Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/f200825c-11e8-3632-9acf-d05db01483ab.roa
File:                     f200825c-11e8-3632-9acf-d05db01483ab.roa (raw, json)
Hash identifier:          xjHmHp6WPSLNJ8OUkL0NnUL9E9+/CcHhe4Zm+sZf9ig=
Subject key identifier:   BA:9B:79:50:74:A2:50:99:87:F4:18:89:C3:75:D9:2C:CD:79:52:7D
Certificate issuer:       /CN=269d2481-9b5f-41f2-a09c-92994a3ae335
Certificate serial:       010D0C9F4328583F090C6F179C1C61FA1845DFC0
Authority key identifier: 6F:D8:81:3C:73:19:9C:F6:AD:A5:DB:82:9A:A0:53:16:FF:23:ED:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/f200825c-11e8-3632-9acf-d05db01483ab.roa
Signing time:             Fri 25 Sep 2020 18:17:59 +0000
ROA not before:           Fri 25 Sep 2020 18:17:59 +0000
ROA not after:            Thu 28 Nov 2024 05:00:00 +0000
asID:                     272786
IP address blocks:        173.249.166.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:09:0c:6f:17:9c:1c:61:fa:18:45:df:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=269d2481-9b5f-41f2-a09c-92994a3ae335
        Validity
            Not Before: Sep 25 18:17:59 2020 GMT
            Not After : Nov 28 05:00:00 2024 GMT
        Subject: CN=234bdd26-8bf2-4576-acb8-9723329c2927
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:e0:28:d0:dd:28:e9:16:f8:44:dc:b4:38:8e:
                    7b:a7:40:15:d1:70:a0:6a:c3:be:c5:ad:bd:85:7d:
                    af:28:27:76:26:b4:76:d2:2c:37:1f:b9:40:23:4c:
                    c5:3c:62:47:90:41:7f:ac:9d:f0:b7:42:6d:8d:08:
                    ed:93:a2:9c:08:aa:76:06:4d:1f:93:79:ec:c0:ed:
                    38:c8:0b:19:9f:ae:a8:82:05:c9:55:85:0b:c2:36:
                    58:0e:95:09:64:bf:75:8b:6b:67:91:50:fa:8e:a6:
                    6a:ba:ee:40:dc:a7:c2:fb:59:fd:db:f1:87:e6:36:
                    6c:a5:66:fd:64:74:d7:c5:60:5c:90:e1:eb:e3:f0:
                    07:da:87:6c:5d:ea:fa:90:ef:7d:4f:63:35:ee:6c:
                    47:4e:f2:03:9d:d9:79:17:98:e7:20:5a:23:8f:b3:
                    94:67:ae:52:57:5b:7a:61:b7:5a:57:a3:56:c3:94:
                    97:33:ad:bd:50:95:27:66:c3:86:cc:31:a7:c9:5d:
                    d8:19:5e:6d:d1:c1:cb:1c:ec:9c:f2:ca:d0:53:a5:
                    27:ac:e2:46:9b:76:78:8f:03:4a:59:9c:0b:4b:73:
                    cc:e4:f9:7e:f4:88:61:97:95:5b:a6:65:a6:30:90:
                    67:af:58:fb:ed:d4:06:0d:31:e2:f6:c6:d8:c7:53:
                    af:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:9B:79:50:74:A2:50:99:87:F4:18:89:C3:75:D9:2C:CD:79:52:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/f200825c-11e8-3632-9acf-d05db01483ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/269d2481-9b5f-41f2-a09c-92994a3ae335.crl

            X509v3 Authority Key Identifier:
                keyid:6F:D8:81:3C:73:19:9C:F6:AD:A5:DB:82:9A:A0:53:16:FF:23:ED:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.249.166.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:a1:32:bc:9c:0b:d2:ba:c1:95:81:44:ad:1e:97:97:6d:12:
         1f:9b:c0:3a:17:13:94:0c:09:91:23:f0:eb:48:17:aa:54:7b:
         2f:f4:95:80:53:c6:dd:d2:cf:1e:f0:3a:53:8c:cf:c8:b1:88:
         46:c7:d3:ba:60:5d:fd:fc:6b:ad:d1:f0:bc:70:21:56:c0:77:
         d7:ed:ba:b5:4a:f4:eb:dd:b8:3c:1f:9a:70:37:35:03:1f:a3:
         d9:68:48:33:8e:18:72:cb:43:ca:b1:70:60:c6:64:96:96:fc:
         c5:de:52:ff:11:f9:0f:ca:27:dc:68:fb:d4:6c:02:3c:9e:62:
         6e:72:ce:46:46:c3:1b:24:f3:e7:a6:b8:fe:1f:7c:8b:e4:3b:
         eb:00:5b:57:ad:e5:55:7b:bc:ef:20:41:ce:a0:9d:7f:9d:12:
         35:3a:98:4e:d6:10:f7:0c:b3:78:06:8d:0f:10:9c:3c:e5:25:
         18:a3:b6:07:24:30:25:32:4e:3d:5b:59:06:40:b0:11:c2:31:
         5c:f1:95:d1:f9:f8:b9:d3:ed:70:29:61:d0:2e:d3:7b:d5:75:
         e6:22:51:07:9a:e5:71:58:9b:08:6a:c9:25:d7:9c:8a:79:78:
         a9:62:9e:a4:1e:77:6f:90:3b:35:1e:df:b8:3a:8a:87:97:e5:
         cb:be:d0:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----