Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/ea76f39f-5384-3315-ba76-fd3261ebd793.roa
File:                     ea76f39f-5384-3315-ba76-fd3261ebd793.roa (raw, json)
Hash identifier:          QKlEQ1VtZxGOCbPoCtjjFlDEHvjbfpQ7Hy/OWJEDe+Y=
Subject key identifier:   B5:B1:DE:EC:49:96:0E:9E:59:1B:0D:B9:F1:CF:4F:32:98:04:0A:83
Certificate issuer:       /CN=74a9db22-8d49-4938-9c6f-e3fd428c158e
Certificate serial:       010D0C9F4328576D51CC73C042CFC16B67D3E5ED
Authority key identifier: 98:FB:A9:0E:C5:77:6A:E8:69:9A:83:85:57:54:2E:33:A0:1C:26:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/ea76f39f-5384-3315-ba76-fd3261ebd793.roa
Signing time:             Mon 17 Jun 2019 23:44:28 +0000
ROA not before:           Mon 11 Mar 2019 04:00:00 +0000
ROA not after:            Sun 11 Mar 2029 05:00:00 +0000
asID:                     134521
IP address blocks:        170.10.222.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 03 Aug 2022 22:51:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6b:67:d3:e5:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74a9db22-8d49-4938-9c6f-e3fd428c158e
        Validity
            Not Before: Mar 11 04:00:00 2019 GMT
            Not After : Mar 11 05:00:00 2029 GMT
        Subject: CN=cb2df2a4-e89e-476b-82f0-fa3f273aff73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:62:19:be:33:c0:b6:b8:f5:d7:31:e3:ef:53:
                    4f:fe:28:d9:6c:e9:65:ef:25:ac:a1:28:20:d4:04:
                    52:bc:53:b6:eb:66:ad:43:10:02:ae:04:e6:95:36:
                    07:17:4e:69:ab:0d:fe:a7:8e:ba:97:8d:cb:53:ce:
                    63:55:84:8f:55:cd:82:8a:c1:7c:84:bf:2a:2c:b8:
                    d3:19:12:f2:8b:b2:7d:8b:22:9b:37:4d:a7:a8:ee:
                    09:91:8b:d9:bc:d0:df:21:97:56:de:c6:8c:ad:a1:
                    78:3b:6f:c8:50:b6:c9:4c:b6:44:5d:1b:00:bd:f2:
                    b3:74:71:e7:2b:36:96:83:f9:43:98:5b:6b:cf:9d:
                    06:6e:ab:09:63:0d:c7:6b:74:bd:e2:f5:eb:8d:5e:
                    af:bd:ed:f8:c7:fe:d4:77:82:60:3d:78:a2:3a:06:
                    f9:80:20:aa:35:49:3a:c1:17:14:ed:3a:69:0e:57:
                    87:2d:95:72:50:ff:0b:02:ad:a1:91:40:17:36:51:
                    b1:52:af:b9:4e:68:b2:76:9a:23:e0:2e:23:d0:f0:
                    c1:cf:a1:61:2b:be:ff:1c:b5:04:4c:ae:80:80:f1:
                    ca:de:18:d3:21:2d:0c:e7:a8:ce:1b:4c:0c:ad:79:
                    d9:05:b1:a7:5f:63:1c:da:61:71:f6:7f:58:35:b4:
                    d3:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:B1:DE:EC:49:96:0E:9E:59:1B:0D:B9:F1:CF:4F:32:98:04:0A:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/ea76f39f-5384-3315-ba76-fd3261ebd793.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e/74a9db22-8d49-4938-9c6f-e3fd428c158e.crl

            X509v3 Authority Key Identifier:
                keyid:98:FB:A9:0E:C5:77:6A:E8:69:9A:83:85:57:54:2E:33:A0:1C:26:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74a9db22-8d49-4938-9c6f-e3fd428c158e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.10.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:39:71:31:38:41:db:08:51:af:2c:5d:af:a7:5b:dd:21:e4:
         40:09:37:cf:5b:bf:15:ff:96:4e:91:15:f7:89:90:2c:fb:0d:
         19:ff:38:74:db:44:f9:b0:15:5a:63:c5:a6:5a:a5:2c:06:6b:
         01:42:37:8c:01:01:db:a9:2e:bd:39:4e:b3:a0:9a:ea:6c:e7:
         18:b2:f2:80:9c:80:6d:c7:23:98:2c:a0:75:cf:bb:f3:d5:33:
         49:53:a3:d6:38:92:8d:79:9c:01:6a:9f:51:c1:ed:94:14:1e:
         1f:2f:2d:b7:f7:43:60:cb:82:5e:9d:78:f4:34:75:00:e1:91:
         90:80:75:0d:20:7e:5e:cb:dd:74:6e:5e:27:a9:83:6f:4f:34:
         32:d1:ba:73:56:54:ea:21:42:1d:fa:ee:89:ea:af:fb:7a:21:
         b5:3f:d1:7a:1e:e4:2e:6d:48:69:72:9a:ab:b8:c0:70:38:43:
         a7:17:ce:5b:0c:2b:45:fb:9a:15:1c:51:ad:8e:48:b0:30:12:
         36:09:b2:06:1d:a8:8c:7e:d2:89:7b:c0:c5:a9:47:9c:b8:3f:
         c7:2c:5f:b1:fe:a9:9f:70:e0:f8:71:92:74:d8:dd:54:cb:69:
         33:c7:58:3b:65:81:4e:f8:9a:c9:69:ad:79:d6:54:e6:07:88:
         2a:35:4c:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----