Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/aac96faf-d037-3f3b-8a43-e7fc10ee6f73.roa
File:                     aac96faf-d037-3f3b-8a43-e7fc10ee6f73.roa (raw, json)
Hash identifier:          WcqK/3NnCelyiL3hEkpjbmkmARVm7jhxryfwKSFG5jA=
Subject key identifier:   A2:AE:DE:F1:1A:31:3C:62:8B:CB:20:4D:44:E7:14:D3:B6:4C:47:23
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F4328583E1BC8DC645522CD6AB0B3E900
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/aac96faf-d037-3f3b-8a43-e7fc10ee6f73.roa
Signing time:             Wed 01 Jun 2022 12:00:00 +0000
ROA not before:           Wed 01 Jun 2022 12:00:00 +0000
ROA not after:            Thu 25 May 2028 04:00:00 +0000
asID:                     54858
IP address blocks:        107.190.208.0/20 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:1b:c8:dc:64:55:22:cd:6a:b0:b3:e9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Jun  1 12:00:00 2022 GMT
            Not After : May 25 04:00:00 2028 GMT
        Subject: CN=14792275-83ac-49b0-bc98-ff94ffa69b69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:f8:15:0b:7c:5a:15:0b:8c:56:38:60:74:07:
                    2e:61:ff:76:2a:7e:02:83:dc:36:5e:39:be:fb:6a:
                    3e:13:fd:ff:37:83:51:94:fc:84:a0:e3:8a:ce:d7:
                    31:d2:2d:c3:3a:75:f8:90:4a:bc:2b:27:a9:fc:e1:
                    e2:fe:f2:dd:d1:a8:7d:44:e6:05:2a:ea:57:7e:f4:
                    78:bf:58:29:75:1b:19:b9:ce:21:f5:28:8c:73:fc:
                    0d:b6:b5:7f:68:4d:64:47:cf:3e:08:e0:30:32:63:
                    9e:ac:8c:75:69:bc:7c:27:69:12:9c:8e:60:a9:fd:
                    ba:60:9d:fe:ec:4f:39:77:99:85:7b:37:69:a4:31:
                    e2:a7:0f:4f:29:a6:60:ef:4c:d8:22:ff:de:4c:b1:
                    aa:c0:49:ed:2b:f3:c5:5e:f6:e1:d1:24:81:5c:4d:
                    ba:bd:f4:c9:96:22:03:1a:8f:ed:61:52:91:64:f7:
                    67:fd:d6:a2:b4:80:c1:fd:4c:17:6a:4e:21:23:fc:
                    eb:34:53:13:2a:c0:8e:bb:b4:93:61:fe:d5:34:95:
                    21:6e:d7:23:dd:8b:6c:35:0a:66:2d:b0:71:37:69:
                    e5:1f:2b:5c:65:51:df:2a:4e:67:12:1e:42:41:7c:
                    55:13:64:2c:84:cc:9d:e0:40:0c:a9:f0:98:ac:ce:
                    1e:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:AE:DE:F1:1A:31:3C:62:8B:CB:20:4D:44:E7:14:D3:B6:4C:47:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/aac96faf-d037-3f3b-8a43-e7fc10ee6f73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.190.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:c7:fc:5b:bb:0a:67:f5:f0:54:03:83:4f:fd:dd:c2:f5:2c:
         53:f7:ea:90:35:a4:c6:d1:d3:0a:27:a6:11:b5:c9:4a:75:6f:
         86:d3:ac:b6:2d:ad:cb:5b:75:64:cf:bc:23:f5:28:67:26:3c:
         13:2b:06:83:67:87:b1:c4:2e:b8:d5:5f:1b:ea:c7:36:fd:48:
         c2:6f:06:d4:96:2c:d3:75:fa:e6:d6:1f:74:39:64:e8:20:2b:
         a2:a5:aa:0f:bc:e1:36:0e:1d:60:58:3f:96:a3:ff:46:9b:80:
         bc:df:81:c7:78:49:2c:79:c8:ea:68:94:be:1d:cf:74:d3:77:
         09:15:5f:21:b6:41:10:ff:36:b1:b2:d4:48:80:50:6a:88:48:
         61:3d:75:17:9e:27:85:47:45:2f:43:2d:8a:73:f5:bc:d6:a4:
         29:ac:25:5a:78:62:aa:ff:cb:b1:ce:31:d2:ce:0b:e8:d1:f9:
         6b:d0:81:e0:f2:90:87:f1:79:3b:4f:b7:6f:44:33:59:28:8f:
         af:8b:a9:9a:b2:6c:74:12:9d:10:6a:9d:3d:c8:b7:cc:e6:79:
         34:c2:62:ef:41:16:8d:5d:0e:62:22:82:df:02:20:dc:f2:b5:
         fd:20:25:d7:bd:d9:70:f8:60:f6:eb:3c:15:ac:35:5c:e5:9c:
         34:8b:37:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----