Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/ce7df6a0-74be-3d9a-8942-11efba309f8d.roa
File:                     ce7df6a0-74be-3d9a-8942-11efba309f8d.roa (raw, json)
Hash identifier:          DXVakvfBu9zooLVL1oNBMCuSFgYmERXZXPoMC0vzO1U=
Subject key identifier:   19:5B:BA:59:B4:BA:0E:97:9A:37:30:AD:D0:20:2E:1C:CA:FC:71:CC
Certificate issuer:       /CN=71ea89b4-ed85-463f-83d9-8453300bf2bd
Certificate serial:       010D0C9F4328583A7C7B54DAC5CEC21FC8812F80
Authority key identifier: 00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/ce7df6a0-74be-3d9a-8942-11efba309f8d.roa
Signing time:             Wed 21 Oct 2020 04:00:00 +0000
ROA not before:           Wed 21 Oct 2020 04:00:00 +0000
ROA not after:            Wed 08 Oct 2025 04:00:00 +0000
asID:                     7862
IP address blocks:        146.23.36.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:7c:7b:54:da:c5:ce:c2:1f:c8:81:2f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71ea89b4-ed85-463f-83d9-8453300bf2bd
        Validity
            Not Before: Oct 21 04:00:00 2020 GMT
            Not After : Oct  8 04:00:00 2025 GMT
        Subject: CN=f8c5487a-2a3c-4094-a8ce-b987ddb0595b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:3b:f2:97:fc:4b:6d:7a:79:1a:48:33:e9:76:
                    85:0b:9a:7b:d9:0f:c4:b9:b3:1b:68:8d:97:5d:85:
                    fa:5b:d8:6f:d7:09:72:c6:d0:ad:25:07:37:ca:e7:
                    43:76:c5:f1:00:64:b9:85:21:58:6c:8d:e3:8f:8a:
                    f0:77:7a:05:bf:34:61:93:a2:08:f9:a8:85:8b:2f:
                    07:cc:e3:1a:67:fb:6c:70:67:3f:a4:73:90:04:e5:
                    6d:9a:54:81:f7:1d:7d:ce:71:72:c7:92:2d:cc:04:
                    92:02:2b:f7:ec:69:64:d4:d1:7f:4f:fc:2f:9f:3d:
                    89:ae:7e:96:d7:82:a1:95:b9:e4:bb:c6:2b:d8:aa:
                    d8:68:1d:62:79:1a:cf:09:c7:37:63:4b:64:10:32:
                    66:28:f2:dd:b1:67:d4:8a:78:ec:4e:95:ce:f1:db:
                    dd:a2:f9:cf:26:6c:17:26:93:8d:6b:19:f6:8e:d9:
                    f1:c8:a2:a0:bb:9b:b6:ef:16:3c:d3:6d:73:d5:f2:
                    4b:45:eb:86:b8:f5:dd:42:50:0c:24:29:34:10:e5:
                    62:b2:6d:e8:77:f5:eb:72:a4:25:28:ff:2b:28:4e:
                    4a:b2:72:f3:2b:15:c4:da:21:36:ab:a1:c9:c9:4b:
                    53:1b:23:53:8a:cf:e0:4a:9f:3c:fb:e9:f9:38:84:
                    0a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:5B:BA:59:B4:BA:0E:97:9A:37:30:AD:D0:20:2E:1C:CA:FC:71:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/ce7df6a0-74be-3d9a-8942-11efba309f8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.crl

            X509v3 Authority Key Identifier:
                keyid:00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.23.36.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:e4:bf:4b:8a:fc:ff:36:74:ba:4a:e3:3b:a5:27:76:5f:07:
         66:6e:20:fb:17:eb:de:a4:58:f1:3d:01:91:ff:31:93:12:96:
         15:ec:91:e7:c3:2f:65:8b:c2:ab:33:31:09:d3:d7:63:0f:6c:
         ba:39:ab:fd:ef:ba:e5:8b:63:b6:9c:da:ce:e5:5b:7b:65:49:
         f6:50:d2:4f:ef:7e:d4:3f:b3:a2:fd:96:e2:ca:b9:d8:84:64:
         d8:99:57:eb:c2:c6:ae:ad:b0:e5:d9:4f:52:9a:90:3b:c8:33:
         56:90:2b:72:3e:e3:eb:77:31:7b:4d:19:47:e9:62:3c:d5:ea:
         da:28:87:05:d8:84:23:0d:c8:49:2d:4f:8b:f7:bb:4f:d2:04:
         c0:51:40:f3:5f:6b:47:24:6f:fe:b3:9d:4c:d3:17:e1:b0:fb:
         ed:d8:20:85:a7:64:4e:27:b2:93:a0:88:5c:91:57:d4:7a:c6:
         5e:03:30:5e:f5:f2:b1:40:64:a9:c9:0e:00:27:2f:2b:34:7d:
         0b:13:3c:82:ae:08:87:89:83:8a:22:80:c2:20:00:44:17:0e:
         07:d3:57:f6:5d:10:ea:78:e9:07:b5:70:c0:f6:c3:67:22:f0:
         21:18:d4:c8:10:4e:fd:10:0d:ee:b8:ca:a2:91:cf:4b:08:25:
         19:26:b3:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----