Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/2126628d-4e9d-3011-a873-682c1f93cccf.roa
File:                     2126628d-4e9d-3011-a873-682c1f93cccf.roa (raw, json)
Hash identifier:          dW8feFjPkzqJoTnleWcobtodEu9fXg3fjzGCWkGo/rk=
Subject key identifier:   92:A6:75:F1:9C:BD:B2:30:A1:96:4C:59:FD:43:60:20:F0:C4:64:AD
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285840D2A2D3D12275F502FDF80180
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/2126628d-4e9d-3011-a873-682c1f93cccf.roa
Signing time:             Tue 13 Dec 2022 18:27:09 +0000
ROA not before:           Tue 13 Dec 2022 18:27:09 +0000
ROA not after:            Sun 11 May 2025 04:00:00 +0000
asID:                     398465
IP address blocks:        184.174.22.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 09 Mar 2023 17:06:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:d2:a2:d3:d1:22:75:f5:02:fd:f8:01:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Dec 13 18:27:09 2022 GMT
            Not After : May 11 04:00:00 2025 GMT
        Subject: CN=ec5d0059-613f-4dc1-a5e9-1695db526f38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:e6:d0:da:df:cc:79:c8:b4:de:14:99:50:c8:
                    df:4b:c1:71:e6:60:45:3e:95:df:7e:fd:51:3f:ad:
                    ab:32:90:8b:ed:fb:9e:49:1b:a3:b6:d8:0f:d4:18:
                    85:7b:08:72:56:17:db:8a:e0:99:ae:9a:fd:e8:6e:
                    d2:63:43:37:56:b6:a9:9d:95:a9:0c:90:04:0f:6d:
                    fc:06:8c:f2:bd:09:67:f1:e0:91:5d:a5:39:23:1f:
                    e2:31:f8:33:ae:94:c3:05:a5:0d:08:1e:06:ce:c3:
                    11:07:b9:7f:0b:0d:eb:d4:0a:d4:47:cb:79:0e:70:
                    07:dc:50:d7:b7:c6:9f:67:9a:f8:6b:d3:22:35:ca:
                    69:9b:29:13:fd:92:33:aa:30:72:50:1e:68:ef:0e:
                    0e:e8:ff:ba:d1:c8:37:9c:07:57:90:f3:12:f0:78:
                    9a:51:cb:4b:8f:ea:3d:a0:49:e4:15:0b:fc:a5:3e:
                    f0:12:f6:30:3c:6a:0c:78:9c:f7:68:f3:3a:52:92:
                    e7:46:2d:ab:73:f2:20:7c:01:e2:d3:14:7e:ed:81:
                    d6:07:2c:23:ca:78:5a:ac:3c:b9:79:82:ad:48:7f:
                    44:e3:35:fd:cb:75:9b:2a:76:96:4e:1b:b4:c1:37:
                    d9:ad:9f:80:f6:c0:59:d8:65:31:7a:d2:b7:98:2e:
                    d4:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:A6:75:F1:9C:BD:B2:30:A1:96:4C:59:FD:43:60:20:F0:C4:64:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/2126628d-4e9d-3011-a873-682c1f93cccf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.174.22.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:ed:65:12:cd:8b:b3:99:30:54:9a:74:b6:3a:b9:1a:c4:63:
         f9:a0:98:58:fb:86:8f:2f:44:50:94:4f:06:67:a4:9e:5f:ac:
         75:d6:f9:e3:82:3e:5e:a5:33:78:e2:b8:6f:07:ab:24:a2:35:
         e6:50:d4:ac:08:0b:9b:d0:e1:05:23:4b:a5:ac:a3:a2:95:c8:
         3d:a0:f0:6d:5f:77:82:40:8e:42:e1:5d:ac:0f:82:d1:a4:a0:
         7a:02:df:a0:7f:50:ab:65:b3:61:b1:92:c1:23:51:d1:36:59:
         cf:2d:49:b2:4a:a9:d2:3b:47:eb:3d:9e:ad:f7:b4:8c:83:df:
         ac:98:dc:29:24:bb:0b:b9:3b:9d:a2:f7:9a:f5:e7:16:a4:63:
         b0:25:df:2f:fe:57:a8:d1:6b:bf:e5:69:b5:78:17:15:d7:ae:
         9e:69:88:0e:04:0d:68:07:4e:0c:23:6a:dd:3b:aa:f6:8d:a7:
         8b:c3:eb:1d:7f:bf:73:48:f7:f8:27:ff:a6:bf:96:3a:a1:ee:
         42:3a:b3:bb:95:b7:4a:e8:2f:8a:53:50:6f:f4:1b:43:55:5c:
         54:3f:a7:96:56:5a:3a:bf:93:f4:ec:52:62:d0:81:c2:af:f7:
         46:3f:27:49:0a:c3:b2:89:dd:e2:0a:38:f8:a0:0d:50:ab:94:
         87:ae:b3:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----