Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/ab236ada-73f9-31f2-88a8-1e9f245c21ca.roa
File:                     ab236ada-73f9-31f2-88a8-1e9f245c21ca.roa (raw, json)
Hash identifier:          ehEtYEaCYu1C13H0kWXZF5H3XEIiMItgTbl2GJI/kDA=
Subject key identifier:   D1:05:A4:E0:90:C4:18:C4:F2:15:55:E9:BD:96:AB:F2:A4:7E:D4:14
Certificate issuer:       /CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
Certificate serial:       010D0C9F43285842F3B0B41E2F6FF34D0557C940
Authority key identifier: EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/ab236ada-73f9-31f2-88a8-1e9f245c21ca.roa
Signing time:             Sun 20 Aug 2023 22:22:44 +0000
ROA not before:           Sun 20 Aug 2023 22:22:44 +0000
ROA not after:            Sat 18 Nov 2023 23:22:44 +0000
asID:                     834
IP address blocks:        204.19.239.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:f3:b0:b4:1e:2f:6f:f3:4d:05:57:c9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
        Validity
            Not Before: Aug 20 22:22:44 2023 GMT
            Not After : Nov 18 23:22:44 2023 GMT
        Subject: CN=344a8955-b77e-4f74-8af7-8ceb0f1cd468
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:1f:61:a7:ed:cf:d8:76:ed:43:4e:9b:53:5a:
                    ca:22:19:c5:ba:58:55:ec:97:c0:16:0b:0f:44:1e:
                    1c:23:eb:c8:f5:dc:19:2f:da:9f:b6:29:c1:21:25:
                    5a:70:a8:94:6f:b9:c0:f1:e7:2b:5f:7d:88:3f:8b:
                    db:fd:1b:2c:d8:1c:12:01:e9:2b:7c:cb:da:a1:9d:
                    07:ea:0a:77:e0:29:fc:4d:ab:1c:47:8c:6b:fe:67:
                    37:60:00:32:d5:d6:4b:66:16:31:d9:43:8c:5b:43:
                    c7:1f:04:45:47:f1:bb:98:1f:52:34:91:fe:98:8d:
                    f6:9c:a8:3f:ad:1e:46:9e:04:47:82:a7:10:51:1c:
                    57:45:bb:be:22:53:da:d0:7a:56:fe:b4:fc:d4:ed:
                    2a:e7:95:67:5f:b9:3f:93:b9:f4:25:7c:af:13:f4:
                    0b:c3:b1:68:6f:1b:ae:10:ed:b0:d6:56:d2:f3:fc:
                    81:d2:90:35:a7:9b:b8:25:d9:37:7c:99:da:dd:58:
                    8c:b2:c1:6f:18:61:29:32:96:b9:c2:d0:e0:79:9d:
                    8d:68:f2:9f:82:1f:92:ef:eb:13:e8:37:f4:66:77:
                    10:e1:9b:95:95:37:15:43:6d:24:58:0b:ed:6b:b7:
                    e6:89:5d:2d:11:28:8f:f5:c4:26:8a:f6:01:ef:c1:
                    32:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:05:A4:E0:90:C4:18:C4:F2:15:55:E9:BD:96:AB:F2:A4:7E:D4:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/ab236ada-73f9-31f2-88a8-1e9f245c21ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl

            X509v3 Authority Key Identifier:
                keyid:EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.19.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:7a:8a:61:9c:16:2a:e1:14:ff:09:31:56:13:ca:f7:1e:98:
         fd:03:9a:b1:6c:8b:00:a6:5e:62:89:62:3e:f6:b0:8c:7b:81:
         26:f8:33:0e:a5:c3:3e:1d:88:21:c6:62:7d:d1:84:b3:12:9a:
         62:f1:fb:8d:b0:56:d1:fd:a7:64:3f:6b:b6:8f:c7:5e:d6:8a:
         0a:19:60:79:1b:ea:5b:a8:f4:0f:5c:80:20:3d:15:4f:07:24:
         65:7a:62:de:3a:32:65:6c:40:0e:6b:5a:67:74:ab:6c:08:aa:
         9d:d6:e0:f8:8a:96:30:2a:52:06:26:02:aa:4c:24:aa:0b:26:
         d4:4a:36:7c:a0:a9:9b:4b:43:32:cf:54:0b:a1:45:c4:0a:e9:
         34:c4:5b:bd:32:79:fa:07:01:ec:c4:73:5b:01:ec:6a:dc:5f:
         10:2a:49:3b:5f:5b:35:39:1f:fe:fe:57:75:95:5c:d1:ce:da:
         b3:90:e6:ce:6e:d6:65:aa:26:fe:bd:0d:fe:40:04:ae:df:5e:
         87:ec:ea:bf:a9:43:20:34:b2:42:5d:8c:4b:0c:ce:1d:5e:68:
         a0:91:3e:55:f5:a6:a0:61:eb:f7:b3:66:0e:d6:39:c5:e7:21:
         63:a7:af:23:f2:f8:33:00:3c:4e:19:88:30:54:5c:4a:5f:34:
         be:45:10:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----