Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/02578e34-bc56-3359-8675-c5e751a9240d.roa
File:                     02578e34-bc56-3359-8675-c5e751a9240d.roa (raw, json)
Hash identifier:          ytrjo9NJ2IGWRaTIe1G4R2vjbwmdSC4CXhlpqIDE8Ew=
Subject key identifier:   A1:5F:A7:FF:69:97:D8:E5:A2:8B:42:02:1D:22:37:6F:28:40:FE:8A
Certificate issuer:       /CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
Certificate serial:       010D0C9F4328583DBF662FEAFB498CA11C22C500
Authority key identifier: 1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/02578e34-bc56-3359-8675-c5e751a9240d.roa
Signing time:             Wed 17 Jul 2019 11:51:57 +0000
ROA not before:           Wed 17 Jul 2019 11:51:57 +0000
ROA not after:            Fri 02 Aug 2024 04:00:00 +0000
asID:                     30633
IP address blocks:        45.56.193.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:bf:66:2f:ea:fb:49:8c:a1:1c:22:c5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
        Validity
            Not Before: Jul 17 11:51:57 2019 GMT
            Not After : Aug  2 04:00:00 2024 GMT
        Subject: CN=4d4bcd11-66fc-4836-9b98-e16e585177d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:81:2b:eb:5f:3a:88:cf:69:6e:f3:3f:87:07:
                    1b:72:25:60:98:d8:da:28:0d:34:f9:5c:2a:18:54:
                    b6:f7:9b:e8:4f:ba:c0:a2:d7:0b:c8:b6:19:b9:72:
                    48:95:9a:df:1f:f4:21:b5:65:eb:be:9b:38:c2:5a:
                    de:d1:43:89:63:b2:fd:0f:ee:49:a7:c8:c5:19:cf:
                    0b:9a:40:79:f6:3b:d6:87:65:b6:60:33:4b:58:a2:
                    16:4c:79:af:38:97:78:70:50:6d:b8:a7:ee:45:3e:
                    a7:69:b5:61:e1:c6:12:97:da:70:ad:84:bb:f5:0f:
                    4b:6d:a4:ff:24:4b:a9:e1:e4:78:23:bd:38:fa:c9:
                    bc:95:25:db:05:51:bb:e5:2f:49:3f:b0:ef:54:62:
                    66:93:8e:2f:f6:1b:f6:d4:16:ec:cf:c7:1e:22:5b:
                    1e:14:66:fb:31:a9:f7:70:57:20:85:57:f3:2d:7d:
                    f6:07:1f:47:e8:29:ff:67:22:0a:7f:c8:97:f6:96:
                    02:b9:31:ed:26:a1:f8:10:7a:9d:47:43:89:e7:4a:
                    5a:c3:65:00:d1:ab:29:77:aa:f2:bf:7c:7d:3e:83:
                    46:22:f5:a5:fa:0c:e3:43:68:cf:83:ee:50:11:99:
                    ad:4b:0d:07:84:25:48:28:43:64:6f:d3:89:66:3c:
                    7b:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:5F:A7:FF:69:97:D8:E5:A2:8B:42:02:1D:22:37:6F:28:40:FE:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/02578e34-bc56-3359-8675-c5e751a9240d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl

            X509v3 Authority Key Identifier:
                keyid:1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.56.193.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:53:f7:be:59:97:88:3b:f5:0b:28:86:17:73:2f:2d:b2:69:
         e7:f8:7e:39:e6:25:fc:47:66:1f:d0:01:30:e0:2c:98:7f:ef:
         a2:26:4c:ad:df:01:51:92:ec:db:25:40:72:63:af:f3:9c:d6:
         7b:5c:a0:42:a3:bc:e9:ad:fb:b3:ee:96:27:68:36:01:1e:32:
         2d:20:e7:26:1f:15:7e:83:ea:eb:51:f6:cf:ff:d9:92:03:44:
         66:81:19:98:bd:08:80:18:84:c3:47:ac:37:19:f7:3b:80:5e:
         7f:55:2b:30:37:b9:1b:cb:61:ca:cf:d0:53:4f:35:4e:e5:d1:
         5b:4f:ef:db:64:b8:60:4c:d4:b4:ab:80:69:08:41:3c:c9:2f:
         3d:c5:31:59:bb:8f:16:a3:eb:b8:c6:4c:4c:63:e1:c4:68:c5:
         fd:a2:d6:77:ee:d8:13:08:dc:86:61:26:ae:67:69:59:49:91:
         11:01:6d:c1:1f:73:9e:a7:a6:37:aa:6e:ac:ce:eb:ca:13:d5:
         fd:30:b8:fb:16:bf:3d:c4:db:00:14:77:1c:af:c4:c9:16:ab:
         ee:36:d5:d3:71:f2:cd:99:e8:97:bb:8b:e6:61:16:3a:22:00:
         ec:9e:09:ec:ce:d1:ce:42:d4:96:80:6f:ce:ec:c4:0b:ee:ce:
         8c:24:94:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----