crl

            X509v3 Authority Key Identifier:
                keyid:71:B4:5B:6E:B6:C0:E6:28:8D:F0:09:60:B4:B1:71:14:8F:E1:CB:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b764fe0e-08f6-4216-a719-1ca6386e5571.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.188.110.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:52:97:4f:5c:66:c1:3b:90:ee:c9:87:cc:82:8a:f6:42:4d:
         de:83:3e:df:7c:d4:f7:a9:68:94:84:f2:e3:23:6a:1a:69:01:
         23:c5:16:2c:5a:f8:53:5d:2d:52:54:47:c8:8e:b8:d9:cf:c0:
         74:4d:ef:d5:04:4d:94:d4:d2:cc:f3:fb:26:0c:1d:3e:80:79:
         60:3d:c3:b7:33:95:a8:77:b1:83:6a:6f:a4:85:ad:c9:75:12:
         c7:c7:5e:84:7a:1b:39:01:45:ea:be:3d:04:29:11:3c:a6:d7:
         b4:8f:31:64:45:94:59:5c:3d:5a:9f:ed:eb:39:6b:34:e8:fc:
         65:67:e0:34:47:18:0b:84:5f:5f:5a:38:a9:02:bb:52:44:d9:
         33:bb:85:3f:bf:42:54:e1:40:61:8e:db:0f:06:fa:75:93:29:
         ba:70:55:d1:4a:36:3b:d4:fa:f7:b2:e3:76:67:77:f7:64:c0:
         4d:31:40:7b:cd:ac:a9:89:02:99:b2:7d:5b:44:c6:4c:1d:38:
         36:31:a5:6e:1a:7d:17:38:c7:44:16:de:23:3a:3a:57:a6:2d:
         73:3e:48:51:59:3c:d6:f9:12:ee:4b:92:e1:8a:02:e4:4f:98:
         9f:f7:f0:db:24:e8:00:be:e0:73:30:6d:db:99:3e:a1:3a:d8:
         39:87:cb:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----