Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/589ab9d5-eaa2-4a72-8721-78a3fe110680/46efa053-1fab-3a31-8e63-60a1e2fa7187.roa
File:                     46efa053-1fab-3a31-8e63-60a1e2fa7187.roa (raw, json)
Hash identifier:          O12vgVzcUZ3zSN8sI/jJOnXKtafcihTGh0uaiF9h+Go=
Subject key identifier:   04:DB:A0:E8:12:AF:95:AB:28:46:4F:37:ED:5D:5B:5B:51:6C:C2:58
Certificate issuer:       /CN=589ab9d5-eaa2-4a72-8721-78a3fe110680
Certificate serial:       010D0C9F43285840A431967C3721B74682C2BB40
Authority key identifier: 6F:26:7C:76:50:A4:16:47:26:93:39:F7:67:05:4F:80:39:13:A3:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/589ab9d5-eaa2-4a72-8721-78a3fe110680.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/589ab9d5-eaa2-4a72-8721-78a3fe110680/46efa053-1fab-3a31-8e63-60a1e2fa7187.roa
Signing time:             Wed 26 Aug 2020 14:38:22 +0000
ROA not before:           Wed 26 Aug 2020 14:38:22 +0000
ROA not after:            Thu 24 Apr 2025 04:00:00 +0000
asID:                     29802
IP address blocks:        174.136.232.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:a4:31:96:7c:37:21:b7:46:82:c2:bb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=589ab9d5-eaa2-4a72-8721-78a3fe110680
        Validity
            Not Before: Aug 26 14:38:22 2020 GMT
            Not After : Apr 24 04:00:00 2025 GMT
        Subject: CN=b62af377-6d64-4af3-b4d9-bb24b0b93cc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:22:de:70:08:65:87:a9:c3:c5:2b:3e:40:e6:
                    84:09:86:5b:81:03:49:73:b4:cb:37:fb:8a:0a:e9:
                    a1:a5:49:6d:1f:16:4d:cb:8c:60:0a:b4:37:e9:53:
                    eb:ef:94:cc:80:79:e2:0c:62:4b:05:6d:97:26:15:
                    3b:c3:df:53:5b:10:39:4b:b1:b0:ad:9a:a3:36:a5:
                    06:9e:1d:c8:15:b4:ad:c1:4d:d1:54:0c:fd:58:c7:
                    2a:8b:49:13:60:d2:31:f7:9f:b7:71:b8:c6:0f:d8:
                    1f:e2:e0:d4:75:46:54:b9:6e:20:c1:ec:07:08:65:
                    fb:b2:3f:22:2d:ed:dd:c7:c0:81:46:61:32:e6:68:
                    bd:9c:67:62:74:68:5f:21:d2:c9:38:88:6b:9b:dd:
                    e4:2f:14:e6:d5:d8:d3:13:43:5c:4b:3f:8c:51:85:
                    7e:81:05:44:99:1c:d2:dd:45:b4:45:c3:dc:fc:41:
                    22:f7:f3:2f:6d:48:32:43:ca:a1:3c:f4:37:b4:ad:
                    98:a7:78:a8:76:e8:ba:5f:1f:78:f9:e5:6d:62:5e:
                    9c:41:64:86:c9:77:4c:41:24:df:63:f8:8e:eb:03:
                    a1:c9:f0:ae:57:69:25:18:ee:c1:74:49:02:a4:3b:
                    25:6e:10:cf:61:09:c5:d6:f9:b5:26:35:78:fd:9d:
                    be:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:DB:A0:E8:12:AF:95:AB:28:46:4F:37:ED:5D:5B:5B:51:6C:C2:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/589ab9d5-eaa2-4a72-8721-78a3fe110680/46efa053-1fab-3a31-8e63-60a1e2fa7187.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/589ab9d5-eaa2-4a72-8721-78a3fe110680/589ab9d5-eaa2-4a72-8721-78a3fe110680.crl

            X509v3 Authority Key Identifier:
                keyid:6F:26:7C:76:50:A4:16:47:26:93:39:F7:67:05:4F:80:39:13:A3:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/589ab9d5-eaa2-4a72-8721-78a3fe110680.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.136.232.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:6d:07:6a:30:5f:c2:70:88:de:53:7a:66:3e:7c:e9:a3:48:
         56:50:04:55:e6:d3:cf:e3:1d:fb:50:ea:72:45:fb:c7:3a:88:
         f2:1e:5c:6a:30:f5:16:fd:0d:cf:60:0b:5b:3b:aa:22:29:1f:
         45:5e:ab:7b:48:2b:0c:96:cf:9f:bb:1a:c4:b3:4e:0f:4a:b4:
         58:10:f3:a7:a9:4d:5a:d6:1e:ad:ba:a0:d6:d8:f8:37:69:92:
         58:99:47:a2:e6:b4:8a:5b:e4:77:4e:86:88:b4:d2:84:22:f2:
         27:1e:bf:06:c7:67:64:25:3f:1d:a4:1c:be:a7:0d:ec:93:ed:
         c3:2c:1e:25:af:f0:55:10:6c:de:cd:d6:06:49:84:30:c6:ea:
         5d:e7:37:29:0d:0d:e4:f9:7f:35:6d:77:1a:e5:79:86:d4:3f:
         9b:20:c3:74:74:f2:31:83:ed:23:4d:dd:58:ea:f6:b1:77:28:
         8a:d9:fb:d9:20:02:0f:9c:d5:c0:78:da:4d:79:14:e1:fd:f3:
         db:03:12:1c:bb:b1:fe:2c:a0:ee:86:11:17:39:ff:39:f8:db:
         aa:a7:d8:a8:6f:9a:67:40:0e:7c:57:cf:89:b6:a8:85:13:32:
         44:dd:d9:eb:ad:7b:55:f6:53:24:7a:44:c9:fb:1d:68:b8:da:
         49:a7:8f:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----