Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/a65ff848-cc5a-3ee8-bb33-56b0fbdeb382.roa
File:                     a65ff848-cc5a-3ee8-bb33-56b0fbdeb382.roa (raw, json)
Hash identifier:          yrDd2ZiY0EGTyPrE8rvk0obT1zo3LvAxqC4Os6LmKj0=
Subject key identifier:   71:93:FA:E8:BF:5B:87:78:95:B7:79:2C:38:35:F2:38:9D:47:E6:F8
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F432858458E4B35189FC39A64C7F0A280
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/a65ff848-cc5a-3ee8-bb33-56b0fbdeb382.roa
Signing time:             Mon 15 Apr 2024 17:02:24 +0000
ROA not before:           Mon 15 Apr 2024 17:02:24 +0000
ROA not after:            Sun 14 Jul 2024 17:02:24 +0000
asID:                     834
IP address blocks:        216.74.81.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 21 Apr 2024 18:42:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:8e:4b:35:18:9f:c3:9a:64:c7:f0:a2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Apr 15 17:02:24 2024 GMT
            Not After : Jul 14 17:02:24 2024 GMT
        Subject: CN=a35ea7b2-f3ff-4c6a-bf18-9f556550823a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:32:8f:55:28:34:23:52:1e:9f:83:26:ce:50:
                    01:1b:04:24:a3:9d:6b:24:c8:f8:02:f8:09:1d:0e:
                    78:87:7f:7a:05:0e:3d:42:2a:2c:e8:90:32:7c:0b:
                    50:ed:86:24:bd:9e:c2:ee:70:a4:52:b1:9c:8b:dd:
                    1e:c0:34:eb:ad:09:64:b0:c8:7d:41:61:ed:53:4e:
                    2f:ca:9b:18:0b:4d:92:86:34:dc:90:3a:aa:ce:6a:
                    f6:9d:82:53:1f:9f:cd:22:e3:74:6e:08:52:3a:24:
                    d0:08:fa:d4:96:6d:e9:55:9d:0f:81:ff:dc:dd:8e:
                    aa:a1:80:22:34:77:74:63:74:74:da:c6:b9:4a:b5:
                    6a:28:bf:4b:26:4b:27:16:e1:1c:e7:f7:08:08:2f:
                    43:d9:31:b5:d1:90:b5:1f:70:9c:43:56:4f:1c:e1:
                    53:ea:da:c6:6b:d2:74:cd:c7:28:16:50:2d:ad:72:
                    9c:13:b7:bc:a9:f5:8d:8a:8d:c6:43:ea:53:b6:0d:
                    a5:a4:5d:26:93:f0:b1:4b:63:c3:83:62:49:15:2b:
                    c7:ac:0d:78:87:59:ba:c2:ba:d1:72:d4:8e:84:15:
                    06:7c:c5:33:93:5e:0b:62:16:69:7c:62:52:73:31:
                    ab:eb:e3:84:6c:61:57:dd:95:2c:ef:16:7b:c8:0e:
                    92:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:93:FA:E8:BF:5B:87:78:95:B7:79:2C:38:35:F2:38:9D:47:E6:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/a65ff848-cc5a-3ee8-bb33-56b0fbdeb382.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.74.81.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:0f:b6:30:3d:7c:1b:c5:8a:41:4a:90:f6:ce:3d:fe:cc:01:
         6d:35:6f:7a:1d:c7:85:4b:a5:5c:b5:c6:3b:ae:5d:0d:2a:a5:
         3c:9f:36:58:aa:97:6e:25:b0:fd:da:18:fa:30:b1:c6:53:4d:
         85:f5:ba:94:76:68:7e:2a:80:8f:be:01:40:95:96:ba:b6:91:
         dc:12:2d:eb:25:94:4e:a4:5b:76:66:41:f4:1c:d2:fc:84:91:
         22:13:3e:c8:76:b6:77:4d:be:87:83:6f:a0:78:c3:5e:13:6c:
         fc:15:3f:0f:9e:b8:c4:ee:06:53:14:49:46:3c:e8:44:c9:72:
         98:4f:0f:07:80:1f:0b:bb:aa:e9:de:b7:b9:c4:97:a5:87:93:
         37:d2:03:ba:f9:42:6b:bf:37:73:17:49:a4:50:74:c2:c2:5c:
         12:d2:2c:c9:05:59:22:56:cc:49:97:c6:0c:3e:8f:d0:79:e6:
         34:ce:c2:1d:77:c7:1d:cd:7c:44:9a:cb:0b:2e:a1:07:74:44:
         e7:d3:38:e3:0e:b7:0e:22:78:0e:75:e4:9a:35:20:a6:35:f2:
         7b:68:2b:91:11:71:4b:98:ce:af:08:0b:a8:26:9b:0f:b2:04:
         20:db:b9:a0:74:c8:2c:26:11:34:c6:ff:ca:75:27:50:cf:f6:
         1e:db:c1:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----