Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/ec2dec59-6243-3848-be26-5d9e5609992b.roa
File:                     ec2dec59-6243-3848-be26-5d9e5609992b.roa (raw, json)
Hash identifier:          zHSujLY9maWCyQVWhEmNuAIG9Vf+xYsTeojfC6b9AY8=
Subject key identifier:   B1:F0:36:A2:BC:80:43:0E:F3:3E:E5:EE:F4:9A:E2:BB:EB:95:FE:F7
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F432858413D52DDEEFB9852A3989ADEC0
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/ec2dec59-6243-3848-be26-5d9e5609992b.roa
Signing time:             Tue 13 Dec 2022 18:27:09 +0000
ROA not before:           Tue 13 Dec 2022 18:27:09 +0000
ROA not after:            Wed 18 Jun 2025 04:00:00 +0000
asID:                     210703
IP address blocks:        216.74.110.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 12 Apr 2023 20:21:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:3d:52:dd:ee:fb:98:52:a3:98:9a:de:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Dec 13 18:27:09 2022 GMT
            Not After : Jun 18 04:00:00 2025 GMT
        Subject: CN=c38e5a23-f91f-401f-a6d4-c44310825fb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:22:bb:44:86:d4:ec:7e:be:60:ab:61:2d:49:
                    b8:64:66:d5:da:2f:95:53:ee:ff:b2:79:57:6d:64:
                    ae:1b:68:4c:d7:f9:f8:a8:9d:88:6b:92:24:f4:9a:
                    58:15:11:2b:66:97:46:c4:3e:13:91:95:4e:f9:5c:
                    f0:b3:f3:09:57:e9:dd:96:16:f7:d7:11:57:ac:42:
                    b6:fc:bf:32:0e:b5:8c:dd:41:28:99:9b:7f:00:2d:
                    fd:fa:71:53:c4:66:55:0c:6d:d9:7b:a8:8c:09:db:
                    e7:33:7e:3f:68:3a:3f:4e:51:04:5a:c6:23:a3:8e:
                    2b:1d:22:e0:e1:24:61:d5:60:a1:2a:fa:84:22:5f:
                    2d:06:7b:cd:d6:e3:ec:dd:8f:73:ee:77:90:2e:15:
                    1b:97:69:23:89:fc:ee:88:41:ec:8a:42:d6:d0:66:
                    07:a0:e5:74:2e:2b:11:d4:10:2a:3c:6f:c2:77:6c:
                    b8:98:f7:d0:d6:1d:d7:12:ec:97:6d:f1:3d:77:c4:
                    68:23:2f:0e:f7:69:99:23:f7:16:69:85:fb:d6:62:
                    98:3e:42:c9:6c:95:35:62:c7:60:e1:57:83:82:fb:
                    c3:b8:30:10:38:5a:ab:a9:83:b0:cd:85:39:62:5a:
                    17:f1:bd:c1:0e:ac:f0:f8:0b:ae:7a:87:89:22:94:
                    84:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:F0:36:A2:BC:80:43:0E:F3:3E:E5:EE:F4:9A:E2:BB:EB:95:FE:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/ec2dec59-6243-3848-be26-5d9e5609992b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.74.110.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:91:d3:bb:b3:5a:c3:2d:b7:85:c6:0b:02:9c:ab:13:8e:58:
         c9:0e:1d:02:f2:07:93:b4:78:ff:06:81:23:a5:d8:13:9c:31:
         92:f2:f8:b3:19:f7:f1:fc:4c:31:60:8f:04:a6:4a:c6:17:d5:
         a3:98:9d:ec:5d:35:6f:ef:b1:82:6f:98:bc:a2:a0:22:8f:ae:
         9d:88:f1:85:25:b3:ea:bd:75:3e:54:5c:94:2a:c1:ca:e4:26:
         8d:a7:4b:55:55:26:80:39:43:4f:53:c8:02:0a:31:c7:26:0f:
         2d:a2:20:13:69:52:db:a1:58:43:86:31:4e:93:8f:40:af:d7:
         b7:89:1c:8a:2d:01:68:cf:3b:a4:54:d6:0d:3a:01:7b:f6:4b:
         45:90:14:51:25:35:87:84:a7:a9:8b:00:25:4d:9e:e2:97:b6:
         7c:9f:f8:cc:c3:92:68:8a:cb:6a:87:10:bd:b0:ab:a8:e5:ee:
         41:35:7f:76:bb:d2:46:e9:f6:8d:6b:b0:ac:22:b5:39:76:a9:
         55:dd:cb:9b:74:2e:38:ab:b2:a9:0f:00:01:de:bf:98:b2:0c:
         d2:b9:84:6b:18:ad:af:f2:76:94:c5:d2:68:28:ec:5e:fb:a4:
         45:d5:86:7f:a7:1d:96:11:d8:ff:8c:67:2d:2d:cb:e4:f8:6a:
         5a:48:e6:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----