Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/38596730-0ff0-3d56-aa82-368b2f805907.roa
File:                     38596730-0ff0-3d56-aa82-368b2f805907.roa (raw, json)
Hash identifier:          ZV84etn9pUu2TIirudhdWYLwI6+Gar8YSdoXMYEj9+4=
Subject key identifier:   AA:75:56:EC:77:78:CC:CB:F4:06:61:F7:A0:5A:E1:D4:B6:4E:C5:17
Certificate issuer:       /CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
Certificate serial:       010D0C9F432858427147F904661F32130AFA0C60
Authority key identifier: EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/38596730-0ff0-3d56-aa82-368b2f805907.roa
Signing time:             Wed 05 Jul 2023 05:16:37 +0000
ROA not before:           Wed 05 Jul 2023 05:16:37 +0000
ROA not after:            Tue 03 Oct 2023 05:16:37 +0000
asID:                     834
IP address blocks:        204.19.239.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:71:47:f9:04:66:1f:32:13:0a:fa:0c:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
        Validity
            Not Before: Jul  5 05:16:37 2023 GMT
            Not After : Oct  3 05:16:37 2023 GMT
        Subject: CN=f56ee3aa-99ee-417f-a542-a2521338a37b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:81:20:d9:c2:97:f4:3a:8f:1a:d5:bb:c5:12:
                    1e:47:51:7c:8f:2d:56:89:8c:87:ae:b3:1e:da:b3:
                    d9:ed:e7:d5:8e:92:f5:b4:39:4e:f1:72:e4:c5:8a:
                    6a:2f:f7:d1:7d:8f:de:dc:39:71:f4:35:d6:46:99:
                    3f:af:8a:79:98:8d:ef:5b:8a:9c:1d:7d:36:fb:23:
                    8f:63:70:5c:8f:69:fe:2d:db:8d:ec:1c:a7:3b:9f:
                    3e:9f:d0:06:16:a8:76:0e:d5:a2:2c:99:75:d3:58:
                    8c:69:37:bd:a1:f8:81:db:40:43:ea:23:49:3d:12:
                    12:3f:c7:09:96:28:c7:d4:f2:52:2e:9d:27:c4:5f:
                    41:71:90:8f:d3:15:07:8c:5d:d6:fd:05:f4:d8:d9:
                    1b:eb:74:ea:fb:58:94:92:9f:2e:18:ee:87:f1:1f:
                    e4:60:06:0d:a6:c5:00:1a:dc:95:da:82:1b:41:41:
                    73:5e:b1:e0:d6:62:52:8b:f4:d1:e9:42:3a:86:bf:
                    e2:c7:04:64:ae:b9:1d:39:1a:ad:b7:1d:e9:2a:d9:
                    d2:52:6d:87:37:ef:15:80:5b:79:1e:9f:e4:0e:3a:
                    5d:ff:ee:40:68:c3:12:07:fe:3f:bc:49:4f:43:42:
                    90:b1:74:12:77:43:f8:c7:e9:92:65:2e:03:cb:09:
                    cd:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:75:56:EC:77:78:CC:CB:F4:06:61:F7:A0:5A:E1:D4:B6:4E:C5:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/38596730-0ff0-3d56-aa82-368b2f805907.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl

            X509v3 Authority Key Identifier:
                keyid:EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.19.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:62:41:69:40:d7:03:fc:b5:e4:ce:45:68:f2:04:40:73:b2:
         d9:16:b4:4b:c9:76:50:43:4f:53:e7:26:fd:f2:e1:bf:69:e7:
         57:aa:24:0e:5f:08:b7:ca:ef:ee:27:df:58:a8:75:2c:00:6d:
         90:a6:2b:ee:d8:c5:02:5c:a3:91:e8:4f:08:a8:c1:e8:0a:88:
         56:5f:dd:31:95:09:3d:32:6d:27:8a:b0:22:ce:d4:7f:b9:f7:
         2d:38:92:f4:f7:fb:14:ed:f5:0b:9b:b3:96:ee:3b:e7:bc:0b:
         fe:bd:fc:4d:6f:9f:7b:92:3c:f0:ad:1c:2a:44:56:f3:8e:e5:
         78:9e:a9:a1:77:4f:be:74:48:90:25:2d:cc:65:44:48:ab:82:
         99:06:3f:77:c8:61:38:1d:6f:81:14:53:00:cc:3f:61:1a:1b:
         6d:dd:f4:f7:a8:0b:f4:2b:35:56:ca:14:a8:f9:a8:36:d6:ab:
         6a:1a:09:5b:34:f2:c3:28:73:8b:91:c6:f2:32:95:bf:fd:0d:
         d2:a2:30:ae:f5:b7:94:90:8c:a0:0c:ca:92:38:d6:76:04:07:
         b6:06:d7:5e:9b:52:52:b3:12:ee:5d:2c:2f:9c:df:fd:84:d0:
         c1:f4:bc:39:55:16:e9:88:cc:e9:69:bd:f0:18:77:61:ea:3b:
         db:4f:cc:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----