Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2cfa2a08-c683-37b8-94db-0097c806169a.roa
File:                     2cfa2a08-c683-37b8-94db-0097c806169a.roa (raw, json)
Hash identifier:          Ze/G+yOvms7ha3xNMA30GpYC7Iusk1dhqRlyeyAZnQA=
Subject key identifier:   5D:62:F8:C6:5A:8A:C8:B6:89:64:75:72:A8:03:D5:D3:2B:0C:4F:62
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285845A15E1C6301371FC3C6FB84C0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2cfa2a08-c683-37b8-94db-0097c806169a.roa
Signing time:             Mon 22 Apr 2024 13:00:33 +0000
ROA not before:           Mon 22 Apr 2024 13:00:33 +0000
ROA not after:            Sun 21 Jul 2024 13:00:33 +0000
asID:                     397630
IP address blocks:        192.177.173.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jul 2024 04:42:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a1:5e:1c:63:01:37:1f:c3:c6:fb:84:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr 22 13:00:33 2024 GMT
            Not After : Jul 21 13:00:33 2024 GMT
        Subject: CN=7ef3a2e9-ddf2-4cf8-9c18-df40649ef0ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:53:0c:15:2b:80:9b:89:c4:7e:6d:81:b9:7e:
                    7d:87:7f:08:70:0f:2a:3f:24:c6:69:14:fb:50:bb:
                    f9:6f:7d:e3:da:a5:42:bc:0b:1f:ff:bd:20:ee:5e:
                    67:04:f3:7a:87:98:eb:9e:2a:aa:b1:9a:8a:cc:f1:
                    14:a8:d9:9f:3e:c3:6d:b0:93:8c:ce:e4:f4:b8:ea:
                    34:2a:44:f8:1f:70:40:53:6c:05:79:bc:ce:0d:f5:
                    07:67:05:38:39:c6:0c:f9:31:33:fb:98:5c:6f:bb:
                    28:e6:3f:f7:b8:3b:cd:1e:80:18:c1:3c:cb:b6:31:
                    81:c0:3c:96:be:e9:17:01:ea:c2:ec:de:f6:f5:f9:
                    b5:e5:24:53:de:7b:20:3f:19:b0:27:67:20:41:4c:
                    05:d4:02:77:ec:55:77:c6:b1:80:e8:fa:ce:af:45:
                    87:ef:e1:1e:bd:e1:64:10:15:5f:cc:5d:b3:84:b4:
                    e1:c3:8f:b5:f4:29:9f:99:f5:09:17:f1:f3:b8:f2:
                    02:f4:1a:de:21:0f:4e:f3:fe:8a:e1:86:a6:b0:8d:
                    23:10:be:e0:42:69:01:1d:f4:5d:e3:76:02:48:70:
                    d5:81:16:03:64:d2:5f:f6:a9:37:1d:95:72:26:53:
                    d8:99:7c:37:10:92:30:11:24:ee:72:37:39:ae:f0:
                    24:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:62:F8:C6:5A:8A:C8:B6:89:64:75:72:A8:03:D5:D3:2B:0C:4F:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2cfa2a08-c683-37b8-94db-0097c806169a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.177.173.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:31:cb:03:15:e8:93:9e:d1:3f:d0:1f:c2:7d:c8:f6:25:a6:
         54:08:37:bb:e4:91:f6:c1:b1:49:8a:36:51:25:19:6d:2d:eb:
         9c:8b:03:85:db:d2:fb:f5:a7:09:d7:22:2c:2b:1c:55:de:8b:
         08:ce:d2:a6:90:f0:08:f6:9f:d3:2d:8d:0e:fb:f6:3c:a5:47:
         f4:22:1d:52:03:99:d2:49:86:e4:16:ce:87:93:58:16:5d:0a:
         72:48:60:40:da:a4:db:1a:01:0c:d6:7d:2b:24:a8:0f:8b:f9:
         2f:65:d6:82:38:a3:bd:e9:43:b9:a3:e0:7f:61:78:0b:14:47:
         68:ce:a3:e5:1e:d5:f7:f8:c1:33:fd:8f:ec:f5:c8:ed:18:b5:
         57:ec:af:72:d0:f6:86:2b:68:17:79:b6:7f:82:36:1b:28:c0:
         97:2e:74:34:ce:d6:6f:3a:02:d2:b9:da:9e:60:d3:82:f4:a5:
         01:05:03:37:f6:90:c2:8f:47:0f:5b:8e:79:c6:00:af:47:d2:
         0d:ce:f5:11:59:63:c5:b4:1f:58:5a:c2:b6:99:3a:97:62:53:
         ef:35:06:df:4a:52:3d:72:8e:2d:83:9f:ef:77:3d:b6:59:8e:
         d9:f7:7c:b1:25:6a:98:19:46:60:bd:57:37:11:83:57:6c:19:
         b5:c4:ce:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----