Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/caa41b51-e786-346b-ae52-d55cb3acf51f.roa
File:                     caa41b51-e786-346b-ae52-d55cb3acf51f.roa (raw, json)
Hash identifier:          p6wDlBU9HwjhnJpwfDTjVvkPkCC+4kkdfuUitkIzeTI=
Subject key identifier:   B9:60:8C:B1:84:31:E9:65:E0:06:24:D4:0E:0B:60:72:F9:D0:D9:FF
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328583DC8C550B3283E4FD0927F5FC0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/caa41b51-e786-346b-ae52-d55cb3acf51f.roa
Signing time:             Tue 03 May 2022 12:00:00 +0000
ROA not before:           Tue 03 May 2022 12:00:00 +0000
ROA not after:            Fri 02 May 2025 04:00:00 +0000
asID:                     701
IP address blocks:        108.56.0.0/16 maxlen: 16

Validation:               Failed, certificate revoked on Wed 08 Nov 2023 19:31:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:c8:c5:50:b3:28:3e:4f:d0:92:7f:5f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May  3 12:00:00 2022 GMT
            Not After : May  2 04:00:00 2025 GMT
        Subject: CN=b10d0092-94e3-4c43-958d-5b5ccfc6be59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:26:c3:3f:09:7a:b6:79:07:7e:1b:3d:ff:61:
                    57:bd:3b:5b:99:2b:dd:2f:99:cd:05:af:3c:29:bb:
                    9c:36:6e:b4:86:91:aa:6c:55:05:46:db:7b:30:76:
                    98:3c:d8:7d:66:08:18:ae:d3:13:df:a1:bf:70:e5:
                    bd:dc:40:c6:7e:b1:18:53:fd:42:0b:ae:c8:82:21:
                    21:76:66:99:b5:76:a3:3f:57:0c:d1:ac:3e:ba:f3:
                    e7:44:4c:ec:c5:49:6c:09:28:d8:73:56:3f:c5:2e:
                    b5:07:24:95:58:ca:7a:b5:89:d6:43:8d:0e:73:a0:
                    8f:65:c4:bc:22:dd:11:b0:a7:20:b8:af:59:88:97:
                    19:5d:18:83:c0:78:a5:b9:e5:db:28:1c:ef:26:03:
                    14:2f:89:f0:87:16:9e:23:f5:95:a7:c6:c3:f9:d2:
                    a4:a4:76:0a:c1:bd:89:78:65:3f:cd:42:a0:36:a5:
                    f3:6c:e1:0e:5c:95:a9:19:b3:f5:63:c3:65:7f:d7:
                    4a:c5:59:0f:1c:a1:15:13:fc:2c:80:8d:b3:18:eb:
                    78:4b:23:6f:16:ae:74:8e:8a:06:f5:b7:d7:40:76:
                    4d:3e:ec:ca:9f:f7:21:f3:49:ff:db:29:21:ad:ab:
                    66:a0:72:d0:9f:5f:20:5e:20:91:ba:00:f5:74:b2:
                    8e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:60:8C:B1:84:31:E9:65:E0:06:24:D4:0E:0B:60:72:F9:D0:D9:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/caa41b51-e786-346b-ae52-d55cb3acf51f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.56.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:2c:23:22:4f:68:8f:ba:0e:db:6d:9a:0b:1c:a3:15:3b:bc:
         67:b4:f0:b9:fa:53:6f:0f:d9:0a:a7:83:45:28:3c:9c:34:20:
         2e:fd:9e:ad:00:7e:48:cf:45:84:48:28:6e:59:c0:2b:0a:91:
         c7:09:b0:42:3f:32:5b:39:22:43:84:b0:ee:59:97:d4:6b:16:
         1b:fa:ba:71:8a:0f:19:05:c4:a4:b4:e1:3d:f0:26:e4:aa:34:
         21:3e:b7:44:db:20:9d:40:f8:ba:26:0b:49:0a:bb:a8:4b:4d:
         63:03:c2:86:00:d1:41:72:6b:77:8a:1b:26:bc:e8:8a:6f:d6:
         05:c5:01:a2:cc:d3:a5:7e:65:c5:61:bb:00:22:5a:7c:4a:68:
         26:9b:bf:38:42:3b:e2:a5:ce:7e:76:64:92:7c:f8:2d:dc:6a:
         ee:a7:b9:38:21:eb:b6:00:b1:f5:7c:e3:7b:25:3e:df:75:8e:
         fc:0c:26:20:20:0c:dc:a7:03:c2:16:82:a4:d4:f4:b9:e1:a4:
         89:69:43:cf:71:9e:6c:19:3b:bc:e8:80:75:ee:55:3f:4d:8f:
         54:8e:14:60:64:65:82:59:39:78:83:fe:95:55:62:62:13:57:
         6b:e5:25:5e:46:79:7e:1e:cd:af:ec:a9:07:f2:07:2b:17:f1:
         10:7d:f6:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----