Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835/72fa7883-d4d0-389e-90ea-b9eb80f4b11b.roa
File:                     72fa7883-d4d0-389e-90ea-b9eb80f4b11b.roa (raw, json)
Hash identifier:          sPO9p1cGc0WWIbtRTP7fIM79+62qwsuGnX4CAIwx7CM=
Subject key identifier:   0C:AA:3D:FA:A7:69:FD:76:08:17:C2:FC:B7:F3:AE:D0:44:B1:96:92
Certificate issuer:       /CN=cc9bfce1-5e74-4c92-954d-8728969d8835
Certificate serial:       010D0C9F43285841E46D23A34465A1904683A600
Authority key identifier: 59:23:95:63:7F:0E:0D:1A:9C:A8:9C:18:80:E1:38:3B:CA:AD:73:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835/72fa7883-d4d0-389e-90ea-b9eb80f4b11b.roa
Signing time:             Mon 15 May 2023 18:21:01 +0000
ROA not before:           Mon 15 May 2023 18:21:01 +0000
ROA not after:            Wed 09 Aug 2023 02:28:42 +0000
asID:                     14618
IP address blocks:        165.140.11.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:e4:6d:23:a3:44:65:a1:90:46:83:a6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9bfce1-5e74-4c92-954d-8728969d8835
        Validity
            Not Before: May 15 18:21:01 2023 GMT
            Not After : Aug  9 02:28:42 2023 GMT
        Subject: CN=63697990-8b90-466e-a32c-a160582caa87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a3:92:5c:f6:c5:bb:ba:79:b7:3e:0e:de:2b:
                    93:91:59:5f:d6:9c:41:ec:d7:2e:58:55:bb:9c:eb:
                    87:dd:65:07:1e:66:da:ca:0f:d1:37:64:cc:6f:2c:
                    7f:b7:1f:09:69:df:fc:e2:d6:c2:74:5b:8a:97:6b:
                    83:bd:e9:d4:5b:f2:b4:9b:cb:c6:cd:e5:83:a2:88:
                    6a:78:7a:08:c9:f7:98:aa:90:1b:94:78:70:89:5b:
                    e2:1f:52:6c:6d:11:f4:48:7c:b0:f5:e6:a6:76:1a:
                    aa:7d:fc:cf:a0:d4:4c:e5:45:bb:b5:b1:c5:8e:5c:
                    d9:8c:d3:a3:03:2d:35:da:ba:89:46:24:d6:70:25:
                    11:2d:07:14:e0:6a:02:53:11:75:15:c5:e0:fc:21:
                    7f:80:a8:94:d0:3e:49:38:08:2a:71:b7:56:b5:ac:
                    b8:23:64:3f:c7:d2:e7:3b:14:94:be:40:22:ed:9c:
                    35:c4:bf:d5:48:3c:06:0e:44:c1:57:83:40:d4:b1:
                    7d:e3:f4:92:e4:b8:81:c2:9f:00:d6:a7:ee:03:65:
                    ec:54:36:d5:ca:a6:ae:54:e1:95:c8:70:81:5f:e6:
                    66:06:41:1a:27:e3:7b:59:6f:80:f5:c2:7a:bc:3a:
                    f6:78:ea:43:87:cb:05:68:c0:ab:30:11:07:89:ac:
                    63:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:AA:3D:FA:A7:69:FD:76:08:17:C2:FC:B7:F3:AE:D0:44:B1:96:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835/72fa7883-d4d0-389e-90ea-b9eb80f4b11b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835/cc9bfce1-5e74-4c92-954d-8728969d8835.crl

            X509v3 Authority Key Identifier:
                keyid:59:23:95:63:7F:0E:0D:1A:9C:A8:9C:18:80:E1:38:3B:CA:AD:73:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cc9bfce1-5e74-4c92-954d-8728969d8835.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.140.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:60:96:a7:f1:70:dd:5d:8f:9e:31:91:38:c6:90:7e:3b:84:
         fa:42:9a:64:e5:7f:f7:e9:20:88:d2:a0:7a:70:02:e3:ee:00:
         ab:3f:94:ea:4e:cd:4e:a0:75:f7:4d:34:cc:eb:99:b4:e3:8e:
         df:cf:59:ae:bf:90:cd:a2:2d:67:b2:a1:ad:7d:c8:8b:d5:df:
         be:6d:68:fe:19:dc:9c:7e:0d:d3:d6:53:3f:a7:8c:28:b7:3e:
         77:15:3d:6d:dd:21:6a:65:1c:dd:9f:0e:df:3a:4c:bf:2e:a8:
         a7:44:8f:f6:2d:57:5e:80:0b:4a:1b:0c:bb:c4:81:c8:df:dd:
         d6:35:ba:44:54:a8:81:a2:ce:82:51:46:be:c1:e6:09:46:dd:
         53:b5:68:62:ff:94:05:02:c4:2e:c4:dd:ea:f0:9c:67:c4:fa:
         19:b4:09:11:a7:15:3c:95:f9:78:36:87:b1:dc:c4:5e:98:ba:
         36:b9:ad:44:36:75:14:cd:aa:49:26:16:48:22:2a:08:92:82:
         2d:04:18:4b:da:ed:06:19:c4:a5:49:8a:52:72:0c:4c:76:9c:
         02:e7:28:6a:69:c4:e2:a0:6c:41:71:4f:1b:2d:d2:d1:11:9d:
         05:57:5e:70:24:9a:08:13:35:54:b8:39:c9:5e:6d:44:91:27:
         51:c5:c5:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----