Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d66a32c8-7e18-45e7-89a2-72450d59bf79/f437e8c5-1a1e-36ae-8055-b58ef38e18fe.roa
File:                     f437e8c5-1a1e-36ae-8055-b58ef38e18fe.roa (raw, json)
Hash identifier:          v6SkAW6YWqCe2QAXXHKsINdkTFA7dI4rEsFQ5QnPBb8=
Subject key identifier:   E8:19:37:E3:E7:9E:77:67:87:61:14:95:B4:79:F0:17:1C:A2:7B:97
Certificate issuer:       /CN=d66a32c8-7e18-45e7-89a2-72450d59bf79
Certificate serial:       010D0C9F4328576D51CC73C042CFC1722A54E449
Authority key identifier: E5:49:78:7E:5A:10:84:12:75:C0:95:DC:77:95:32:41:C9:E0:17:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d66a32c8-7e18-45e7-89a2-72450d59bf79.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d66a32c8-7e18-45e7-89a2-72450d59bf79/f437e8c5-1a1e-36ae-8055-b58ef38e18fe.roa
Signing time:             Tue 19 May 2020 00:28:26 +0000
ROA not before:           Mon 18 May 2020 04:00:00 +0000
ROA not after:            Sat 18 May 2030 04:00:00 +0000
asID:                     397460
IP address blocks:        23.134.208.0/24 maxlen: 24
                          2602:fddb::/36 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:72:2a:54:e4:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d66a32c8-7e18-45e7-89a2-72450d59bf79
        Validity
            Not Before: May 18 04:00:00 2020 GMT
            Not After : May 18 04:00:00 2030 GMT
        Subject: CN=5fdd6e62-6c71-4aff-a1de-796100dc1949
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:08:bf:fe:75:d5:90:1c:89:98:c4:ed:47:02:
                    84:47:4b:78:91:04:43:d8:9f:cd:4f:b8:a9:fd:20:
                    dd:2b:b8:eb:ee:56:4a:a6:ec:e3:78:e7:a9:77:65:
                    a0:50:8d:c5:7d:93:08:6e:09:85:6a:ea:5a:a6:01:
                    88:9a:64:93:2a:99:aa:50:e2:7d:c8:ca:7d:5c:a5:
                    fe:c8:3e:f1:33:f8:09:85:9e:1e:71:bd:53:e6:2a:
                    c6:58:e1:bc:a2:7c:e5:cd:67:bb:dc:28:b3:2e:94:
                    3b:4a:ad:64:e8:f0:4a:8c:a9:7b:c8:0e:2d:d6:00:
                    cd:3b:7c:2f:10:e3:2b:37:cb:c9:7d:8a:ca:30:0f:
                    a5:ae:98:a8:80:37:bb:05:6c:01:cf:35:2b:35:ea:
                    49:46:69:b4:bb:b2:f5:74:ea:ca:bd:44:16:69:c5:
                    00:8b:cd:fc:e6:f9:df:7f:6e:00:4a:f1:82:0b:97:
                    41:a8:9f:44:5b:b1:b7:31:ac:7c:4b:b4:86:65:02:
                    0e:a6:b7:f6:27:a4:2c:53:0e:09:52:b9:52:60:ca:
                    cd:6e:70:46:fb:cb:10:3e:e4:bd:d9:2f:f1:ba:18:
                    8c:a8:d2:48:6c:17:14:af:82:ac:d2:6c:2e:b6:b2:
                    b5:0a:dd:d3:8e:59:a5:de:b2:40:de:9e:de:6b:c7:
                    86:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:19:37:E3:E7:9E:77:67:87:61:14:95:B4:79:F0:17:1C:A2:7B:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d66a32c8-7e18-45e7-89a2-72450d59bf79/f437e8c5-1a1e-36ae-8055-b58ef38e18fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d66a32c8-7e18-45e7-89a2-72450d59bf79/d66a32c8-7e18-45e7-89a2-72450d59bf79.crl

            X509v3 Authority Key Identifier:
                keyid:E5:49:78:7E:5A:10:84:12:75:C0:95:DC:77:95:32:41:C9:E0:17:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d66a32c8-7e18-45e7-89a2-72450d59bf79.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.134.208.0/24
                IPv6:
                  2602:fddb::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:e6:ab:4d:e0:1b:a1:be:fc:aa:bc:99:78:e3:5b:90:65:cd:
         02:e2:0c:8d:2a:56:25:6a:1e:ec:f5:75:7d:a0:77:dc:de:4b:
         6a:d1:52:ff:0a:42:f7:a7:5a:f7:5d:64:78:4c:c7:88:c9:e3:
         eb:b7:e3:c7:8e:83:40:42:f5:b3:a1:af:05:40:73:f0:94:0f:
         a6:65:b2:8d:05:ef:d1:43:5f:fb:18:96:da:7b:2d:f4:a5:4f:
         5b:f2:36:6c:c1:19:45:c4:83:dd:84:5a:25:a0:98:bd:f5:6f:
         8d:f3:9b:ff:e5:79:30:d8:e9:65:0c:4e:d8:da:86:ec:6a:5a:
         e4:0b:69:6f:39:b3:8f:98:3e:ce:27:44:87:7b:00:6d:86:77:
         b9:f5:c6:59:de:46:be:24:d6:c7:31:b6:ec:7c:7c:c4:bb:e8:
         ac:5e:f9:d1:ec:83:22:81:a0:79:5d:5d:b4:2a:49:3a:bd:f5:
         41:b7:e8:48:04:44:33:65:ea:c7:61:31:22:d7:b7:18:93:dc:
         f5:74:d1:f6:a0:c7:1e:10:a5:4b:45:cc:a0:01:12:2c:4b:19:
         bd:9f:b6:cb:e0:b6:d5:4a:bc:07:fe:32:1e:3a:64:b1:16:ef:
         bf:1b:21:57:00:92:ae:27:c6:d7:3d:47:3f:f8:33:55:60:99:
         6d:9d:9e:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----