Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/6ffb2391-1479-3d26-b5eb-bfd200bf63cb.roa
File:                     6ffb2391-1479-3d26-b5eb-bfd200bf63cb.roa (raw, json)
Hash identifier:          cvtaHN31M4lD/ePyZQflfKb+UwEwP+sRHFOLxh5bNBE=
Subject key identifier:   87:7E:83:BD:54:0C:6D:6A:4C:9C:4A:75:A2:93:A0:79:56:80:D1:19
Certificate issuer:       /CN=8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd
Certificate serial:       010D0C9F4328583E41C051AAF3CD8CDCE3672080
Authority key identifier: 97:FC:85:1D:72:C6:73:DC:60:DC:E4:F3:FA:12:C4:FA:2B:F3:46:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/6ffb2391-1479-3d26-b5eb-bfd200bf63cb.roa
Signing time:             Mon 18 May 2020 13:23:09 +0000
ROA not before:           Mon 18 May 2020 13:23:09 +0000
ROA not after:            Mon 11 Mar 2024 04:00:00 +0000
asID:                     225
IP address blocks:        66.180.190.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:41:c0:51:aa:f3:cd:8c:dc:e3:67:20:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd
        Validity
            Not Before: May 18 13:23:09 2020 GMT
            Not After : Mar 11 04:00:00 2024 GMT
        Subject: CN=55f51e49-05a0-4085-86b1-aa5b7753c451
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:9c:50:c1:cb:59:01:33:9c:95:ab:b1:a1:2a:
                    68:6e:eb:5d:56:ae:2b:c3:24:8f:f3:c9:bd:f5:1d:
                    ed:c9:5c:7e:53:bf:4e:be:3e:63:e0:b4:f0:67:a6:
                    1a:c0:9d:d7:22:82:77:57:8a:e4:7e:43:70:8f:1d:
                    2a:0c:91:b0:9a:09:47:df:3a:05:9c:cf:8b:f5:7e:
                    09:47:82:9a:8e:3a:da:85:6c:1c:02:fa:e9:bf:d5:
                    05:43:96:30:83:7c:20:07:03:57:b0:36:91:be:8c:
                    16:b3:6d:0c:f5:c7:f5:a1:9d:d4:c3:32:56:5c:92:
                    b8:da:60:af:43:0f:05:66:a7:11:92:94:44:cc:bc:
                    3a:ac:1b:d5:ac:44:cb:de:d8:30:b4:92:ee:fa:08:
                    de:24:c2:2d:ba:e4:a2:9b:ff:d9:f4:bd:8d:41:49:
                    80:a1:cf:55:68:1b:a1:f8:9e:b4:67:de:13:bc:3e:
                    54:9f:e0:9e:b7:2e:1f:a1:d6:e6:c8:1f:92:77:3b:
                    4b:f3:70:06:3a:7f:1d:c2:2b:3e:9c:7c:3a:45:c4:
                    01:b3:2f:3e:64:f7:9a:91:29:6a:04:08:3d:1f:79:
                    d2:8d:25:a3:2c:77:cb:fb:7c:4e:78:a1:a8:40:28:
                    8a:19:06:76:8b:e5:eb:b6:91:36:49:e2:59:7b:15:
                    ff:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:7E:83:BD:54:0C:6D:6A:4C:9C:4A:75:A2:93:A0:79:56:80:D1:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/6ffb2391-1479-3d26-b5eb-bfd200bf63cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.crl

            X509v3 Authority Key Identifier:
                keyid:97:FC:85:1D:72:C6:73:DC:60:DC:E4:F3:FA:12:C4:FA:2B:F3:46:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8bfc16fe-bf0a-4f3a-a65e-217d8f8c3ecd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.180.190.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:72:8f:c6:e2:e0:d3:ad:a4:54:f7:27:1e:58:e0:b5:45:45:
         e6:dd:a8:7a:29:e6:a1:c5:cc:d5:b5:82:77:90:96:67:01:03:
         37:6c:68:f5:66:51:37:31:f6:59:2c:33:29:f8:f2:47:06:6b:
         fc:58:a0:68:49:75:ba:6d:89:e4:f3:41:3d:34:6b:52:3f:e6:
         5d:f6:fc:7e:b4:e8:72:74:c4:87:14:73:6a:88:71:62:dd:5a:
         75:ee:6d:4c:4d:22:18:bc:36:cf:ae:f6:fd:f2:af:4b:63:16:
         31:a9:62:14:bf:ff:b5:9a:3d:90:bb:67:ed:bb:4a:b5:9e:eb:
         7a:c8:3b:a8:77:76:31:37:0a:d8:49:8c:36:75:3f:4c:81:ab:
         0d:e2:85:39:2f:b5:9e:27:96:5c:2f:b2:dd:d9:e8:08:03:02:
         4a:c9:e2:b3:b5:d1:e6:5e:dd:e5:e5:be:88:aa:4d:9d:00:00:
         5f:b1:7e:3a:99:c5:2d:82:49:af:e8:ce:d7:c8:1c:ce:e0:5e:
         7e:4e:2d:31:fe:b0:4a:59:5c:96:73:27:73:fb:2c:01:ae:24:
         43:3a:45:c7:2a:f9:21:11:a4:c7:c7:49:ea:97:24:bf:dd:1c:
         a6:cd:80:30:cf:cb:59:a4:f9:80:b8:66:9b:64:64:3f:20:12:
         ea:0e:51:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----