Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/6f74883b-13cc-3a6f-b784-8f133612d43f.roa
File:                     6f74883b-13cc-3a6f-b784-8f133612d43f.roa (raw, json)
Hash identifier:          +NDAz+yyzCxh4vHefQArr6VUI2MtgZQha6i55YwMOzw=
Subject key identifier:   65:46:C1:FB:21:50:AB:93:B7:B9:E1:B0:A6:7F:54:89:B4:A2:1B:0D
Certificate issuer:       /CN=0412f035-b376-4807-a8ac-e98680ab0e36
Certificate serial:       010D0C9F43285843C48D733CD46AD0C0647CB580
Authority key identifier: 89:71:A9:FF:83:E0:46:16:D8:3E:5B:E7:78:2B:13:F8:84:29:F0:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/6f74883b-13cc-3a6f-b784-8f133612d43f.roa
Signing time:             Fri 03 Nov 2023 17:55:38 +0000
ROA not before:           Fri 03 Nov 2023 17:55:38 +0000
ROA not after:            Thu 01 Feb 2024 18:55:38 +0000
asID:                     395515
IP address blocks:        74.85.151.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:c4:8d:73:3c:d4:6a:d0:c0:64:7c:b5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0412f035-b376-4807-a8ac-e98680ab0e36
        Validity
            Not Before: Nov  3 17:55:38 2023 GMT
            Not After : Feb  1 18:55:38 2024 GMT
        Subject: CN=a5e521cd-1815-4307-ba8c-cf1eebe63aa7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:b3:9d:e0:c6:95:d9:e2:c4:16:01:da:ef:39:
                    fe:1a:59:2f:83:27:7c:df:4d:8c:ef:11:08:0f:79:
                    aa:63:4b:55:82:09:3e:0f:3e:41:ad:2c:81:e2:31:
                    02:0d:4c:73:f1:d3:bc:3b:19:fd:35:ce:7c:9e:cb:
                    25:74:08:f8:62:91:2a:9a:5a:57:58:80:53:c3:2a:
                    a3:e4:8d:fa:67:03:04:38:f3:53:18:00:37:ad:de:
                    8a:70:da:b6:99:13:dd:72:fb:e8:dd:e7:b9:76:e5:
                    98:9b:38:0d:8a:cf:68:bd:87:4b:8d:ef:f7:b9:af:
                    c7:30:e7:73:2c:31:3c:61:90:d2:1f:cb:dc:45:49:
                    32:33:58:3c:43:75:7e:fd:27:21:a2:e6:44:d3:61:
                    ac:84:57:96:40:b7:0e:1f:d2:d4:66:59:d5:48:d6:
                    1a:72:9c:94:b2:e4:4b:22:01:14:e6:ea:30:69:83:
                    e8:37:63:c8:f9:64:59:28:4b:36:21:b3:0a:9a:09:
                    3f:fa:10:d8:18:c6:31:28:ff:9e:6d:7c:3e:e5:83:
                    2e:3c:c3:b1:85:e0:93:61:35:33:8e:19:ef:6a:af:
                    f5:0f:0c:72:1d:88:77:76:01:17:bd:a5:21:a6:13:
                    d4:16:98:69:8a:a9:d4:29:33:e4:26:27:92:64:4f:
                    f3:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:46:C1:FB:21:50:AB:93:B7:B9:E1:B0:A6:7F:54:89:B4:A2:1B:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/6f74883b-13cc-3a6f-b784-8f133612d43f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36/0412f035-b376-4807-a8ac-e98680ab0e36.crl

            X509v3 Authority Key Identifier:
                keyid:89:71:A9:FF:83:E0:46:16:D8:3E:5B:E7:78:2B:13:F8:84:29:F0:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0412f035-b376-4807-a8ac-e98680ab0e36.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.85.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:67:a9:78:18:99:aa:08:7e:3b:34:eb:eb:6d:35:25:89:2d:
         b4:d2:f9:5b:0c:e4:0f:00:a1:bc:73:26:21:64:c1:3a:c4:b7:
         82:4c:ed:b4:62:72:5c:70:2f:69:67:42:e8:15:25:c7:8d:35:
         d8:54:a8:86:ad:f1:60:7e:50:d6:31:1a:d1:dd:70:59:dc:0e:
         f1:3e:51:dc:ab:af:02:bb:0b:eb:c5:a1:53:21:00:78:b7:8e:
         ff:10:95:14:fb:ed:80:9e:07:d9:11:ec:00:a1:12:e8:b8:f6:
         84:20:5f:a8:ed:9f:30:6c:e2:a5:2a:97:34:84:10:21:07:d0:
         24:f0:9a:e6:eb:05:e8:d2:2c:88:b9:a0:ec:22:16:a9:0d:0e:
         2a:f3:49:8b:bb:c0:20:00:12:0e:23:42:6e:f3:45:cd:ac:dc:
         e1:0b:71:8e:5d:e5:dc:8f:ce:d8:ec:63:fc:c2:75:61:00:b1:
         e5:fc:67:f8:19:75:1c:2b:45:89:ac:cc:c4:7f:ad:6c:14:a0:
         92:07:95:26:19:8c:3a:57:f8:66:f3:82:26:db:4f:1f:f1:ce:
         39:05:c2:32:a7:92:9b:9d:0d:b0:8c:0d:62:56:a6:83:18:fb:
         c5:93:aa:b3:cb:64:fb:3d:79:ad:ed:9e:3c:ee:06:0e:6d:f1:
         86:00:9e:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----