Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/01d82f46-8785-3a4c-a5a8-15fbec791225.roa
File:                     01d82f46-8785-3a4c-a5a8-15fbec791225.roa (raw, json)
Hash identifier:          w8eC3lBiJw7FO6NiD2qdCU4qha1Rz311a+mQ2gP9kuU=
Subject key identifier:   A4:2C:0F:EF:8C:13:C8:5D:BF:B9:5C:40:E9:23:4F:10:91:37:5B:E7
Certificate issuer:       /CN=69a80da8-69e1-4580-ab63-1ce23bea895b
Certificate serial:       010D0C9F4328583984655BDE6B020C1CECBE3D00
Authority key identifier: 86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/01d82f46-8785-3a4c-a5a8-15fbec791225.roa
Signing time:             Wed 24 Mar 2021 04:00:00 +0000
ROA not before:           Wed 24 Mar 2021 04:00:00 +0000
ROA not after:            Thu 11 Jul 2030 04:00:00 +0000
asID:                     32233
IP address blocks:        76.11.48.0/20 maxlen: 20

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:39:84:65:5b:de:6b:02:0c:1c:ec:be:3d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69a80da8-69e1-4580-ab63-1ce23bea895b
        Validity
            Not Before: Mar 24 04:00:00 2021 GMT
            Not After : Jul 11 04:00:00 2030 GMT
        Subject: CN=cd50ea93-0a20-48cf-a6a8-d8e55c6a3d32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:9f:48:6e:6a:8c:c5:53:8d:84:0e:91:1c:e8:
                    17:d7:cf:3a:ee:0d:30:6c:43:c1:6e:54:5d:16:6e:
                    1e:69:3b:23:50:83:b3:04:d0:b3:58:a1:fb:a9:34:
                    2c:72:d2:6b:0b:56:56:6b:3b:ad:12:6b:99:a6:d2:
                    63:10:3b:c2:8f:ad:45:f4:c2:15:91:54:83:a0:20:
                    f1:5a:8c:bc:e6:e5:3b:f7:45:6d:2d:14:1b:8d:e3:
                    41:05:66:b6:c5:d8:89:e7:38:64:1b:09:17:57:41:
                    73:75:48:7a:70:a8:83:63:96:fc:46:ad:d7:f6:be:
                    6b:64:f8:db:0f:a9:7c:41:05:9f:66:ce:2f:0d:65:
                    49:2c:0f:65:3e:cf:ba:5f:e3:77:1b:15:08:07:9c:
                    77:91:d0:0f:14:54:1f:ee:98:00:59:61:e7:57:de:
                    89:d2:74:53:8c:d7:ed:47:57:88:bd:8d:95:f0:cb:
                    b5:9d:ed:f1:3d:cd:ac:dc:c8:b5:ef:ed:13:56:d4:
                    0f:44:db:61:f3:47:1b:b2:ea:be:b5:08:2c:ab:6c:
                    2a:67:73:af:20:2d:99:5f:8b:de:19:e2:bd:20:bd:
                    9e:94:9d:82:63:49:b4:f1:4f:10:76:78:75:19:cb:
                    bd:34:6c:82:87:ef:90:33:9d:09:83:6f:04:31:25:
                    14:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:2C:0F:EF:8C:13:C8:5D:BF:B9:5C:40:E9:23:4F:10:91:37:5B:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/01d82f46-8785-3a4c-a5a8-15fbec791225.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl

            X509v3 Authority Key Identifier:
                keyid:86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.11.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:7f:cb:5b:c9:ba:6e:b8:40:a1:80:ed:8a:ca:b0:29:48:75:
         d3:bd:29:d8:6a:dc:81:98:b1:47:e0:6c:a8:26:28:3a:83:2f:
         db:65:2c:39:ec:bc:a6:b5:7f:24:fa:4a:3c:a9:d9:0c:a9:2f:
         00:12:b4:71:e1:3c:bb:6c:9c:3f:6c:eb:a5:94:d1:58:48:11:
         f9:55:45:b0:ff:90:89:f1:29:2f:1c:bf:73:f2:a0:4b:7f:43:
         ac:1d:65:9e:b5:64:a3:02:57:ca:84:68:0f:f4:a8:ac:b5:9b:
         5e:ad:b8:a8:04:44:28:b4:9c:1c:b0:ab:aa:ff:2e:04:11:ad:
         2b:81:8c:ab:8b:a1:1c:24:24:64:17:bc:4c:9b:5f:da:34:54:
         c6:f8:52:91:1d:f9:4b:68:04:b1:50:ff:df:23:ee:9d:c3:bc:
         dd:67:57:71:87:38:61:f3:70:c9:16:47:10:a4:da:9f:c0:cf:
         4f:e5:f6:ce:16:22:c5:28:d6:ad:1e:b2:b1:73:70:91:46:88:
         80:8c:0d:fb:43:41:c1:6a:42:8b:03:ad:5b:1c:e5:1e:24:f1:
         77:1e:2a:32:bd:6b:e9:a2:58:dd:28:2a:dd:e1:b4:a9:66:d7:
         0f:74:7e:07:6c:4b:cc:45:b8:34:00:5a:81:54:32:8c:e6:24:
         d2:1a:43:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----