Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/3a188b11-8b92-32b7-92a8-3acbb8ebf447.roa
File:                     3a188b11-8b92-32b7-92a8-3acbb8ebf447.roa (raw, json)
Hash identifier:          4JyjsNnF1dFv58Se5SSi/ngOiqfYTLPDVZbQK7Nt8x0=
Subject key identifier:   EC:AC:7E:5C:E6:99:84:DA:D1:D0:E2:33:F2:F5:A9:F5:0F:FC:AC:D6
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584492FAB192C40785F0E3588200
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/3a188b11-8b92-32b7-92a8-3acbb8ebf447.roa
Signing time:             Tue 16 Jan 2024 16:32:16 +0000
ROA not before:           Tue 16 Jan 2024 16:32:16 +0000
ROA not after:            Mon 15 Apr 2024 15:32:16 +0000
asID:                     212238
IP address blocks:        43.255.188.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Thu 15 Feb 2024 16:47:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:92:fa:b1:92:c4:07:85:f0:e3:58:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jan 16 16:32:16 2024 GMT
            Not After : Apr 15 15:32:16 2024 GMT
        Subject: CN=5b6dd419-5bf9-4231-9818-1ec7199ae3ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:7f:26:93:52:41:ca:70:a1:3a:2e:03:c8:f7:
                    c5:b8:a8:09:da:99:80:64:ed:19:60:f7:b7:38:fb:
                    70:d4:c5:47:04:29:53:a4:1b:54:1f:7f:e8:38:da:
                    42:e9:76:bf:cd:e6:b5:7e:54:b2:db:da:c1:37:28:
                    6e:ac:3e:74:71:db:31:cb:af:c5:1b:0b:77:17:81:
                    43:70:fb:0f:7c:73:5d:6f:84:96:ce:08:7c:1c:e2:
                    f9:82:f4:14:66:08:8f:fe:f0:b1:ff:bd:07:6f:d6:
                    72:ef:ff:fd:b4:45:3d:b9:2f:4d:09:54:cc:34:97:
                    1a:92:11:d6:9a:e1:12:54:83:6e:d2:dc:af:09:12:
                    a2:60:7c:1a:76:bc:6b:f1:d9:1e:80:02:a3:cd:b7:
                    8a:ee:b2:94:23:a2:94:77:9e:2e:5d:4a:1e:44:2a:
                    b7:e4:3f:21:f5:4f:78:de:d8:73:a6:bc:e8:f1:8a:
                    37:11:e4:bd:cf:17:f4:f6:24:7e:bf:ec:91:23:5c:
                    69:59:9a:f2:e6:b8:2b:2d:7b:76:6a:bf:22:b1:41:
                    2d:23:d8:e6:2b:48:ef:15:95:9b:d9:4e:90:d7:a9:
                    b8:c5:12:3c:00:dc:2c:e6:a9:2d:46:b6:c4:ec:9e:
                    1a:81:3f:3c:50:43:0a:b2:b8:3c:94:bc:7b:94:fb:
                    eb:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:AC:7E:5C:E6:99:84:DA:D1:D0:E2:33:F2:F5:A9:F5:0F:FC:AC:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/3a188b11-8b92-32b7-92a8-3acbb8ebf447.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.255.188.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:14:79:e2:c2:f0:96:0f:bc:3e:24:00:09:1b:63:42:6c:5a:
         fb:0d:04:c2:3e:52:20:4b:bf:f8:f2:d1:4c:0d:4b:77:8f:a8:
         51:59:87:82:4c:15:8a:57:a1:6d:86:5b:9f:a5:55:fb:17:b8:
         31:1a:a8:42:58:11:60:1d:ca:6f:48:b7:0e:ff:5e:8d:18:a8:
         d9:40:24:01:f5:7e:c4:f5:9b:17:a1:35:9c:96:a1:15:ff:88:
         17:2e:c8:37:e5:34:ce:9b:1d:3a:ab:38:11:34:45:d8:24:e1:
         08:e8:6b:52:f4:b3:94:4c:e8:3e:3c:bd:e3:cb:e0:6a:cb:c2:
         ad:b3:a4:75:2c:3a:56:74:4b:a5:23:54:c6:b3:54:56:f7:df:
         80:fe:d6:06:8d:4e:c5:85:03:48:6a:f3:de:1c:e7:e3:74:68:
         d4:6e:eb:af:5f:44:1c:86:56:13:8a:38:15:16:1d:63:d7:62:
         02:80:af:91:db:4e:03:6e:0c:cb:a0:93:11:d8:41:3a:7b:b3:
         29:42:8e:98:f5:1a:89:2e:de:6e:15:26:07:1b:ed:e8:39:46:
         b4:8e:b4:5f:84:fd:66:b1:9f:f3:8a:90:57:3f:3e:90:d4:91:
         a4:f3:19:96:bd:02:e9:3e:f7:93:4b:48:7c:7c:88:09:b7:12:
         f6:59:04:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----