Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/5bc414dd-957f-314e-8090-63da8b5ed88b.roa
File:                     5bc414dd-957f-314e-8090-63da8b5ed88b.roa (raw, json)
Hash identifier:          jza9rWJQv+XdoteVTG5EHR8hfWiIP60LIqwa1gPJR80=
Subject key identifier:   8B:C6:AD:9C:A2:1F:97:5B:ED:84:01:EC:87:7E:EB:CB:CA:F6:78:2E
Certificate issuer:       /CN=d43161e4-dac1-407b-8f16-55e6ef100d0a
Certificate serial:       010D0C9F4328583C93CA56ADCF2EBFB50D63F600
Authority key identifier: 0F:AD:FA:40:22:6B:5D:BA:CB:0D:38:35:36:8C:86:20:CC:D9:5E:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/5bc414dd-957f-314e-8090-63da8b5ed88b.roa
Signing time:             Mon 29 Jun 2020 04:00:00 +0000
ROA not before:           Mon 29 Jun 2020 04:00:00 +0000
ROA not after:            Wed 17 Apr 2024 04:00:00 +0000
asID:                     1239
IP address blocks:        47.83.0.0/16 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:93:ca:56:ad:cf:2e:bf:b5:0d:63:f6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d43161e4-dac1-407b-8f16-55e6ef100d0a
        Validity
            Not Before: Jun 29 04:00:00 2020 GMT
            Not After : Apr 17 04:00:00 2024 GMT
        Subject: CN=de14fb45-3110-4613-8497-c722f1c7e218
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:9c:23:96:8f:7c:ed:7d:e2:cd:3f:f6:9a:1e:
                    ba:34:8f:03:b0:e3:8d:f9:6f:51:4b:8e:1b:9e:0b:
                    a5:67:28:6e:32:04:d4:d4:c7:16:23:df:8f:f5:c3:
                    5a:f2:ba:0b:d4:ac:b5:c3:6d:c1:3c:37:03:56:e5:
                    57:fb:77:88:ea:3b:0b:64:48:10:55:c6:7e:55:27:
                    a2:56:88:a4:05:80:cc:27:1c:d1:9a:09:0b:72:e3:
                    06:bc:ba:50:0d:72:a4:52:c1:ef:a9:a9:90:11:33:
                    63:74:e1:b6:4c:47:2e:b1:73:6b:d9:e5:1d:1c:a5:
                    dd:38:e8:80:d6:f5:35:d6:28:1f:a5:d3:f4:7c:3c:
                    85:bb:21:82:22:a4:67:49:2c:14:4b:15:87:ab:5f:
                    9c:61:a7:84:1a:78:6c:fb:b2:86:13:3b:cb:97:9c:
                    3d:de:58:40:37:0b:78:a5:68:08:e5:d7:32:09:1b:
                    d2:f2:8b:ce:95:fe:de:46:05:7c:50:76:ad:e7:c3:
                    dd:75:9d:08:0e:54:4b:22:66:13:ed:f7:60:53:fb:
                    df:34:b8:dd:25:d0:78:2f:74:0f:b2:03:ea:0e:e8:
                    a0:1a:78:09:9d:fd:1c:2e:1d:18:88:ad:b3:c4:52:
                    9e:21:80:46:c5:f7:ff:99:27:63:30:64:71:79:90:
                    a6:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:C6:AD:9C:A2:1F:97:5B:ED:84:01:EC:87:7E:EB:CB:CA:F6:78:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/5bc414dd-957f-314e-8090-63da8b5ed88b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a/d43161e4-dac1-407b-8f16-55e6ef100d0a.crl

            X509v3 Authority Key Identifier:
                keyid:0F:AD:FA:40:22:6B:5D:BA:CB:0D:38:35:36:8C:86:20:CC:D9:5E:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d43161e4-dac1-407b-8f16-55e6ef100d0a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.83.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:18:37:ce:dd:e3:52:1d:84:de:9f:69:da:b8:fc:44:0d:29:
         bb:80:92:ea:3b:f5:09:c1:d5:02:01:02:f3:e8:dd:fd:18:3f:
         64:52:d3:de:b1:4b:db:e7:17:03:71:95:04:61:a2:e7:2f:66:
         ac:4f:28:cb:55:fa:76:ab:3f:31:78:eb:1d:e7:c7:d9:d2:76:
         2c:06:0b:20:00:6f:81:36:3a:a3:dd:71:fe:08:6d:92:bf:3b:
         bb:ca:c5:47:45:9c:2c:df:b6:1d:3b:05:db:39:81:3f:18:7b:
         5f:df:75:46:2c:4e:0d:12:2b:3c:ca:58:03:a8:44:77:93:bc:
         56:ee:ac:e3:99:38:88:6d:a7:1b:c0:b9:80:da:72:73:9e:14:
         a4:0f:62:bb:60:4e:c7:00:36:8c:83:24:67:78:8c:ea:67:26:
         b3:00:e9:9c:39:8d:2c:dd:0b:ef:3e:c8:90:66:c6:0b:5a:58:
         ae:57:43:27:16:a0:f5:63:9f:16:1b:22:08:dc:90:f9:df:30:
         fd:c8:b1:ea:6d:51:a2:37:8d:69:0a:26:27:f6:55:48:41:56:
         ad:f2:80:0d:21:bb:b8:98:e1:cf:d6:af:7a:03:95:13:1c:60:
         ed:fe:8c:8a:87:31:30:3d:a7:9e:47:1d:b5:86:50:16:23:d2:
         7b:8a:24:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----