Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/970ceee8-f9aa-3cff-ad42-7910a7bed737.roa
File:                     970ceee8-f9aa-3cff-ad42-7910a7bed737.roa (raw, json)
Hash identifier:          2LmemmUGXqiTHnp1vAfv62HFi/JD14ejjgl6pKvtVck=
Subject key identifier:   34:D4:4D:5B:7B:22:F3:B4:0F:15:D3:99:3B:30:B2:1E:B4:73:C4:46
Certificate issuer:       /CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
Certificate serial:       010D0C9F432858442012950B072C6EA482351180
Authority key identifier: 80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/970ceee8-f9aa-3cff-ad42-7910a7bed737.roa
Signing time:             Wed 06 Dec 2023 12:42:27 +0000
ROA not before:           Wed 06 Dec 2023 12:42:27 +0000
ROA not after:            Tue 05 Mar 2024 12:42:27 +0000
asID:                     215948
IP address blocks:        103.71.63.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:20:12:95:0b:07:2c:6e:a4:82:35:11:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
        Validity
            Not Before: Dec  6 12:42:27 2023 GMT
            Not After : Mar  5 12:42:27 2024 GMT
        Subject: CN=f60f7cf9-f889-4489-b81f-361a90a52af1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:35:77:d6:96:92:8e:77:0d:73:c0:ca:b1:45:
                    b7:23:27:21:d9:51:06:a1:52:7a:55:a7:c3:10:c8:
                    ca:e5:ba:ed:ce:9f:6a:10:d4:0b:c0:55:ba:4d:d9:
                    fd:e5:88:63:fa:16:2c:4d:94:53:9e:5a:05:81:a5:
                    5b:23:a2:05:fc:ef:60:d6:39:8e:41:7a:56:1e:94:
                    b9:eb:67:b2:82:c2:d2:6b:c7:48:ca:1d:fb:00:57:
                    34:c8:16:cc:d0:4c:63:53:9d:b5:ec:86:a6:53:52:
                    c8:44:7c:40:b1:6b:37:77:d8:13:6c:6e:2b:4b:d6:
                    e5:c3:da:88:1e:be:af:df:50:90:ff:9d:5a:c0:9b:
                    d2:b4:55:f6:64:0f:6c:ef:a5:bb:3f:f9:80:1e:7c:
                    de:2f:ac:a0:6a:3d:4f:c8:80:20:08:ed:fb:12:fa:
                    bb:e8:3f:e9:0d:58:84:8a:7e:13:ed:be:29:98:f5:
                    a6:99:70:71:23:b0:9c:78:d2:62:76:af:53:d1:a4:
                    47:c2:94:ec:9a:63:a2:91:53:96:f0:5f:9f:2a:17:
                    0b:66:8c:cb:ca:f4:23:17:3d:2d:6e:5a:8f:e4:0e:
                    df:f8:d2:bd:6d:73:1e:5d:47:ac:f4:95:20:7e:cc:
                    f3:a9:82:7b:58:1c:c1:ff:1e:f9:34:59:0a:b2:1c:
                    d7:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:D4:4D:5B:7B:22:F3:B4:0F:15:D3:99:3B:30:B2:1E:B4:73:C4:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/970ceee8-f9aa-3cff-ad42-7910a7bed737.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.crl

            X509v3 Authority Key Identifier:
                keyid:80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.71.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:fc:de:8e:65:68:50:86:30:e8:70:4d:62:2b:3a:db:78:da:
         4a:1c:a1:38:d5:01:6c:ed:33:ae:2a:cb:d1:92:50:c2:8e:a7:
         a0:02:9b:4e:d0:c3:f3:a0:4b:2d:29:18:ef:13:65:4d:07:43:
         14:43:de:65:16:38:a8:2a:22:ed:15:1a:f5:49:1d:92:c5:80:
         06:a6:2a:54:4e:d9:d8:f8:73:ab:e4:cb:82:d3:61:cd:cb:8b:
         89:f8:03:2b:f8:dc:ef:3e:15:df:3c:7d:e1:b8:ad:df:e6:80:
         fc:7b:9e:07:72:da:27:34:f2:2a:0f:48:39:d8:f6:28:17:46:
         21:a9:c4:10:71:f0:20:8c:82:60:92:d1:a7:73:66:cf:bd:3a:
         58:9b:4c:fb:bc:18:da:92:de:77:07:d8:9b:10:da:ce:7f:dc:
         6d:67:a6:bd:fd:81:c0:e2:40:d8:d3:d0:d7:66:fa:9f:0b:54:
         3f:c3:2a:0e:49:16:fa:83:3a:14:7e:9b:8e:73:d7:0e:15:24:
         64:dd:1b:3b:64:3f:2c:37:eb:84:11:4e:b8:e0:7e:15:c4:ab:
         d2:6f:2c:e3:1f:02:a6:f0:1f:3c:35:56:5d:04:b3:2f:2a:63:
         85:43:f7:05:79:3b:75:fd:37:1e:83:9d:df:56:3f:b3:8c:de:
         b0:ff:cc:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----