Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/5cff1eca-3171-3208-98f2-ba9edb270762.roa
File:                     5cff1eca-3171-3208-98f2-ba9edb270762.roa (raw, json)
Hash identifier:          j7rgB07P0FjK3bovJdylGYu63Vd7XrUSjDvBwiIM0Gs=
Subject key identifier:   92:35:AA:2E:84:86:54:C0:AD:CF:2F:67:ED:BD:8C:CB:8C:77:2F:B4
Certificate issuer:       /CN=a4e3e72e-32cb-4e83-8d44-862466bb0c8b
Certificate serial:       010D0C9F4328583D85F623DCDFE8F360BEC05780
Authority key identifier: DF:A6:A8:E0:C3:72:E6:C7:0F:84:85:C6:B1:18:A0:CB:5C:3E:BD:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/5cff1eca-3171-3208-98f2-ba9edb270762.roa
Signing time:             Fri 13 Nov 2020 05:00:00 +0000
ROA not before:           Fri 13 Nov 2020 05:00:00 +0000
ROA not after:            Fri 12 Jul 2024 04:00:00 +0000
asID:                     1239
IP address blocks:        192.64.205.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:85:f6:23:dc:df:e8:f3:60:be:c0:57:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4e3e72e-32cb-4e83-8d44-862466bb0c8b
        Validity
            Not Before: Nov 13 05:00:00 2020 GMT
            Not After : Jul 12 04:00:00 2024 GMT
        Subject: CN=8b762622-bfaf-428b-ada1-16ae86ca9912
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9a:dd:b6:78:f2:80:1d:75:cf:cf:b1:fa:15:
                    d5:dd:ab:1e:6e:7f:0b:8f:cc:26:0a:7c:be:55:f7:
                    27:49:42:d6:75:da:3a:6c:5b:f7:af:37:5e:36:ae:
                    82:2a:47:73:c8:4a:1a:e0:bf:7f:3f:d5:0c:5a:4b:
                    b0:3f:47:b3:c0:32:d9:6b:ac:e0:96:22:92:65:ad:
                    e1:e8:d1:54:d2:71:75:bd:6b:8d:b9:b5:b6:fd:ee:
                    12:d3:ea:fa:41:3d:38:13:7e:57:11:e8:91:c0:42:
                    53:3c:87:00:da:9a:51:2d:18:cf:6b:b4:68:ce:c6:
                    7c:40:e7:64:83:1c:3c:ee:89:28:43:10:e0:52:d5:
                    f7:0c:35:09:3f:1d:ad:73:f5:65:98:23:ef:63:f0:
                    1c:2b:47:0a:12:95:11:aa:6c:0f:f7:0a:f0:2c:52:
                    77:6e:fb:94:7c:f3:c7:4f:c4:7a:41:ec:d0:eb:d0:
                    de:2f:4b:5f:d3:65:f6:be:59:2b:63:70:ba:01:66:
                    83:8a:4a:91:b6:37:b6:0d:c8:3e:3e:04:4c:00:d7:
                    19:6d:b5:ab:d1:65:03:4a:ec:63:d3:fa:d2:fe:fb:
                    50:dd:46:9c:fe:8a:3c:2e:3a:82:f5:91:3c:ef:88:
                    e9:fd:54:71:c9:79:ff:95:b6:1f:69:c3:39:c0:55:
                    70:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:35:AA:2E:84:86:54:C0:AD:CF:2F:67:ED:BD:8C:CB:8C:77:2F:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/5cff1eca-3171-3208-98f2-ba9edb270762.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.crl

            X509v3 Authority Key Identifier:
                keyid:DF:A6:A8:E0:C3:72:E6:C7:0F:84:85:C6:B1:18:A0:CB:5C:3E:BD:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.64.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:92:bd:a2:e7:6e:f5:13:3c:7a:d3:41:66:1c:af:30:57:59:
         63:38:1d:1c:68:ad:67:87:ca:8a:d4:4d:d1:77:ed:fa:19:a0:
         b6:e5:41:d1:2a:37:ae:44:f6:a2:bf:7d:cc:09:9b:7a:f5:0d:
         95:ca:27:1a:ff:df:1d:43:0e:d4:b8:d1:93:6f:40:02:6e:bf:
         e6:79:86:77:89:da:01:65:7a:e8:01:39:2f:45:d3:18:e7:86:
         19:00:56:1e:2e:91:3e:d1:d4:d5:a8:01:e5:08:3a:21:70:4c:
         d0:52:4b:c9:25:dd:cd:49:55:46:69:a6:ad:8d:bf:ee:f3:ef:
         88:5f:31:e4:17:b8:ed:2d:c5:b2:d7:a7:37:02:1d:91:f5:c3:
         57:53:ec:7a:f9:7f:f9:ee:33:fd:54:a1:41:a8:b0:f9:cc:bc:
         3b:5f:9a:6a:75:57:aa:cf:60:98:62:ed:8c:67:fb:39:df:f5:
         91:38:ea:67:2a:21:b0:18:83:83:80:ff:d3:e9:ce:67:72:d5:
         58:5d:4d:c7:28:96:22:86:c6:69:d1:c5:b4:68:5f:c5:01:58:
         3d:a9:34:d4:00:69:cc:44:e6:31:ac:7a:3b:dd:11:2f:ba:ee:
         8b:0c:63:c9:ce:e3:fb:6a:63:8b:ad:5d:58:4d:ba:e5:a8:62:
         0b:e2:48:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----