Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8ab5f2ec-29d6-3796-a750-50eba491b848.roa
File:                     8ab5f2ec-29d6-3796-a750-50eba491b848.roa (raw, json)
Hash identifier:          2AW/LHBaEYeRH1dNK4JXrTs1TgV1k3eOt9jMK0MgmmY=
Subject key identifier:   D4:7A:A4:81:D3:70:BB:EF:4E:54:90:94:6A:6A:1D:97:43:88:69:12
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328583DB533DE0526DD323E61913E40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8ab5f2ec-29d6-3796-a750-50eba491b848.roa
Signing time:             Tue 26 Apr 2022 12:00:00 +0000
ROA not before:           Tue 26 Apr 2022 12:00:00 +0000
ROA not after:            Fri 25 Apr 2025 04:00:00 +0000
asID:                     701
IP address blocks:        100.14.0.0/16 maxlen: 16

Validation:               Failed, certificate revoked on Wed 08 Nov 2023 19:28:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:b5:33:de:05:26:dd:32:3e:61:91:3e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 26 12:00:00 2022 GMT
            Not After : Apr 25 04:00:00 2025 GMT
        Subject: CN=1ac24eb6-760b-408f-b56e-4db9181ae892
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:7a:83:f8:5f:7f:fe:f4:dc:b8:32:fc:62:88:
                    ff:49:6a:2a:74:48:7b:cb:73:9c:b0:31:a8:6e:ab:
                    26:76:b9:b5:d7:bb:bc:89:eb:9c:8e:09:9e:89:37:
                    a9:7d:17:1e:e8:06:82:c1:4b:22:67:46:bb:db:39:
                    60:b6:82:51:5a:c7:08:28:07:cb:80:a1:7c:55:da:
                    f6:02:44:7f:20:73:4b:36:73:be:55:e5:7f:f2:13:
                    62:51:ba:d9:21:da:1f:be:b2:3a:da:62:8b:6e:0b:
                    2b:29:54:72:07:5f:b5:68:fe:29:eb:ab:ec:56:52:
                    95:29:90:85:be:2b:67:e7:ce:17:5f:15:3f:d0:db:
                    b7:82:b9:dc:47:52:8b:ff:3f:43:b4:93:aa:67:4c:
                    f2:d9:0b:c8:95:35:cf:54:04:45:9b:7a:eb:15:f2:
                    6d:9f:42:98:55:eb:a7:94:2d:17:f4:18:9b:c2:ad:
                    7f:be:d5:aa:4c:14:a0:36:ca:30:2c:bb:22:14:a0:
                    ae:da:da:76:b1:d5:9e:22:72:fe:40:4c:a0:cb:b4:
                    4c:32:f6:f9:4c:ce:78:8f:84:d9:7c:5a:78:88:dc:
                    00:1d:a5:ce:00:0e:1b:33:b0:a1:07:97:d8:90:fc:
                    d2:39:7a:ea:8c:77:a8:2e:c2:c9:aa:fe:ce:82:d4:
                    fd:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:7A:A4:81:D3:70:BB:EF:4E:54:90:94:6A:6A:1D:97:43:88:69:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/8ab5f2ec-29d6-3796-a750-50eba491b848.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  100.14.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:79:36:a0:cf:df:25:0a:d2:c1:ff:10:d1:b1:1a:7d:36:11:
         72:9e:b0:d4:24:9b:0a:df:b6:af:a3:0b:c8:3f:21:a8:64:0a:
         56:14:b6:c8:d3:87:d0:f9:46:1d:9d:82:be:b7:df:8d:88:e2:
         7b:c9:61:39:bd:0b:60:19:53:db:9c:a1:96:6d:9f:f7:9c:ac:
         6e:e5:fe:82:b7:66:71:45:f6:43:03:24:34:c7:f5:ca:2b:aa:
         74:07:b0:63:73:86:2c:7f:d8:48:54:b4:86:2e:6d:6c:8a:95:
         f8:fc:c2:dc:59:24:31:15:6d:e0:9e:61:8b:d5:dd:ba:a8:1b:
         15:9a:59:52:31:4f:90:a7:31:4e:aa:12:fb:6b:84:7a:22:28:
         f8:b0:37:84:ce:03:fd:b8:fd:6e:fd:f2:3b:74:dc:d9:4f:33:
         40:d8:da:3d:e4:dd:b0:e5:9a:0e:68:05:d5:69:79:3d:6a:f2:
         0d:06:e9:b0:1b:a1:a3:cf:22:e5:06:62:12:b1:89:2a:18:e2:
         89:4c:c3:ed:35:61:1c:8f:de:99:31:ed:31:d8:6a:5f:73:0e:
         2b:7b:c4:2b:fd:f7:16:19:2c:6c:8a:4f:12:13:1e:ac:16:2c:
         be:dc:89:30:00:aa:9e:85:2e:92:d3:a7:bd:e6:9e:7c:4e:45:
         a6:e9:c6:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----