Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/308ae0e0-8b8e-387f-bedb-cae52d17098a.roa
File:                     308ae0e0-8b8e-387f-bedb-cae52d17098a.roa (raw, json)
Hash identifier:          oWqbSQmdIRpS59BQCGbu9VvTgn91KxdY5pqPbz2+iTg=
Subject key identifier:   75:50:9C:1A:C7:E7:DC:F2:3A:FD:77:EC:E5:9C:1B:C2:83:D3:9B:6D
Certificate issuer:       /CN=5fab6378-e15d-4471-b01f-be15fc5bfa04
Certificate serial:       010D0C9F4328583CE2F5657CEE32F28016DD7B00
Authority key identifier: 61:40:43:BF:E2:50:B3:47:64:FC:D1:73:0F:62:98:03:50:32:18:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/308ae0e0-8b8e-387f-bedb-cae52d17098a.roa
Signing time:             Mon 15 Mar 2021 04:00:00 +0000
ROA not before:           Mon 15 Mar 2021 04:00:00 +0000
ROA not after:            Wed 15 May 2024 04:00:00 +0000
asID:                     1239
IP address blocks:        207.170.162.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:e2:f5:65:7c:ee:32:f2:80:16:dd:7b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fab6378-e15d-4471-b01f-be15fc5bfa04
        Validity
            Not Before: Mar 15 04:00:00 2021 GMT
            Not After : May 15 04:00:00 2024 GMT
        Subject: CN=b44ee7cb-9259-41cb-b654-c369ed527924
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:f9:9c:3b:5a:a4:4d:47:59:63:a6:97:60:d4:
                    b6:5f:9f:f3:c0:6f:01:a9:36:da:7c:18:41:31:07:
                    4d:52:d7:b2:44:90:ce:22:52:85:ea:ff:81:3c:d2:
                    b9:ff:52:8b:ad:59:ef:4f:86:9e:7f:f1:c3:ab:a4:
                    67:ba:35:c7:32:90:8a:fa:78:4c:03:6d:d8:bd:43:
                    c4:5f:07:62:9d:4d:13:84:57:a5:8e:20:a6:18:93:
                    86:bf:b6:ac:d6:36:e3:0a:c3:c0:00:7d:73:7c:41:
                    91:25:a3:09:52:1d:fc:5e:b5:72:1b:04:98:78:1b:
                    54:ea:23:34:42:ea:18:65:ad:1d:59:bb:a0:a6:c0:
                    75:3d:48:e7:39:63:27:63:3c:7b:88:2a:c2:3e:5a:
                    87:43:83:86:df:94:be:a9:8c:7a:8c:8a:a2:65:0c:
                    cf:b6:c9:3b:de:e5:ad:12:9b:fa:79:91:67:b0:b7:
                    6f:86:d3:c9:f4:92:58:0f:3b:ee:74:7e:64:7f:5c:
                    d4:77:40:72:f5:c7:62:a5:18:44:43:d6:7a:a9:06:
                    48:92:82:b9:36:48:e8:12:20:aa:33:fc:d9:2b:c1:
                    d3:06:28:d2:bc:7c:3d:cc:2d:84:ff:2e:d9:17:49:
                    a5:10:26:ec:54:b8:b6:e7:c8:2c:cc:26:dc:93:b7:
                    10:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:50:9C:1A:C7:E7:DC:F2:3A:FD:77:EC:E5:9C:1B:C2:83:D3:9B:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/308ae0e0-8b8e-387f-bedb-cae52d17098a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/5fab6378-e15d-4471-b01f-be15fc5bfa04.crl

            X509v3 Authority Key Identifier:
                keyid:61:40:43:BF:E2:50:B3:47:64:FC:D1:73:0F:62:98:03:50:32:18:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.170.162.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:c8:f4:07:df:0d:76:c4:f4:4d:8e:de:61:45:cf:fe:4f:2c:
         65:44:37:c4:39:a8:da:fc:14:55:e3:14:f1:2e:88:30:14:c8:
         5a:e2:5b:16:cd:ee:cd:0d:57:c0:15:d9:19:98:88:52:04:75:
         cb:57:66:13:ab:47:85:3b:14:14:9c:ee:3e:91:cf:8f:ac:cd:
         e0:ba:58:4a:f1:37:ab:0a:28:f0:4d:f3:da:ca:1d:da:e9:69:
         62:86:b6:37:97:36:7f:66:16:99:31:3b:fd:16:93:49:7a:7f:
         bb:e5:38:5e:bb:87:f0:d3:52:2b:b7:ab:77:6a:c8:45:d7:bf:
         34:c2:68:63:fe:bd:c3:ac:cc:87:46:b7:4d:1f:6a:a8:55:82:
         82:5c:63:01:21:dd:0f:97:11:1c:e3:8b:85:31:4b:33:a8:01:
         b4:26:83:a3:31:5b:e9:11:16:90:76:12:b4:91:72:c2:7b:50:
         3f:7d:70:b0:0a:e1:02:7a:21:8f:b4:c1:89:74:27:3b:58:1a:
         58:b6:3c:6b:9d:0d:c9:53:aa:18:ce:46:66:17:65:28:6d:0a:
         81:2f:cb:ae:5a:b7:fa:d3:1e:1d:a7:6b:30:54:24:8c:8b:49:
         f6:07:25:ec:4c:b9:ec:cb:01:92:89:bd:fe:93:20:1c:97:32:
         af:6b:18:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----