Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4018bfe9-5643-488a-a9cd-39cb78cadfa1/35d3a09b-46d7-3460-92ce-f76972133b7c.roa
File:                     35d3a09b-46d7-3460-92ce-f76972133b7c.roa (raw, json)
Hash identifier:          p4Ry9JW7Is6fFHJwsQV5BolcRCuLusV/7b0278RCnTQ=
Subject key identifier:   8A:B5:8E:51:FD:77:DB:01:D4:A6:F1:62:CA:73:50:1F:D0:C3:03:74
Certificate issuer:       /CN=4018bfe9-5643-488a-a9cd-39cb78cadfa1
Certificate serial:       010D0C9F432858402B9E17DCF4939FEF6FCCC0C0
Authority key identifier: F7:68:18:28:35:2F:9F:72:DC:2C:32:33:44:CB:52:88:D2:C7:1A:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4018bfe9-5643-488a-a9cd-39cb78cadfa1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4018bfe9-5643-488a-a9cd-39cb78cadfa1/35d3a09b-46d7-3460-92ce-f76972133b7c.roa
Signing time:             Wed 07 Dec 2022 12:00:00 +0000
ROA not before:           Wed 07 Dec 2022 12:00:00 +0000
ROA not after:            Sun 08 Dec 2024 05:00:00 +0000
asID:                     14618
IP address blocks:        192.0.54.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 22 Dec 2022 21:44:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:2b:9e:17:dc:f4:93:9f:ef:6f:cc:c0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4018bfe9-5643-488a-a9cd-39cb78cadfa1
        Validity
            Not Before: Dec  7 12:00:00 2022 GMT
            Not After : Dec  8 05:00:00 2024 GMT
        Subject: CN=a2bf3301-359a-4f38-9bd8-d70c9e93bd18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:f0:33:21:9a:8e:77:b8:60:cc:ff:c0:d4:a9:
                    d2:0c:d5:5d:1a:f6:8d:2d:76:b9:cf:2f:ec:56:38:
                    f1:36:86:3e:84:46:e5:93:09:36:b0:6f:e7:ba:3b:
                    59:88:e4:18:bd:4b:99:f7:ae:9c:d3:cd:b2:3c:1c:
                    84:63:16:54:e2:51:b3:f8:e2:3c:f1:b4:d8:27:a3:
                    ba:b4:0b:8e:47:d8:0b:b8:bf:3b:a4:7c:38:f6:da:
                    f4:ae:6e:dc:65:f4:ed:d8:65:3e:96:a6:51:e6:16:
                    a3:42:c4:db:86:31:33:f4:59:c8:1e:85:c9:66:ab:
                    e4:b3:44:f1:44:5c:07:89:68:68:a5:bc:0c:95:5c:
                    05:2f:d1:17:09:97:26:55:f3:7f:17:aa:3e:19:ef:
                    89:8b:ee:c0:47:24:23:41:63:c1:a0:a8:c8:ad:a5:
                    78:97:ac:4e:8d:d6:d6:1c:58:e7:e5:55:33:0f:ef:
                    40:ae:03:f8:2e:be:49:97:7a:fd:6d:68:b5:28:7d:
                    8d:87:ef:31:c9:1b:a3:d6:a3:49:c2:61:ac:8c:3b:
                    59:c8:c5:ca:50:eb:8f:7f:e5:bf:63:ec:de:dc:cb:
                    95:d0:ee:a2:03:3f:eb:84:67:10:59:ff:d0:40:ca:
                    38:fc:6e:44:a7:ed:ea:36:46:fb:20:80:ee:f9:78:
                    b0:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:B5:8E:51:FD:77:DB:01:D4:A6:F1:62:CA:73:50:1F:D0:C3:03:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4018bfe9-5643-488a-a9cd-39cb78cadfa1/35d3a09b-46d7-3460-92ce-f76972133b7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4018bfe9-5643-488a-a9cd-39cb78cadfa1/4018bfe9-5643-488a-a9cd-39cb78cadfa1.crl

            X509v3 Authority Key Identifier:
                keyid:F7:68:18:28:35:2F:9F:72:DC:2C:32:33:44:CB:52:88:D2:C7:1A:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4018bfe9-5643-488a-a9cd-39cb78cadfa1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.0.54.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:0f:f9:cc:a0:08:b5:53:a8:16:7a:09:d1:f6:bb:f9:56:af:
         d0:4d:7f:da:47:e1:78:f7:5e:bf:94:2f:45:36:14:64:cd:e3:
         a4:33:52:8d:37:29:7b:e2:ee:0d:21:ad:a3:ab:6a:2d:23:2b:
         b1:d8:b0:a8:ae:01:31:27:90:df:a0:1e:c3:c8:1c:18:ec:30:
         9b:89:e4:c9:c9:cf:7a:a6:99:81:9f:29:c1:59:f5:4a:b3:84:
         f6:6b:15:0f:99:63:29:67:49:10:91:92:13:e9:3b:63:2e:56:
         53:53:15:22:51:6c:08:da:5a:d7:59:79:e3:34:36:35:13:53:
         42:04:19:1c:df:f3:ea:bb:14:16:f4:85:ae:59:f2:73:e4:bd:
         90:ce:70:8c:03:e4:93:3c:1b:5a:c7:ac:02:b6:20:d2:2d:fc:
         d1:d1:c8:5f:24:c6:17:cc:6e:2f:17:89:cd:56:84:5d:af:22:
         01:84:0b:b9:2a:5c:65:74:ae:70:cf:ca:ae:78:73:77:85:ad:
         3e:1a:9a:54:95:af:50:31:91:3e:57:ff:46:c8:ba:f2:ca:70:
         8d:a9:1e:4d:63:e0:95:7d:1c:8e:90:85:61:e1:95:e8:04:09:
         26:c8:b1:7c:2c:49:ee:55:ac:7b:a7:33:c1:43:dc:f4:14:89:
         17:af:d4:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----