Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/eb1f3230-94fd-3811-a420-92b264d4d2a0.roa
File:                     eb1f3230-94fd-3811-a420-92b264d4d2a0.roa (raw, json)
Hash identifier:          yDzBVwLvnpWvCdwUIpJEN8sYOck3HL/ww5366f9XtAQ=
Subject key identifier:   A2:BF:80:E4:54:2D:C8:20:A8:04:D2:D1:1A:6E:E7:0D:1B:F7:75:45
Certificate issuer:       /CN=86b35f71-51ac-43ff-b604-cba3552c4c8c
Certificate serial:       010D0C9F43285843840AA76188A1BEBA0743FF00
Authority key identifier: 64:9C:3D:FE:D3:DF:3D:6B:67:BC:6D:BC:E9:05:BC:C0:6C:E6:1C:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/eb1f3230-94fd-3811-a420-92b264d4d2a0.roa
Signing time:             Wed 11 Oct 2023 15:20:22 +0000
ROA not before:           Wed 11 Oct 2023 15:20:22 +0000
ROA not after:            Tue 09 Jan 2024 16:20:22 +0000
asID:                     55154
IP address blocks:        100.42.30.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:84:0a:a7:61:88:a1:be:ba:07:43:ff:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86b35f71-51ac-43ff-b604-cba3552c4c8c
        Validity
            Not Before: Oct 11 15:20:22 2023 GMT
            Not After : Jan  9 16:20:22 2024 GMT
        Subject: CN=22373cb6-bc8a-472b-9b74-69f52e233639
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:8b:5f:88:82:8b:8a:53:74:f6:3e:4d:0b:c5:
                    63:97:0e:d1:6b:e5:e4:cd:bf:b8:a3:d0:4f:4d:a9:
                    78:23:d1:16:32:89:36:3c:b9:82:ac:1e:7e:97:72:
                    09:d7:c9:75:85:c1:46:81:e1:50:0f:9b:77:cd:e8:
                    76:6b:22:74:6b:2c:6d:a3:98:04:90:d9:f8:68:9c:
                    c7:32:95:02:6d:88:3b:3f:43:84:97:d7:8e:8f:32:
                    32:a4:fc:e7:e4:74:0d:4f:c7:41:59:01:01:60:9f:
                    b6:8a:1b:2e:4e:1b:d7:59:22:92:79:63:db:d2:4e:
                    43:9e:9a:12:57:cf:34:a0:e5:d6:23:14:e8:7b:58:
                    f5:db:bd:4e:4c:e6:f5:28:05:85:40:10:ed:46:a9:
                    df:dc:3e:99:28:67:30:56:0a:42:25:57:91:d3:45:
                    98:df:14:82:43:63:71:13:d4:ac:8a:fb:a6:c1:41:
                    71:6d:2f:88:b6:3d:97:38:9c:c8:d8:99:ac:63:6b:
                    60:10:79:31:ad:f6:a5:ee:1d:1a:3f:c9:b6:31:9f:
                    98:24:d6:36:b3:c7:cf:ee:51:74:bf:73:6e:d5:a2:
                    7e:86:8a:24:49:5b:8b:fc:81:37:14:7d:85:33:5e:
                    71:29:11:9c:c7:08:a8:29:73:08:1e:fd:35:9b:d1:
                    dd:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:BF:80:E4:54:2D:C8:20:A8:04:D2:D1:1A:6E:E7:0D:1B:F7:75:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/eb1f3230-94fd-3811-a420-92b264d4d2a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.crl

            X509v3 Authority Key Identifier:
                keyid:64:9C:3D:FE:D3:DF:3D:6B:67:BC:6D:BC:E9:05:BC:C0:6C:E6:1C:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  100.42.30.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:98:a3:9f:51:88:32:eb:f3:06:b7:4d:8e:eb:7e:98:36:a7:
         a6:04:db:a8:70:8c:4b:d7:3a:b9:cd:07:69:43:5b:28:df:f8:
         bc:a6:06:c0:24:84:a4:4b:b0:ea:ef:d5:73:86:a7:ea:cc:59:
         a3:43:ca:00:6a:35:90:5c:4e:02:60:fd:2a:a5:33:a7:a3:7c:
         5e:ff:88:45:57:6c:bf:7f:df:c1:84:bb:eb:fc:98:7c:8c:84:
         fb:c9:3c:a8:14:3f:97:89:bd:1e:de:28:48:53:5e:22:dd:81:
         4e:c8:df:69:33:d2:33:ca:d4:72:6c:c0:24:4c:e5:3e:30:3c:
         49:29:7d:ab:08:0a:5c:d2:4b:f9:cd:f4:27:ba:19:e9:89:8b:
         cc:2f:83:a6:20:78:65:24:5f:05:f3:c7:e5:90:ba:65:36:86:
         87:16:67:98:da:c2:32:44:d9:85:df:54:a6:3a:bf:5e:c8:c9:
         b5:b8:5b:08:9f:14:35:3c:5a:ad:d6:20:c6:8b:31:7c:5a:50:
         85:e1:50:36:b9:69:c6:49:28:2b:8d:7e:24:ac:80:e1:27:44:
         82:ab:6f:dc:78:01:42:bd:69:bd:4d:30:23:7d:31:95:b4:70:
         bf:f9:4a:56:eb:bb:1b:81:6d:64:18:a2:b4:26:7d:d7:9b:02:
         7e:7f:0a:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----