Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/c9158899-a6f6-33e6-abca-ddd6688031dd.roa
File:                     c9158899-a6f6-33e6-abca-ddd6688031dd.roa (raw, json)
Hash identifier:          PwxNea00dDsY7/T/GSA7AhnXz7gCh71LCDGgRk3E/aM=
Subject key identifier:   1B:74:0D:8F:4C:58:D6:47:DC:FB:F8:51:1E:9D:BB:54:D4:5D:86:0C
Certificate issuer:       /CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52
Certificate serial:       010D0C9F43285841F5F2AB5DB05DD85AA43651D0
Authority key identifier: 06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/c9158899-a6f6-33e6-abca-ddd6688031dd.roa
Signing time:             Mon 22 May 2023 01:00:17 +0000
ROA not before:           Mon 22 May 2023 01:00:17 +0000
ROA not after:            Sun 20 Aug 2023 01:00:17 +0000
asID:                     55002
IP address blocks:        69.51.32.0/19 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:f5:f2:ab:5d:b0:5d:d8:5a:a4:36:51:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52
        Validity
            Not Before: May 22 01:00:17 2023 GMT
            Not After : Aug 20 01:00:17 2023 GMT
        Subject: CN=fea1876c-88a4-4bb4-af53-fb5851554961
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:53:04:7e:86:f0:52:e7:7b:38:5e:53:d6:b6:
                    1f:a5:fc:57:65:07:50:60:41:c2:0b:e1:95:95:bf:
                    0b:c2:fa:c8:32:68:2a:e7:a3:c0:03:6a:7d:a5:00:
                    3a:f1:b3:ef:29:d6:bf:2d:a7:10:a1:ed:ad:f1:04:
                    30:18:db:43:ff:29:64:82:49:c6:a9:b6:9e:bb:d4:
                    ab:e3:ec:05:26:83:d9:3b:ab:ca:78:62:7b:f3:e1:
                    cf:30:0f:7c:ce:cf:b8:65:81:ff:56:d0:cf:c0:f3:
                    d2:80:4b:3c:3f:a0:a0:3f:ac:2b:7c:41:72:0b:09:
                    6d:93:8d:e7:9e:cb:f4:2f:79:88:fd:17:c5:2b:43:
                    ad:8a:09:a4:a3:26:fa:c1:84:e7:82:11:17:79:cd:
                    23:4d:49:99:36:d0:71:c8:d1:4a:4c:6e:81:01:0f:
                    13:71:65:a5:6b:16:bc:e8:a4:72:d7:ba:82:e3:30:
                    25:2b:e4:b3:1c:2b:fa:4f:d8:3e:10:2e:00:46:ec:
                    82:ae:e1:8d:c5:9a:03:02:92:1c:54:6c:98:4b:a1:
                    46:ca:0a:9b:5c:7f:ac:81:f9:55:2f:2d:c0:7b:75:
                    88:3c:4d:ed:6a:4b:74:04:6c:0e:c0:83:3e:ff:01:
                    96:c5:89:d5:2c:cf:1c:0e:5d:b5:4c:0c:de:8e:bc:
                    81:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:74:0D:8F:4C:58:D6:47:DC:FB:F8:51:1E:9D:BB:54:D4:5D:86:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/c9158899-a6f6-33e6-abca-ddd6688031dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl

            X509v3 Authority Key Identifier:
                keyid:06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.51.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:46:1c:b6:5f:57:9a:0f:a3:3d:97:88:0a:48:bd:ec:f8:a8:
         67:0b:df:4f:7e:22:55:6f:3e:fc:d4:4e:d9:6f:32:30:86:4a:
         72:d1:b8:82:e8:a4:62:cb:17:10:fe:fb:14:5c:28:db:99:ff:
         26:23:fc:b4:49:da:3d:22:b4:04:e9:aa:76:e2:d0:f5:58:44:
         df:05:85:81:7f:a7:85:54:1d:47:28:35:ce:ef:d6:6a:d6:54:
         27:6d:77:f9:65:31:39:3d:9a:21:b1:f9:a7:c2:7d:8e:94:d6:
         46:1e:c3:b1:01:c5:ed:cb:6b:ef:10:02:e0:5b:c6:f8:36:80:
         45:2d:4e:28:90:f0:a9:e3:52:ed:7f:47:1e:bb:d3:dc:7d:ec:
         8a:19:63:05:ff:a0:a1:c0:6a:28:e4:90:a5:48:ad:14:e6:3f:
         c5:bf:00:94:ef:0c:10:55:4d:13:52:ce:0d:58:bc:3a:a3:f5:
         98:de:26:35:1c:a1:b3:56:42:bb:4d:22:ee:53:8e:cb:18:80:
         bf:1e:0b:0b:10:8c:01:c8:69:e6:15:44:b5:47:b1:9f:7f:d0:
         9e:1e:a1:98:94:d2:9a:11:c5:2e:89:ac:07:e7:f6:40:1d:61:
         61:15:35:03:ac:6e:b0:af:09:d4:7d:28:f9:53:10:14:24:c8:
         19:ca:3c:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----