Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854/294bde6f-0fa2-38eb-b9ab-61af69a613e8.roa
File:                     294bde6f-0fa2-38eb-b9ab-61af69a613e8.roa (raw, json)
Hash identifier:          AQ8YgEhNMIbF/+ynmhjZ6Damtl3A9JiR+77/3Zz3Dg8=
Subject key identifier:   8E:A8:AD:55:D4:C9:60:22:4C:0A:0A:1F:1C:59:68:A9:D4:61:4F:59
Certificate issuer:       /CN=f84ea5c3-3226-48ac-838b-0fdf69176854
Certificate serial:       010D0C9F432858416F332AD97991B9E70CD80080
Authority key identifier: 82:71:9E:64:EE:FB:6C:5A:E9:41:FD:EE:1D:55:A8:32:16:3B:EE:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854/294bde6f-0fa2-38eb-b9ab-61af69a613e8.roa
Signing time:             Thu 30 Mar 2023 18:33:11 +0000
ROA not before:           Thu 30 Mar 2023 18:33:11 +0000
ROA not after:            Wed 18 Jun 2025 04:00:00 +0000
asID:                     54825
IP address blocks:        192.101.77.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 05 Apr 2023 19:39:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:6f:33:2a:d9:79:91:b9:e7:0c:d8:00:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f84ea5c3-3226-48ac-838b-0fdf69176854
        Validity
            Not Before: Mar 30 18:33:11 2023 GMT
            Not After : Jun 18 04:00:00 2025 GMT
        Subject: CN=d564def9-d617-4270-9211-6c21907d3eba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:9b:3e:4f:b8:81:87:ae:ae:9d:21:91:32:14:
                    cd:ab:f2:3d:cd:6b:2e:8b:00:f6:e0:80:ed:84:53:
                    29:86:3d:6e:e2:9c:da:bb:31:35:e7:59:63:92:3b:
                    9d:e0:8a:7d:e0:10:d5:8d:8f:37:5c:12:78:50:59:
                    89:21:7c:b9:90:dd:e7:33:cc:92:ad:7f:fd:7f:2e:
                    1d:ec:3b:0a:8f:40:f4:d2:c4:07:3e:a2:57:97:f4:
                    89:c1:cb:8d:2f:85:5b:b7:59:00:f0:9c:09:5a:5e:
                    be:1a:d4:2c:eb:d1:ed:06:7c:a7:dd:cb:ea:e9:f2:
                    50:ea:82:d8:02:4f:16:2d:e4:fa:94:b5:e9:7b:d2:
                    10:74:d4:44:88:d4:4d:9c:d5:57:e5:53:6f:bd:2e:
                    0f:c6:9b:5b:fd:9a:0b:19:5b:92:6d:c3:75:90:e0:
                    48:19:75:65:99:3a:f6:99:e6:09:83:4a:db:ab:01:
                    f3:52:b9:05:f7:67:fa:77:9c:ac:55:1f:79:6a:32:
                    be:23:a5:e3:e7:a9:4d:66:09:66:eb:9e:36:1f:6c:
                    83:95:c5:35:b9:48:e1:3d:99:2e:1c:8e:1e:98:17:
                    66:f7:a5:d2:db:d8:c4:f5:c6:98:28:a1:2a:af:c4:
                    b2:12:cf:34:18:5b:bf:48:6b:3e:af:bf:f1:9a:58:
                    34:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:A8:AD:55:D4:C9:60:22:4C:0A:0A:1F:1C:59:68:A9:D4:61:4F:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854/294bde6f-0fa2-38eb-b9ab-61af69a613e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854/f84ea5c3-3226-48ac-838b-0fdf69176854.crl

            X509v3 Authority Key Identifier:
                keyid:82:71:9E:64:EE:FB:6C:5A:E9:41:FD:EE:1D:55:A8:32:16:3B:EE:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f84ea5c3-3226-48ac-838b-0fdf69176854.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.101.77.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:38:b6:5b:75:0f:ee:10:64:b1:c7:c1:67:dd:a2:65:c2:bc:
         27:c4:1a:90:5f:6c:3b:a4:5f:84:dc:65:0e:4d:3a:0b:0b:33:
         e5:01:98:63:bf:01:97:68:4d:7a:2d:59:32:3d:31:6c:cb:1b:
         06:c3:01:12:30:08:66:0f:6f:ab:8a:73:14:ee:ba:1a:7d:6c:
         d9:ea:77:d6:80:1d:41:fa:f8:84:08:d2:9d:59:9b:14:43:a9:
         10:27:c6:00:41:de:42:99:33:da:a7:9e:9f:e0:66:f1:74:6c:
         ad:77:b0:94:ad:ad:7b:29:9b:c2:06:c1:46:02:69:06:fa:11:
         57:e1:c1:7a:8d:41:2b:d4:a8:e5:9b:50:e3:a2:e8:dd:d3:7c:
         12:08:33:04:58:9a:7d:93:21:c0:f5:40:d7:50:bf:90:86:d7:
         74:d9:3d:39:2f:00:ef:88:68:22:0e:91:9d:6c:55:85:c7:d7:
         52:99:63:d1:e4:f3:a0:6f:a8:be:73:75:53:12:35:e6:36:6c:
         78:22:df:b9:46:ad:cd:0b:60:63:52:ae:3e:28:ef:21:23:d2:
         86:c4:08:7a:31:d3:c1:4a:40:2e:21:9c:41:67:7c:fa:2d:98:
         b4:44:45:d8:e3:10:58:29:d3:f8:b9:29:8e:c3:5a:fb:f9:bb:
         e6:36:a3:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----