Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3298b7d8-f20e-3b82-be7e-c0dcd0cad467.roa
File:                     3298b7d8-f20e-3b82-be7e-c0dcd0cad467.roa (raw, json)
Hash identifier:          rbc7I2YYhDa9I6amEuqfhb4Zr3L08nKlumEtzNrA7ts=
Subject key identifier:   87:0B:FB:E0:9A:92:10:3E:E5:10:CA:48:26:80:8F:B3:CB:A5:2A:A1
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328583DB534706BE1D73B4A85B45380
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3298b7d8-f20e-3b82-be7e-c0dcd0cad467.roa
Signing time:             Tue 26 Apr 2022 12:00:00 +0000
ROA not before:           Tue 26 Apr 2022 12:00:00 +0000
ROA not after:            Fri 25 Apr 2025 04:00:00 +0000
asID:                     701
IP address blocks:        108.31.0.0/16 maxlen: 16

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:b5:34:70:6b:e1:d7:3b:4a:85:b4:53:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 26 12:00:00 2022 GMT
            Not After : Apr 25 04:00:00 2025 GMT
        Subject: CN=96465071-f923-4f7b-b2ce-e2752438c0a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ce:7a:ef:77:87:b5:83:b4:32:70:79:cf:33:
                    21:45:2a:29:15:ce:87:4b:99:2c:94:e6:25:a7:5e:
                    c1:29:fe:52:f8:57:c8:7f:62:05:5b:a4:be:37:88:
                    31:26:5f:61:06:ea:15:88:62:29:b9:ab:b0:89:a2:
                    c8:45:de:20:73:67:57:87:4c:23:2a:3b:af:63:a7:
                    89:95:51:a7:14:35:7d:cd:11:f6:46:8d:87:84:4c:
                    a4:8d:f7:ff:89:de:81:f4:a2:63:13:ee:82:63:04:
                    9a:b1:5e:4d:5b:31:31:d1:4d:01:f9:ba:f8:34:0d:
                    bc:95:ea:f6:77:b7:0c:d4:b4:2b:8c:d3:72:81:ed:
                    34:fd:9f:f3:0d:e4:35:58:95:b8:bb:f5:25:7d:a9:
                    e0:9b:2a:68:ae:55:51:c7:62:e9:5e:f4:a4:d7:0d:
                    48:4e:c9:92:9c:07:79:22:47:a4:a2:1a:c6:83:d2:
                    33:3c:77:37:39:20:9b:d8:2b:5c:e3:75:35:f1:b2:
                    64:79:a6:06:d2:c3:1e:58:ad:e3:20:52:12:3d:7f:
                    4b:f7:ec:52:c6:93:e5:47:09:44:7d:27:9e:b0:86:
                    79:2c:04:84:31:7a:f0:88:0f:0f:94:d6:ad:7c:d9:
                    08:55:43:49:b3:b0:5c:39:c2:bb:7e:3c:9b:f5:59:
                    03:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:0B:FB:E0:9A:92:10:3E:E5:10:CA:48:26:80:8F:B3:CB:A5:2A:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3298b7d8-f20e-3b82-be7e-c0dcd0cad467.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.31.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:52:2b:99:2f:42:7f:fa:4a:c9:30:75:d9:68:d2:5c:60:8f:
         81:3b:1b:61:d0:36:72:e6:9a:db:1a:54:b3:0d:7b:8a:8f:0b:
         92:84:9b:9a:e2:aa:82:41:f8:56:60:77:71:2f:80:74:5e:38:
         f5:8a:d5:9c:e6:d3:cb:35:3f:7b:c0:39:60:27:f1:66:81:e8:
         4f:fe:e0:8f:7e:97:7d:74:7a:e2:4f:d7:80:bb:73:9b:a6:57:
         21:e0:a8:0e:87:e2:d6:12:48:cf:51:af:51:66:bd:96:97:8b:
         12:11:03:ea:00:1f:f6:d2:7b:47:53:99:17:f1:29:cc:66:95:
         cf:ac:26:9c:88:85:7a:29:10:90:f5:c2:8f:5c:b4:2b:a3:6d:
         f7:4a:cf:2b:07:6c:82:9d:06:90:90:34:a4:5e:76:31:a4:a3:
         4e:6b:ae:40:04:c0:20:76:98:c3:f5:64:19:c0:63:60:49:63:
         48:65:df:0e:53:1d:a7:b0:68:46:b4:cd:56:29:30:cc:7e:b4:
         1b:c8:ec:8c:91:f9:6f:c6:45:9d:3c:01:30:dc:3f:ca:14:ee:
         59:a8:c5:2d:4d:9b:51:d8:f6:70:b1:fc:53:b4:ba:6e:11:50:
         3f:40:51:a0:7e:2f:b2:4b:ff:7c:3a:70:4b:df:23:f6:77:eb:
         d7:42:c4:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----