Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/31f4ce14-1008-3324-81cb-9c0e8807d133.roa
File:                     31f4ce14-1008-3324-81cb-9c0e8807d133.roa (raw, json)
Hash identifier:          v+TQMCdR5WoXMqIO6kIrS9l4IggRERgNvLoS4dNnbXY=
Subject key identifier:   6E:B7:F6:D2:0B:C7:87:06:03:3F:B4:E9:73:CF:C4:8A:C0:A3:C1:99
Certificate issuer:       /CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
Certificate serial:       010D0C9F43285840DB44EDB9A4350F77D72466A0
Authority key identifier: EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/31f4ce14-1008-3324-81cb-9c0e8807d133.roa
Signing time:             Mon 16 Nov 2020 14:57:09 +0000
ROA not before:           Mon 16 Nov 2020 14:57:09 +0000
ROA not after:            Wed 14 May 2025 04:00:00 +0000
asID:                     135752
IP address blocks:        216.185.38.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:db:44:ed:b9:a4:35:0f:77:d7:24:66:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
        Validity
            Not Before: Nov 16 14:57:09 2020 GMT
            Not After : May 14 04:00:00 2025 GMT
        Subject: CN=f72391c4-a400-4ae6-a961-522dfede786c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b7:40:91:ea:90:26:6d:67:e0:6e:c8:ff:e6:
                    b6:26:9a:4c:e8:72:5a:88:9c:4b:45:db:f2:be:34:
                    41:27:92:48:3f:c8:1c:74:fd:86:be:a1:76:61:3f:
                    76:cc:e6:38:ff:17:21:a0:03:59:98:72:fd:b9:56:
                    08:80:f3:81:31:58:93:84:90:0f:f0:3f:ed:b0:d0:
                    bb:ae:75:db:1b:38:5d:4c:d9:36:7e:0f:c0:f6:a7:
                    a4:2f:d2:32:ae:4b:7e:81:dd:80:16:34:97:26:fa:
                    11:9e:ed:34:0d:57:47:3a:00:c9:87:db:78:1f:5a:
                    ee:a4:9a:53:a8:4d:19:24:92:fa:25:3a:01:ba:c9:
                    57:c6:41:07:7c:65:35:34:a0:14:59:e4:85:df:c3:
                    19:3a:be:ca:d0:4b:28:51:e5:ed:45:41:f1:79:8e:
                    47:c2:56:2e:22:ac:f6:66:f2:d8:51:fe:bc:82:bc:
                    8f:9e:04:d0:86:67:6e:3d:eb:ef:76:f2:53:ef:9c:
                    c1:e8:07:99:51:52:7d:7e:63:71:77:4d:45:37:95:
                    db:4c:b7:4c:39:ce:21:88:c3:93:37:cb:5d:d3:6a:
                    c7:18:45:8b:5f:63:c9:9b:df:d3:0e:22:89:a5:4a:
                    a8:95:31:f2:47:91:fa:a4:7a:12:e7:de:64:bf:d4:
                    56:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:B7:F6:D2:0B:C7:87:06:03:3F:B4:E9:73:CF:C4:8A:C0:A3:C1:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/31f4ce14-1008-3324-81cb-9c0e8807d133.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl

            X509v3 Authority Key Identifier:
                keyid:EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.185.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:18:b8:cf:a9:0d:d8:8b:82:bc:e7:c6:9d:22:af:0f:70:71:
         e3:2c:28:20:46:f9:40:cb:dd:18:92:b4:39:f0:01:7d:38:e0:
         16:b3:4a:0c:b6:83:49:dc:ee:7a:f4:0e:5b:e2:0d:ef:ba:45:
         bd:43:73:85:07:aa:26:d0:3c:cc:2f:11:7e:81:9e:80:70:c1:
         82:22:ae:45:41:2b:48:f6:4a:ca:d2:58:ae:3c:22:18:46:a2:
         50:58:e0:db:36:95:60:77:24:15:d9:bb:66:ec:08:09:53:d3:
         fb:01:f1:c8:a8:76:15:e5:05:db:07:b6:15:cc:c1:15:ea:16:
         1b:89:90:97:7e:5c:38:03:8a:79:a8:d7:05:ec:2f:cb:d2:33:
         f7:89:b9:e6:7b:e3:92:e6:44:1e:ab:57:64:7a:3d:5d:0f:37:
         ed:70:3d:d4:ee:1d:40:ec:6e:a5:88:2d:4d:fe:4d:79:fa:8e:
         b1:96:12:f1:41:1d:8e:ec:a4:ef:5a:55:44:b0:7f:11:e6:56:
         a9:45:98:b5:1b:ba:48:fe:a0:05:2a:27:0f:81:56:52:1a:24:
         93:3d:83:2a:1a:bb:d4:99:09:8a:ae:6e:30:b0:e4:af:36:aa:
         59:3e:5e:ea:7c:87:7d:29:5f:ad:65:85:8b:cc:00:d0:67:6f:
         5f:15:76:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----