Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/964c46ed-8734-3151-99e4-6692843d8dfb.roa
File:                     964c46ed-8734-3151-99e4-6692843d8dfb.roa (raw, json)
Hash identifier:          HUtmQjVD1sb6bIZas8NN31WrbmO5SXIXhcLJXZmQnCw=
Subject key identifier:   70:77:78:D6:61:12:DA:0F:40:24:C5:67:0A:A3:D9:F0:F9:09:BE:B8
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F432858403BDD461EEEF67DD97EFE1B00
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/964c46ed-8734-3151-99e4-6692843d8dfb.roa
Signing time:             Tue 13 Dec 2022 18:27:09 +0000
ROA not before:           Tue 13 Dec 2022 18:27:09 +0000
ROA not after:            Tue 18 Mar 2025 04:00:00 +0000
asID:                     142430
IP address blocks:        206.206.113.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 09 Jan 2023 17:15:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:3b:dd:46:1e:ee:f6:7d:d9:7e:fe:1b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Dec 13 18:27:09 2022 GMT
            Not After : Mar 18 04:00:00 2025 GMT
        Subject: CN=42a506c6-d8af-43df-bbfe-fd7bf25ba3d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:74:15:01:04:f3:1c:f1:3b:4c:ce:8f:14:9d:
                    35:ef:67:2a:12:3d:91:c9:ab:74:ec:19:7c:d9:22:
                    f1:6b:50:39:09:dd:24:0b:51:c4:7d:15:08:ab:c1:
                    ab:b5:7d:42:3e:18:92:fd:0b:c7:40:51:a5:5a:03:
                    3b:62:80:57:0d:6e:75:48:0b:21:eb:0d:61:ff:8d:
                    11:60:83:7c:e1:24:3f:05:99:60:76:37:4f:eb:e7:
                    df:60:39:b0:69:34:74:96:9a:b7:78:f0:46:22:4d:
                    ad:cd:da:52:6a:52:e5:89:eb:b2:44:23:84:31:9e:
                    f6:cb:8e:2c:e1:2a:ab:58:b3:54:7d:57:31:c1:1b:
                    48:56:6f:df:4f:ba:23:8e:f1:c4:84:8c:2a:8a:95:
                    93:29:e3:e4:b1:ac:ba:38:97:09:8e:b0:f0:79:1c:
                    f6:6d:2d:f3:67:5b:2e:80:24:81:3a:b8:3d:68:79:
                    c9:ad:cb:30:7d:72:ce:27:85:5d:1f:fc:5d:0e:07:
                    e9:73:9d:f5:cd:72:0f:c6:c6:62:d1:84:ae:bd:4b:
                    2f:18:ce:0b:9c:1a:8f:49:6a:1c:5e:f3:48:7d:1a:
                    76:20:ec:ab:46:5e:fe:78:ea:3d:b5:47:86:93:0e:
                    30:30:e6:ff:8f:81:f0:0a:77:09:88:29:e2:ef:ff:
                    2f:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:77:78:D6:61:12:DA:0F:40:24:C5:67:0A:A3:D9:F0:F9:09:BE:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/964c46ed-8734-3151-99e4-6692843d8dfb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.113.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:92:08:0a:7e:3f:94:dd:99:7f:76:9d:4c:56:8e:3c:c5:57:
         18:9d:8e:d7:39:8f:88:43:57:ed:00:f3:4d:59:26:1e:30:2c:
         e9:30:96:84:f4:80:5e:01:b8:52:74:29:ea:3b:08:07:96:0e:
         17:46:4d:ea:5d:9a:1f:55:c5:b6:42:52:7d:8b:e3:0f:27:a0:
         cf:3f:0f:9e:82:96:b7:b7:47:5d:8e:78:85:24:5a:2d:5d:bc:
         54:ab:09:d3:aa:fe:60:16:58:b2:5b:ec:d8:37:da:42:8e:6b:
         f5:60:36:0a:ca:b1:09:89:65:a7:7a:2f:de:fc:08:aa:56:cc:
         ea:dc:b1:cc:94:73:52:bc:e9:3e:96:2f:15:a7:22:17:53:04:
         30:5d:86:a2:80:ff:a4:7c:69:51:47:cd:a9:10:3b:5d:46:bf:
         88:16:ae:c0:9a:e1:aa:fd:33:f8:96:b4:f8:7e:e4:4e:e0:d5:
         b2:fc:d9:20:23:7c:b8:e7:4b:53:a1:d6:aa:87:77:45:dc:65:
         71:04:89:d4:06:6c:46:17:78:21:d3:fa:47:cd:16:12:26:49:
         a7:8c:75:9d:5a:09:ee:08:6f:92:2f:a5:af:58:82:5f:46:09:
         dd:d4:d7:b0:c8:77:3b:59:bc:96:d4:b3:d3:7a:d1:e6:78:77:
         32:d2:59:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----