Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d191e4e9-53d8-40a2-82a9-2c8ce3155c43/88a57c8f-2efe-37b9-92f3-271221c652c6.roa
File:                     88a57c8f-2efe-37b9-92f3-271221c652c6.roa (raw, json)
Hash identifier:          GbFbOGfOtBE63MUmSoS2IHrFBEpT8f+musY+Ka/+tTs=
Subject key identifier:   D2:31:6D:62:32:1E:35:C6:47:55:0E:E7:BC:5A:5A:09:8E:43:D4:0A
Certificate issuer:       /CN=d191e4e9-53d8-40a2-82a9-2c8ce3155c43
Certificate serial:       010D0C9F4328583F304254CEA1558B97141536F1
Authority key identifier: A1:CA:18:8C:7E:0C:D7:8B:DB:EC:8B:25:9F:CC:62:01:1B:85:EF:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d191e4e9-53d8-40a2-82a9-2c8ce3155c43.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d191e4e9-53d8-40a2-82a9-2c8ce3155c43/88a57c8f-2efe-37b9-92f3-271221c652c6.roa
Signing time:             Tue 22 Dec 2020 20:13:46 +0000
ROA not before:           Tue 22 Dec 2020 20:13:46 +0000
ROA not after:            Thu 12 Dec 2024 05:00:00 +0000
asID:                     398395
IP address blocks:        199.48.178.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:30:42:54:ce:a1:55:8b:97:14:15:36:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d191e4e9-53d8-40a2-82a9-2c8ce3155c43
        Validity
            Not Before: Dec 22 20:13:46 2020 GMT
            Not After : Dec 12 05:00:00 2024 GMT
        Subject: CN=01d33264-694f-4f9c-8f65-3e24606eec2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:1f:25:65:d1:e9:f8:d1:e4:8d:6b:7e:96:44:
                    bf:61:98:d8:39:cf:2d:af:30:f5:a4:40:19:a6:e9:
                    cf:d4:ee:3d:6c:91:65:c9:ea:0b:2b:8d:49:87:cc:
                    96:fb:6e:26:c4:f2:49:e1:5e:24:11:69:fb:8b:2a:
                    ec:6d:7c:2c:bb:b6:df:6f:ff:ab:c2:33:a5:3c:18:
                    df:cd:f6:f3:41:ea:54:73:95:0e:56:0e:3e:24:10:
                    e7:d4:07:94:e9:f4:fa:62:a1:e5:c2:6b:dc:b4:6c:
                    22:09:f8:c2:f7:52:31:a8:0e:dd:a2:00:b1:d6:97:
                    bf:cb:c4:8f:e2:42:87:af:b3:d5:ce:95:f8:8c:cc:
                    b9:8e:10:45:56:75:4f:ee:ef:5c:c8:1d:58:b9:25:
                    6c:91:59:f3:04:be:51:09:c7:e6:4a:b0:ab:06:18:
                    7c:23:88:68:61:35:8f:8f:86:8d:e3:3c:c5:76:71:
                    ce:4c:e1:13:7c:ee:71:48:ad:84:e6:a9:4c:27:06:
                    a1:11:9e:49:f7:45:9a:26:42:ba:9f:5c:41:49:45:
                    3d:15:5a:23:6f:08:07:49:90:32:d4:b7:69:5e:2b:
                    a8:28:e9:8f:3c:b5:26:28:97:8a:c8:fa:d0:d4:22:
                    26:67:4b:b0:a7:56:10:19:ba:b9:2c:72:a0:a3:e7:
                    b9:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:31:6D:62:32:1E:35:C6:47:55:0E:E7:BC:5A:5A:09:8E:43:D4:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d191e4e9-53d8-40a2-82a9-2c8ce3155c43/88a57c8f-2efe-37b9-92f3-271221c652c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d191e4e9-53d8-40a2-82a9-2c8ce3155c43/d191e4e9-53d8-40a2-82a9-2c8ce3155c43.crl

            X509v3 Authority Key Identifier:
                keyid:A1:CA:18:8C:7E:0C:D7:8B:DB:EC:8B:25:9F:CC:62:01:1B:85:EF:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d191e4e9-53d8-40a2-82a9-2c8ce3155c43.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.48.178.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:0c:5f:bb:38:28:d3:99:c8:bc:5b:75:30:36:63:10:10:77:
         38:02:72:76:49:c7:ed:59:e1:e6:f6:9c:81:64:d0:b7:aa:3c:
         24:fb:ab:4f:c9:65:92:4f:a3:7a:5b:ed:a1:38:c8:b2:74:bc:
         7b:ef:e6:f4:2b:ed:9d:1f:56:b2:6a:1e:50:b7:ea:98:e4:2f:
         24:80:2e:0f:0a:55:e9:97:0a:53:41:c3:c2:ce:6e:8b:a8:59:
         f1:da:45:78:fe:7f:fc:e4:8a:f0:fb:92:a5:a6:6b:f5:b1:78:
         03:e3:68:97:0c:88:0c:56:b9:3b:69:17:62:5c:d4:df:e8:fd:
         c9:5e:6f:03:cd:f9:9e:47:34:af:bf:56:db:95:8b:54:5a:37:
         18:df:2c:90:b4:80:22:a2:a4:fe:f9:21:13:99:ae:b5:b2:bc:
         b8:16:e8:83:67:87:4b:f4:0c:35:db:d6:4f:87:45:22:e6:52:
         83:ba:bd:e6:a5:d6:68:c8:da:c2:1b:f1:5b:25:06:66:8f:87:
         c6:67:f4:2a:e2:72:66:14:41:4a:1d:5b:cd:9a:dd:e1:09:16:
         3e:d0:d3:b9:af:4f:d0:be:d7:ce:c8:2b:ab:0c:e3:e5:48:4a:
         07:85:04:2b:84:a5:55:f5:97:28:40:bc:20:86:6b:45:dd:01:
         27:a0:8b:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----