Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/325aa11f-8c4c-3ae0-b394-5862d4d374a8.roa
File:                     325aa11f-8c4c-3ae0-b394-5862d4d374a8.roa (raw, json)
Hash identifier:          mJMWWPtuQ6vSgMT9Thfu35bq7ye+H7Nn/+i819g476U=
Subject key identifier:   26:EE:3F:E9:F8:4A:EF:B9:B4:0A:F2:46:F6:4D:7E:24:78:AE:2A:87
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285843709B1ADE969ED1EA5396E300
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/325aa11f-8c4c-3ae0-b394-5862d4d374a8.roa
Signing time:             Wed 04 Oct 2023 16:15:15 +0000
ROA not before:           Wed 04 Oct 2023 16:15:15 +0000
ROA not after:            Tue 02 Jan 2024 17:15:15 +0000
asID:                     174
IP address blocks:        173.211.82.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:70:9b:1a:de:96:9e:d1:ea:53:96:e3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Oct  4 16:15:15 2023 GMT
            Not After : Jan  2 17:15:15 2024 GMT
        Subject: CN=84be1521-16d5-4643-8daf-8240bc973e08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:a5:4a:fd:d3:21:64:f1:c5:2b:44:c5:c1:9b:
                    a6:d6:18:4b:e6:ca:bf:1d:3a:66:d2:4c:0e:5d:21:
                    f5:fc:fa:70:62:62:22:f3:84:22:d1:f3:08:5d:75:
                    05:62:b9:f7:6e:5c:d4:2f:dd:3e:d2:50:f0:b4:0f:
                    82:85:bd:0b:3c:c9:84:3e:d4:33:ba:76:49:8f:ba:
                    f1:55:b5:db:9a:14:6c:4f:f0:af:4d:ff:a2:55:2e:
                    1c:6a:9a:81:cb:5a:7b:66:94:75:0a:67:bb:19:2e:
                    97:92:61:39:f2:ba:59:a2:38:6f:fb:ff:7f:58:9c:
                    98:9d:ef:90:de:4e:de:01:f4:93:eb:e2:66:1e:6c:
                    4c:eb:fb:79:77:67:28:5c:48:15:21:db:71:8d:eb:
                    a2:ca:4b:c7:da:a3:b2:23:72:89:f3:ef:1d:f7:21:
                    8a:df:23:60:f9:e0:41:34:6a:ab:33:c5:76:72:63:
                    40:eb:cc:ce:cb:65:00:03:58:fc:70:ac:61:bc:4c:
                    93:e9:dd:2c:49:01:14:1b:d3:ab:df:38:6c:e1:46:
                    81:42:ee:bd:8b:78:47:93:ae:c1:c6:af:93:27:7f:
                    9c:c6:aa:65:a5:be:3f:23:85:b5:5a:93:57:7c:e9:
                    96:25:c8:8b:f7:85:11:ef:d3:3d:43:b9:4c:a3:e8:
                    22:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:EE:3F:E9:F8:4A:EF:B9:B4:0A:F2:46:F6:4D:7E:24:78:AE:2A:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/325aa11f-8c4c-3ae0-b394-5862d4d374a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.211.82.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e0:07:39:48:52:ab:4d:1a:1f:03:61:f8:c9:ec:da:d4:c4:70:
         92:65:10:be:f5:8c:68:eb:08:51:e4:6d:3a:9f:60:fc:3f:b1:
         1c:e9:ef:a0:0c:d8:67:11:4d:93:a9:dd:72:8f:0a:49:8b:f9:
         4d:42:4d:2c:d6:27:43:bc:74:2e:b1:d0:21:cc:14:86:50:9c:
         08:21:c7:5c:fa:2f:09:1b:ea:96:6b:ca:6f:c4:2e:6a:be:59:
         0f:74:38:28:e4:2a:58:06:4b:93:12:09:d3:3b:15:98:df:e1:
         66:0a:a2:82:30:be:d0:b9:40:28:39:ed:4a:53:33:ca:25:10:
         5f:6f:64:15:f0:50:8b:7c:55:ca:49:70:97:dd:ae:4d:dc:c3:
         0f:c7:b6:24:e1:21:6b:c3:78:ce:e0:b9:ab:a0:d0:3b:23:da:
         d3:43:78:cc:90:d8:17:7c:3d:6a:d3:2a:90:7d:20:58:1f:2c:
         81:92:12:56:6c:07:0d:8c:37:8e:5a:d4:6c:d3:0e:5b:75:4e:
         73:10:ef:55:12:d0:1b:4c:f2:07:ef:c3:80:46:62:24:86:3f:
         ed:da:19:ca:cb:af:73:77:17:ce:22:34:b3:ee:87:fa:4b:88:
         fd:fb:aa:f3:3c:af:c7:36:b9:11:db:29:3a:c4:89:f4:9c:08:
         bd:b2:a4:30
-----BEGIN CERTIFICATE-----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