Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c/836781a2-5e0f-3d21-a688-e7561146e9f7.roa
File:                     836781a2-5e0f-3d21-a688-e7561146e9f7.roa (raw, json)
Hash identifier:          XJ+dR2WQu7zRDIlNsqYnaPYt6pW9w8bzZ8i83LdIZB4=
Subject key identifier:   AD:FC:6C:18:21:CA:68:F1:42:89:28:39:4A:FB:0E:80:96:8E:18:FA
Certificate issuer:       /CN=60fd9c87-9dc8-48c2-9c7d-e72412a35e5c
Certificate serial:       010D0C9F432858455333476E1DEF65C82A893200
Authority key identifier: 36:2D:DC:65:A7:7A:10:73:E6:16:E3:47:F7:80:FD:D1:89:67:3E:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c/836781a2-5e0f-3d21-a688-e7561146e9f7.roa
Signing time:             Mon 25 Mar 2024 13:00:33 +0000
ROA not before:           Mon 25 Mar 2024 13:00:33 +0000
ROA not after:            Sun 23 Jun 2024 13:00:33 +0000
asID:                     2914
IP address blocks:        141.195.120.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Fri 07 Jun 2024 13:54:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:53:33:47:6e:1d:ef:65:c8:2a:89:32:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60fd9c87-9dc8-48c2-9c7d-e72412a35e5c
        Validity
            Not Before: Mar 25 13:00:33 2024 GMT
            Not After : Jun 23 13:00:33 2024 GMT
        Subject: CN=a7e040f0-8ffd-46b6-bcf9-3e09b551b3df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:ae:36:15:57:3e:02:81:59:a8:3c:75:79:c0:
                    03:62:fb:47:0c:8b:30:33:dc:07:f7:24:aa:7a:10:
                    4e:69:3d:09:64:ab:00:92:6b:dd:8a:e3:a2:99:8c:
                    4e:71:38:f5:3b:99:1b:eb:96:fb:ea:b2:79:de:18:
                    d5:4b:fd:0c:8c:57:63:0b:57:f6:66:de:23:25:3b:
                    ba:2a:52:18:8c:bd:8f:75:2c:88:23:a3:53:b9:b9:
                    e8:76:f8:f4:42:70:37:db:3d:e7:f1:37:f7:f1:8f:
                    4d:41:0d:03:3e:76:0f:2b:92:31:65:5c:c4:a9:60:
                    7d:dd:f3:5d:4f:a9:a5:aa:76:ea:55:4e:0a:cc:22:
                    1b:18:33:3c:0a:8f:d9:1e:5f:42:09:cf:66:d0:3d:
                    83:6e:d4:41:ae:75:2e:6c:bd:eb:75:f1:26:df:8f:
                    94:98:38:1d:e4:ee:05:5f:03:9f:8d:4c:9a:33:91:
                    9f:d2:f5:64:b3:f2:55:de:25:a9:06:6f:98:51:e9:
                    bc:6f:c7:b1:64:4d:13:4d:60:a0:c9:dd:c3:4d:e6:
                    92:a4:32:73:b5:7b:4e:36:1f:cc:e3:61:a9:7b:f8:
                    61:d6:fe:25:99:5e:32:08:18:40:f0:27:76:0c:5f:
                    2e:b7:55:dd:81:09:ce:28:e0:6f:68:03:0d:79:d6:
                    38:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:FC:6C:18:21:CA:68:F1:42:89:28:39:4A:FB:0E:80:96:8E:18:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c/836781a2-5e0f-3d21-a688-e7561146e9f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c.crl

            X509v3 Authority Key Identifier:
                keyid:36:2D:DC:65:A7:7A:10:73:E6:16:E3:47:F7:80:FD:D1:89:67:3E:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.195.120.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:af:78:dd:e2:5a:f4:ad:a0:c2:34:a6:e5:c2:06:81:65:1f:
         93:6b:53:9f:bd:12:0b:7b:f8:58:47:b5:8b:f6:42:6c:c5:79:
         84:7a:69:08:64:80:4d:a6:0c:1d:6b:7b:75:64:64:57:2b:85:
         dc:44:2a:e5:6f:b7:bf:46:fc:56:db:c3:c8:2d:5c:f8:20:41:
         d5:e4:af:98:e6:b6:96:14:f4:c2:6b:f0:96:98:4c:14:96:f4:
         75:ad:50:92:66:06:69:e6:a5:cc:bc:88:04:50:fb:d7:8c:f2:
         79:e0:4d:dd:fb:54:7b:8f:d6:c8:a9:1d:f7:c4:e1:79:b4:c3:
         2f:29:22:02:dc:b6:1e:8b:b5:d5:95:64:54:67:81:08:da:22:
         fc:72:61:15:59:11:aa:1d:0e:12:d5:b2:88:4a:69:0b:6a:67:
         d2:56:68:83:9b:90:b4:52:c3:17:6b:4e:20:22:79:97:df:15:
         22:cc:d5:b2:e1:81:07:50:47:24:3d:8b:1a:11:26:35:25:9b:
         cc:39:a1:a8:48:2d:6a:be:97:56:11:79:12:e4:f4:20:86:ef:
         f9:9d:6e:00:b7:a9:c7:5e:3b:5d:8b:6c:09:58:48:53:d0:40:
         c2:68:d5:0b:fe:00:22:bd:a5:93:fd:51:55:89:08:9b:cd:55:
         66:3f:1c:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----