Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081/735d8e10-7540-395e-bf89-ed8ab1c91b34.roa
File:                     735d8e10-7540-395e-bf89-ed8ab1c91b34.roa (raw, json)
Hash identifier:          JMEQGTU9s+H368RoWHsiugyD71sGrvg8Tz3BW45s4mQ=
Subject key identifier:   A4:CE:CC:29:DC:8D:4C:98:72:6E:C4:8A:DF:70:4B:11:49:39:F6:57
Certificate issuer:       /CN=2ccef7a6-b8db-4753-b71f-dd2e40d58081
Certificate serial:       010D0C9F4328583ECD75F83DBFB5B3B158854E5A
Authority key identifier: E2:C2:CF:84:93:6A:CB:B4:7D:66:12:04:5C:13:88:E7:23:E3:F0:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081/735d8e10-7540-395e-bf89-ed8ab1c91b34.roa
Signing time:             Tue 22 Dec 2020 20:12:34 +0000
ROA not before:           Tue 22 Dec 2020 20:12:34 +0000
ROA not after:            Thu 07 Nov 2024 05:00:00 +0000
asID:                     834
IP address blocks:        199.253.31.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:cd:75:f8:3d:bf:b5:b3:b1:58:85:4e:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ccef7a6-b8db-4753-b71f-dd2e40d58081
        Validity
            Not Before: Dec 22 20:12:34 2020 GMT
            Not After : Nov  7 05:00:00 2024 GMT
        Subject: CN=e8ef7303-2407-425e-a26b-a333f826c6a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:b2:19:53:36:00:1c:6a:17:bd:69:56:3a:9f:
                    0e:da:c3:fe:ca:97:55:8c:7b:aa:ff:ee:23:6c:de:
                    2a:ed:a0:cb:28:71:b8:0b:ec:7b:f5:2f:0f:92:03:
                    f0:40:9a:95:af:04:44:bc:df:e3:1b:2e:75:82:fe:
                    0c:af:0b:10:7b:c8:49:a1:f2:87:75:fd:15:ef:c7:
                    30:16:28:8b:54:64:75:01:9a:b3:ea:f5:12:70:e2:
                    ae:f3:8e:fc:43:f5:4c:07:c7:f6:66:97:b2:42:27:
                    4a:14:2b:e7:81:fb:ff:74:63:fb:55:f1:f5:d2:6c:
                    30:90:5b:13:c7:0b:89:c8:70:39:57:55:8c:87:07:
                    c0:af:1f:bb:95:e1:a8:e6:f3:17:06:91:3e:38:b2:
                    74:2f:05:90:38:54:5c:99:56:e1:5d:44:96:3a:cf:
                    c9:75:fe:50:19:7c:11:4d:84:2c:f3:86:8a:c6:ab:
                    46:41:43:f7:74:b3:58:ce:e9:40:b2:24:9b:ba:76:
                    49:87:0c:93:65:98:5e:1d:e0:02:d3:bc:8f:0e:1e:
                    39:a9:74:eb:b7:52:9e:78:39:61:ae:a2:19:40:56:
                    9d:dc:d2:b0:ee:07:e5:81:7b:ed:f9:e4:be:24:2b:
                    56:01:0e:2f:ed:a9:b1:b2:5b:92:07:45:ad:80:2f:
                    5d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:CE:CC:29:DC:8D:4C:98:72:6E:C4:8A:DF:70:4B:11:49:39:F6:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081/735d8e10-7540-395e-bf89-ed8ab1c91b34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081/2ccef7a6-b8db-4753-b71f-dd2e40d58081.crl

            X509v3 Authority Key Identifier:
                keyid:E2:C2:CF:84:93:6A:CB:B4:7D:66:12:04:5C:13:88:E7:23:E3:F0:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2ccef7a6-b8db-4753-b71f-dd2e40d58081.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.253.31.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:fd:3b:ec:b7:97:1d:a2:12:0a:a3:06:ae:e5:17:8a:2a:49:
         6d:98:56:fa:b1:59:af:6b:85:b9:80:b5:c2:1d:8a:c2:16:fa:
         3c:dd:a9:0b:f2:5c:7b:02:6c:72:6c:8f:36:83:5c:f5:09:16:
         39:49:e6:90:db:73:bc:15:ca:6a:08:6a:ac:50:5a:9f:d9:fd:
         12:2d:f0:88:b5:d3:b6:54:c8:5b:50:3a:bc:12:54:26:92:ef:
         b6:59:a3:ec:19:f9:c9:8c:46:97:81:2a:4f:b9:d8:ae:d6:5f:
         0a:89:1b:81:76:58:65:a1:03:da:ce:8f:2d:b3:78:42:1e:9d:
         fe:71:56:1d:d3:97:9f:58:d2:ef:36:8d:58:54:e8:6f:e8:1d:
         b9:29:c7:14:41:13:9d:91:96:d4:6b:13:2d:b4:2b:a4:88:b0:
         c8:f1:c2:be:da:3f:db:69:16:58:7b:fa:a7:4a:5f:ce:d2:1b:
         5c:3a:8f:5a:4a:fb:eb:72:dc:17:13:cb:45:f0:c6:0c:e9:44:
         c3:97:4d:36:c9:f5:9c:36:c3:47:3e:01:ec:2b:59:1c:9c:55:
         0e:fb:a6:a9:ac:04:81:05:29:43:88:8a:9a:ba:b6:e9:b3:6d:
         a9:2c:e6:98:78:12:80:fa:2d:d6:d1:a7:9d:69:97:48:c0:c6:
         3b:f6:f7:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----