Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/8520af75-fdf1-3aa1-b34c-ca7eae58e96d.roa
File:                     8520af75-fdf1-3aa1-b34c-ca7eae58e96d.roa (raw, json)
Hash identifier:          WZ7St0bt076MrOSYbRbYnfRrkpgyIS0rJpMymrvokOA=
Subject key identifier:   69:DD:E8:5C:A6:CA:AF:EA:E4:84:72:DD:6C:1F:3D:09:AD:5F:97:EF
Certificate issuer:       /CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
Certificate serial:       010D0C9F4328583F4C59ECA01E22AFFD55D2BC40
Authority key identifier: 92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/8520af75-fdf1-3aa1-b34c-ca7eae58e96d.roa
Signing time:             Thu 07 Jan 2021 14:36:59 +0000
ROA not before:           Thu 07 Jan 2021 14:36:59 +0000
ROA not after:            Sun 22 Dec 2024 05:00:00 +0000
asID:                     140947
IP address blocks:        172.111.58.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:4c:59:ec:a0:1e:22:af:fd:55:d2:bc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
        Validity
            Not Before: Jan  7 14:36:59 2021 GMT
            Not After : Dec 22 05:00:00 2024 GMT
        Subject: CN=f629fd1c-5586-45dd-ad2a-b4ac7c691b1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:23:74:1c:49:ad:ad:d2:1e:0f:59:40:ac:0b:
                    3c:24:bd:da:40:f5:6e:88:44:c9:74:f4:f3:6a:86:
                    5a:be:10:14:ad:55:c5:ec:65:7a:08:b2:b0:ad:8e:
                    a6:b0:6f:b6:0b:5b:c1:a7:0f:83:f1:11:db:3f:fb:
                    8b:c8:dc:b4:9b:44:f8:41:bb:12:3e:7d:5f:a9:3b:
                    c7:bf:3c:a0:65:9b:b8:59:93:18:b0:ef:0a:3f:9f:
                    07:95:2f:ff:92:ab:57:06:72:19:75:0e:98:8b:ca:
                    a0:ff:d5:e2:cf:66:ca:02:53:a1:0c:31:6a:b4:e0:
                    64:54:b4:cf:1a:42:a7:25:fd:07:40:53:d0:a2:33:
                    3f:a1:e0:d2:91:0f:9a:4b:f0:8b:9d:a4:4c:1d:1f:
                    9b:13:5a:e6:cf:87:65:f9:0a:33:98:ce:48:d7:08:
                    07:52:f1:7a:47:70:4e:63:28:36:b6:95:98:bf:19:
                    7a:27:65:8d:c2:8b:98:5e:3e:e3:d0:5e:6c:dc:b0:
                    f6:95:e0:f9:7d:3f:a1:0e:47:3d:d2:08:63:56:4a:
                    5f:05:e2:59:ee:4f:fa:11:03:0e:3f:e0:43:83:36:
                    6f:3d:c6:75:5f:6f:9d:a1:06:b5:4c:8a:aa:82:e4:
                    90:ba:5e:9f:6b:50:fd:ac:06:aa:35:cb:60:12:05:
                    8a:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:DD:E8:5C:A6:CA:AF:EA:E4:84:72:DD:6C:1F:3D:09:AD:5F:97:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/8520af75-fdf1-3aa1-b34c-ca7eae58e96d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl

            X509v3 Authority Key Identifier:
                keyid:92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:8f:00:f7:4a:58:67:de:51:45:fb:52:c2:74:f8:82:27:19:
         f4:2f:e5:05:af:01:e0:7e:81:22:a1:3a:51:69:8e:64:33:43:
         bf:b5:91:d1:0a:5a:0b:66:76:d1:17:25:02:67:b3:d3:3f:d3:
         94:54:ed:e9:ef:7f:13:1e:22:ef:c4:50:5c:7e:36:f2:cc:c7:
         cd:fc:e8:f8:10:16:c4:75:24:a8:24:78:55:13:fa:69:91:87:
         e3:5f:5b:97:c9:91:e2:0c:d7:03:62:1e:3a:3b:2a:8f:d8:f9:
         00:09:1b:63:43:b6:86:76:11:83:6b:b5:65:5e:7a:75:c5:a8:
         b2:36:84:c0:54:91:7d:12:ca:78:ee:79:64:85:5a:f6:1d:da:
         b2:18:0a:d9:31:28:48:2e:fa:c3:2d:25:34:0a:e8:1e:77:20:
         c6:b8:74:6f:91:ae:d3:d3:79:b9:bc:b4:ae:12:70:48:08:24:
         fa:b2:b3:27:2e:2f:87:a9:16:ac:2d:64:e8:bd:d6:f0:9b:d1:
         8e:8a:77:fa:a6:be:42:8f:af:65:5d:6d:b5:97:2a:47:20:65:
         44:64:60:7f:43:cf:bf:c5:c9:56:95:1c:7a:46:7e:16:15:6a:
         f3:bb:03:b7:c6:5e:b4:82:94:6b:3e:e0:e5:9b:55:ac:68:74:
         5d:4b:8b:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----