Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/7ef44876-4c88-3d8a-bfcc-cb635c0c87b2.roa
File:                     7ef44876-4c88-3d8a-bfcc-cb635c0c87b2.roa (raw, json)
Hash identifier:          9UoL+4Rc9HpBSBwcP5+Bl+kxQ0ybTejE0b+Q+RMTBRk=
Subject key identifier:   2E:8F:2F:3A:C1:B9:22:60:55:AE:BE:34:BB:63:99:5D:FD:E5:8E:01
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F432858403C1821F0F3B6ADAAB3F0C2C0
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/7ef44876-4c88-3d8a-bfcc-cb635c0c87b2.roa
Signing time:             Tue 13 Dec 2022 18:27:09 +0000
ROA not before:           Tue 13 Dec 2022 18:27:09 +0000
ROA not after:            Tue 18 Mar 2025 04:00:00 +0000
asID:                     142430
IP address blocks:        206.206.115.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 10 Feb 2023 18:25:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:3c:18:21:f0:f3:b6:ad:aa:b3:f0:c2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Dec 13 18:27:09 2022 GMT
            Not After : Mar 18 04:00:00 2025 GMT
        Subject: CN=c33fb688-bb97-4e41-b8f6-506418e5969d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ea:96:46:a8:f4:a8:fd:c3:c6:cc:5a:08:c7:
                    2b:4e:11:5e:e1:5c:28:e4:60:3e:71:f4:36:a4:e1:
                    28:1e:13:06:6f:c6:42:05:35:1e:82:80:c2:ba:fe:
                    95:80:b7:ba:d0:50:76:d0:11:27:60:9c:79:02:7d:
                    b2:1a:dc:d9:3c:63:85:e0:4a:be:84:7b:fd:d5:3d:
                    b3:ff:8d:18:1b:cf:bd:6a:73:f3:6c:cb:b0:89:42:
                    a0:f2:c9:8c:66:34:c7:03:a4:01:59:36:19:ae:e5:
                    f0:68:97:00:58:3a:c4:5f:37:65:e8:c3:e7:ab:67:
                    43:8b:ec:51:37:91:ec:6e:46:35:de:8f:4c:6f:e4:
                    47:bd:90:17:5f:d9:aa:9f:be:12:2b:25:e3:1c:d3:
                    cd:d0:6b:d3:68:8a:e8:59:49:c7:2b:49:39:ea:f4:
                    d9:88:9a:89:d9:05:70:cb:88:5e:7c:6c:80:76:90:
                    b8:91:1b:93:4f:f5:af:f0:e9:61:a0:7e:26:93:9e:
                    72:8a:d0:f8:9c:f7:66:43:58:10:12:81:e3:90:31:
                    38:1a:ed:dd:bd:b3:66:68:0e:0d:a9:55:a7:70:2d:
                    50:ab:5d:49:28:1c:b9:1c:5d:3f:19:26:e3:15:03:
                    e4:75:b2:a7:6b:a1:80:23:bf:2d:26:6a:69:a5:b5:
                    70:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:8F:2F:3A:C1:B9:22:60:55:AE:BE:34:BB:63:99:5D:FD:E5:8E:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/7ef44876-4c88-3d8a-bfcc-cb635c0c87b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.115.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:cf:c2:42:4a:cf:f5:05:52:0e:03:93:59:e3:4b:79:0b:a2:
         5a:77:6b:1b:a5:f1:2c:d8:a0:3d:86:e3:85:13:c0:5d:40:f1:
         c3:41:70:90:cf:a5:fd:4a:d0:fa:ac:26:43:66:42:69:bb:8e:
         9d:f9:60:9b:a3:56:b6:dd:08:71:5e:18:a1:d6:95:f9:31:10:
         4e:97:05:02:f2:c7:87:10:c5:94:43:8c:d7:87:ff:f5:c9:2c:
         f8:89:18:38:3f:3a:32:87:f1:2c:f8:cc:24:dc:c9:2f:ee:4a:
         56:87:62:90:97:98:ca:53:17:3f:18:75:9b:90:7f:b4:27:81:
         54:3e:16:0c:bf:4e:b9:82:9c:79:bd:9a:ec:72:f2:62:9b:89:
         66:c4:d4:cd:43:11:33:1f:ce:4a:39:49:3e:4e:86:de:e3:e7:
         f3:d4:05:68:cb:fc:60:7a:ef:16:c5:cd:69:d6:ca:48:5d:06:
         44:0a:11:9e:9a:28:ad:64:75:1c:29:19:62:d3:70:33:3c:20:
         40:4a:36:81:b1:37:5a:f6:9c:15:c8:b3:bd:b2:dd:b7:d4:9e:
         41:f1:8c:02:94:ce:72:c9:0b:c6:84:1d:6e:3d:e9:0a:d0:b7:
         a7:cf:4e:cf:e5:91:28:68:c4:80:84:3d:a5:3e:5f:7d:ef:e8:
         cc:a0:f1:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----