Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/cb822c51-751e-35bc-9e4f-69cf49f0dbd8.roa
File:                     cb822c51-751e-35bc-9e4f-69cf49f0dbd8.roa (raw, json)
Hash identifier:          xcE/8J/p6HhR1RUuzUb0MkhDIdk1GsOgYClLx7Q5KUw=
Subject key identifier:   1B:03:C3:8E:16:D5:5E:1F:2B:AF:BA:AA:08:7A:71:4A:AD:91:19:78
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F4328583E1BC9E789A382F1A35D3D7740
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/cb822c51-751e-35bc-9e4f-69cf49f0dbd8.roa
Signing time:             Wed 01 Jun 2022 12:00:00 +0000
ROA not before:           Wed 01 Jun 2022 12:00:00 +0000
ROA not after:            Thu 25 May 2028 04:00:00 +0000
asID:                     11404
IP address blocks:        152.44.128.0/17 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:1b:c9:e7:89:a3:82:f1:a3:5d:3d:77:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Jun  1 12:00:00 2022 GMT
            Not After : May 25 04:00:00 2028 GMT
        Subject: CN=ccf859b7-7a53-43e8-9d0f-3b6d95406cd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:85:b2:22:69:87:7c:99:b7:37:96:a6:92:23:
                    cc:03:be:9b:ed:95:2b:33:c5:4a:c3:e6:b2:2a:ce:
                    3f:d0:96:69:7d:6d:3b:8d:77:9b:79:07:70:97:0a:
                    c8:34:e4:c7:fa:3a:bf:e7:22:d9:d8:d7:5e:76:79:
                    24:df:6d:23:79:33:2c:ef:f2:c9:ed:82:8c:94:53:
                    33:59:fb:6f:3e:7c:db:5e:6a:18:4b:30:55:41:cd:
                    00:bc:88:4f:69:14:f3:87:e1:84:b2:56:8c:f8:5a:
                    57:7a:a5:47:ce:97:b9:a3:af:71:29:ec:fb:85:42:
                    c8:94:74:3c:9c:9d:7d:bb:41:e8:63:e0:65:c2:22:
                    c9:b8:db:2a:9a:d7:9c:fd:eb:85:d3:9b:18:57:61:
                    d5:40:e5:49:fd:5e:b8:ea:dc:45:0d:dd:fe:ac:2e:
                    f6:b9:06:d4:fa:60:1a:aa:1d:63:02:e1:b7:e0:e9:
                    3a:40:14:af:57:66:1d:de:e0:b2:d7:b6:28:03:8e:
                    53:91:6a:f5:23:fa:8e:71:e8:37:03:2e:49:8c:ea:
                    65:b6:88:65:9a:1b:bf:05:0d:3f:83:a2:1c:7b:9c:
                    e6:fa:30:71:72:dc:19:0c:2c:3a:85:1c:a4:a0:a5:
                    e1:72:f2:11:00:33:66:f2:9f:01:f6:c3:34:dd:4a:
                    1c:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:03:C3:8E:16:D5:5E:1F:2B:AF:BA:AA:08:7A:71:4A:AD:91:19:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/cb822c51-751e-35bc-9e4f-69cf49f0dbd8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.44.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:c4:42:f1:ea:43:7b:44:f2:e0:a0:21:a7:0b:c3:c1:b5:cf:
         82:22:f2:69:3b:7c:bb:51:8c:a3:c1:8d:42:d5:ea:5b:7b:32:
         6d:b3:49:46:16:d4:5b:13:59:2d:89:b4:9b:98:74:c4:aa:64:
         c3:e3:8a:5c:d5:f8:fa:e8:34:5c:a2:a4:06:8f:31:ef:bb:7b:
         9d:6d:e2:fc:59:f4:4b:dd:c7:34:56:84:db:0b:ed:7d:d7:fd:
         bf:ef:c1:c2:06:aa:60:aa:a4:1f:da:b9:f7:b9:b4:fa:6b:d0:
         de:89:47:a9:51:64:87:a2:01:8b:30:6e:08:86:73:1f:73:29:
         1e:e2:3a:3d:11:8f:99:fd:f1:91:e1:77:8f:14:6f:b9:ca:4c:
         91:67:97:02:49:b4:b3:42:dd:23:2e:bb:aa:ea:96:d4:8e:19:
         04:59:f6:03:be:d9:af:f8:f1:e8:15:b1:6a:0a:c4:dc:39:62:
         ab:72:28:7f:b9:a2:a1:6d:5d:6d:ff:43:04:78:a2:76:e5:f4:
         f8:0f:50:e7:c7:d6:ee:da:6d:97:e1:63:7f:0a:ee:5b:00:cb:
         16:03:95:bf:1a:59:d2:94:33:20:19:68:5d:de:aa:a7:63:95:
         82:2f:db:c8:7d:7e:29:cf:a2:43:5b:15:cf:a8:4c:ba:9c:3f:
         a9:a4:db:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----