Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/e6b5e9e2-ddc2-3833-a956-daecec96f3f4.roa
File:                     e6b5e9e2-ddc2-3833-a956-daecec96f3f4.roa (raw, json)
Hash identifier:          eSE92zhBiRjWvEvYVlBj++PqeZTcVKGhScj8tSE0Q6I=
Subject key identifier:   65:D4:F9:0E:90:14:A1:C4:C0:EF:85:9A:16:E9:BD:A1:6D:93:A2:E9
Certificate issuer:       /CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
Certificate serial:       010D0C9F4328583BE00BEC27104283D17AF8ABA8
Authority key identifier: 92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/e6b5e9e2-ddc2-3833-a956-daecec96f3f4.roa
Signing time:             Thu 07 Jan 2021 05:00:00 +0000
ROA not before:           Thu 07 Jan 2021 05:00:00 +0000
ROA not after:            Mon 12 Feb 2024 05:00:00 +0000
asID:                     26863
IP address blocks:        172.111.59.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3b:e0:0b:ec:27:10:42:83:d1:7a:f8:ab:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
        Validity
            Not Before: Jan  7 05:00:00 2021 GMT
            Not After : Feb 12 05:00:00 2024 GMT
        Subject: CN=fa76ba67-d3b3-4b16-b1be-095a6ebd03aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:b5:bf:58:3c:e6:36:26:d1:0a:74:7c:f7:c7:
                    be:a6:bf:0b:28:0b:46:a9:56:52:e1:3b:4a:7d:8e:
                    ca:b8:f2:06:a9:f3:17:53:93:20:b5:a9:55:b3:72:
                    be:52:9a:2a:8c:b7:d8:ba:90:7c:ed:f3:5d:41:45:
                    74:5c:d7:13:1d:7c:e5:35:52:62:75:e8:09:9c:79:
                    cf:eb:2d:0f:55:23:93:fd:52:15:24:2d:14:9d:51:
                    11:10:d6:88:1a:d7:87:df:0d:5a:4d:b6:ec:ad:92:
                    25:07:86:53:ea:f2:a1:f8:72:75:ea:f3:92:0d:7d:
                    fd:4a:b6:72:2b:fc:a5:90:5a:d1:03:63:cb:db:88:
                    14:47:02:98:ff:30:81:4f:97:74:54:9b:ed:92:0b:
                    d8:22:6a:90:04:a2:df:4f:e5:4e:f4:25:54:0d:eb:
                    b2:d2:a2:ab:5c:09:92:1b:75:2f:f1:44:bd:38:24:
                    d5:9d:9b:28:5c:17:27:54:9d:c0:2e:f3:4e:e4:20:
                    e7:63:99:0d:36:c5:df:5f:83:4f:4d:4a:d2:21:f5:
                    3d:58:22:1b:fe:8e:bd:1e:1e:17:d0:3e:fc:3c:5b:
                    5b:64:69:ab:21:d8:cb:6b:7f:c9:32:24:a0:50:df:
                    b0:56:2e:24:25:ca:69:04:c4:9f:88:af:2c:bb:72:
                    b7:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:D4:F9:0E:90:14:A1:C4:C0:EF:85:9A:16:E9:BD:A1:6D:93:A2:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/e6b5e9e2-ddc2-3833-a956-daecec96f3f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl

            X509v3 Authority Key Identifier:
                keyid:92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:46:2e:f6:7f:b7:1e:32:72:e2:bb:3b:f2:f5:ba:4e:d2:d9:
         11:2f:db:a5:35:16:5d:be:4d:19:f0:98:c1:a2:5c:58:ab:0e:
         03:07:0b:f8:2e:72:0e:27:cd:d1:e7:c4:c4:e0:81:01:54:4d:
         5c:57:0f:5b:16:15:86:59:ba:73:de:1c:44:7a:02:4c:02:87:
         68:9c:68:40:4b:95:f2:b9:46:4d:30:24:4e:d5:4f:cc:99:46:
         ec:9a:99:0f:96:7b:b1:5f:04:45:bf:80:fb:21:8b:a6:58:71:
         7b:77:e8:32:30:dc:ce:91:88:c3:09:ba:7f:2b:f7:23:be:7f:
         b7:31:85:7d:7e:8d:be:70:0d:0d:d2:4c:61:71:9b:1c:9e:81:
         99:94:ff:54:cb:d8:98:b9:70:c5:a2:54:cf:bc:be:c3:d7:b6:
         f5:98:ec:70:7a:cb:37:71:6a:d9:7c:68:df:29:60:9e:e4:15:
         0f:10:fa:42:0a:58:52:3c:b0:85:d0:7f:b7:77:f1:8b:36:06:
         dd:7f:65:77:8e:b7:c0:51:89:1c:e7:c9:a2:a0:e8:b5:c2:d7:
         88:29:5f:90:b5:33:dc:e3:03:22:2c:a4:63:ef:17:70:fd:f2:
         ad:e9:39:49:31:78:5e:d7:16:c6:fe:33:29:c8:58:04:cd:e5:
         91:43:ce:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----