Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4994aff-79e3-4800-875a-f4a951d7af28/1362f502-cec7-3495-9d21-3dd17b1e2664.roa
File:                     1362f502-cec7-3495-9d21-3dd17b1e2664.roa (raw, json)
Hash identifier:          UtOqN4bgU0Yqp3/Ht8mH8xeG8+azhcHxHz2D7ITTY9c=
Subject key identifier:   09:37:1C:1C:D2:BF:BE:19:31:94:2B:A7:22:49:CA:FC:8D:2A:C3:08
Certificate issuer:       /CN=a4994aff-79e3-4800-875a-f4a951d7af28
Certificate serial:       010D0C9F4328583B4C7366FB5DC3738867A93380
Authority key identifier: 4A:41:44:C2:37:55:32:9B:82:E2:88:2B:51:8A:93:7E:E6:74:AF:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4994aff-79e3-4800-875a-f4a951d7af28.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4994aff-79e3-4800-875a-f4a951d7af28/1362f502-cec7-3495-9d21-3dd17b1e2664.roa
Signing time:             Thu 14 May 2020 04:00:00 +0000
ROA not before:           Thu 14 May 2020 04:00:00 +0000
ROA not after:            Fri 22 Dec 2023 05:00:00 +0000
asID:                     40065
IP address blocks:        199.101.170.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:4c:73:66:fb:5d:c3:73:88:67:a9:33:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4994aff-79e3-4800-875a-f4a951d7af28
        Validity
            Not Before: May 14 04:00:00 2020 GMT
            Not After : Dec 22 05:00:00 2023 GMT
        Subject: CN=6d622b00-b9ec-403c-9845-7c92879b6d4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:dd:74:4c:4c:e9:7f:ab:81:8b:18:1c:c6:5f:
                    2e:1e:a5:25:22:13:45:81:e6:6f:99:ee:2e:7b:76:
                    87:22:e3:24:2c:ff:4f:84:6d:b8:68:9f:aa:f6:f6:
                    c4:61:1c:51:9c:4c:e9:4c:01:a3:79:98:20:fa:68:
                    6c:68:9a:8a:66:b9:92:35:38:90:a1:8d:a9:ab:84:
                    da:41:a6:23:dd:80:d8:28:b4:5f:73:c8:13:5a:57:
                    72:18:bb:1c:22:4a:48:09:80:11:40:87:5c:06:a1:
                    36:c3:14:4c:78:d7:51:ff:30:a2:7c:75:1e:7a:0e:
                    b8:bd:bb:26:c7:ba:49:48:8a:43:ff:42:87:ad:41:
                    9c:b7:22:10:d5:67:74:ab:1b:88:39:5a:5c:00:0d:
                    1c:25:f1:b8:75:3d:34:c2:bb:bd:ea:92:8e:de:41:
                    01:68:99:59:aa:4c:63:5f:71:f2:f7:b9:ba:3a:ad:
                    e2:58:57:f4:13:5b:aa:59:4a:d6:58:47:71:24:ad:
                    4a:2f:91:0f:b9:1c:7f:db:13:c0:eb:b4:0b:f4:ed:
                    58:22:a5:bf:9f:09:b9:f7:a0:7d:8f:ca:fa:ea:35:
                    66:b9:c7:4e:0b:9b:b2:12:b2:0c:d1:b9:bf:a9:71:
                    06:f7:a2:a3:85:3c:77:7c:b9:39:d8:a0:ff:0e:ea:
                    af:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:37:1C:1C:D2:BF:BE:19:31:94:2B:A7:22:49:CA:FC:8D:2A:C3:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4994aff-79e3-4800-875a-f4a951d7af28/1362f502-cec7-3495-9d21-3dd17b1e2664.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4994aff-79e3-4800-875a-f4a951d7af28/a4994aff-79e3-4800-875a-f4a951d7af28.crl

            X509v3 Authority Key Identifier:
                keyid:4A:41:44:C2:37:55:32:9B:82:E2:88:2B:51:8A:93:7E:E6:74:AF:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4994aff-79e3-4800-875a-f4a951d7af28.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.101.170.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:b9:a1:9f:f3:5a:c9:5e:97:51:5f:25:04:20:a9:1c:cf:70:
         65:03:70:d8:2b:5f:5e:48:a1:97:3c:f2:6f:f0:da:94:68:15:
         ca:d5:6d:e2:9e:22:76:8f:6d:75:8c:ea:a5:3b:d3:7e:b0:1d:
         e6:2d:64:ab:e6:31:ab:75:d6:7d:24:48:bc:26:f9:f7:bb:61:
         c8:5d:df:4d:77:7e:20:0b:5d:b7:4e:8a:66:9b:74:ca:df:56:
         ba:a8:32:89:d5:9d:06:86:48:c0:c2:d7:be:21:bd:eb:76:93:
         f0:08:c2:1c:73:ca:05:0c:35:52:41:b2:d1:91:a6:41:a7:a1:
         3b:a3:ca:77:0d:c2:2d:f5:6b:06:94:a6:06:02:f2:33:90:3f:
         c4:fe:fb:6c:f1:ff:c4:96:a3:83:90:27:5e:c1:64:af:5d:1e:
         67:ba:64:45:b2:8a:ae:8f:a8:88:bb:ea:95:d3:07:b0:06:49:
         b3:1b:ed:50:90:76:f3:f3:e0:7d:cf:5b:41:e8:f8:f0:db:34:
         60:94:b9:56:de:6a:98:3c:0c:9a:0e:1c:b9:f4:de:9d:6e:dd:
         7f:25:b5:78:97:a4:20:d7:ed:b5:f2:1d:4e:b2:15:5d:8d:4b:
         94:1d:8c:e6:8d:65:d4:89:a9:d7:2d:62:f0:29:a4:21:3a:80:
         40:6a:ad:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----