Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/8d54768c-fa21-3993-9e80-a4e5f835cff0.roa
File:                     8d54768c-fa21-3993-9e80-a4e5f835cff0.roa (raw, json)
Hash identifier:          c0UvroDm4xvXwpQYSZ6KdXWvcKRGaWGdlZ9F+2I7QE8=
Subject key identifier:   AC:E1:0D:15:F6:59:5C:5A:16:E8:E1:2D:2E:45:FA:D1:02:1B:18:C2
Certificate issuer:       /CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
Certificate serial:       010D0C9F43285841786A109E8C8CA25D57EB2F00
Authority key identifier: BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/8d54768c-fa21-3993-9e80-a4e5f835cff0.roa
Signing time:             Mon 10 Feb 2020 18:18:36 +0000
ROA not before:           Mon 10 Feb 2020 18:18:36 +0000
ROA not after:            Wed 09 Jul 2025 04:00:00 +0000
asID:                     51559
IP address blocks:        68.67.207.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:78:6a:10:9e:8c:8c:a2:5d:57:eb:2f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
        Validity
            Not Before: Feb 10 18:18:36 2020 GMT
            Not After : Jul  9 04:00:00 2025 GMT
        Subject: CN=87ce5835-258b-45c8-ab30-ea0fb4cab5e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ad:82:a7:1e:21:d9:4a:ae:9a:ef:9e:08:6c:
                    d4:9f:3b:c7:63:3e:f9:a4:f0:d6:c7:4c:8c:05:33:
                    a9:37:20:cc:cc:66:ba:b7:33:05:3f:5a:b1:a3:34:
                    aa:87:4d:3b:44:be:e1:51:36:0f:62:ea:86:b0:84:
                    91:19:5f:c5:42:3e:7c:0b:63:12:f3:76:e8:03:10:
                    df:5e:03:8d:1e:75:d3:ac:06:ee:80:e4:0e:3c:3c:
                    01:40:ba:17:1c:fa:23:05:f2:7f:5b:e3:fe:29:79:
                    59:d4:88:a7:72:81:b3:db:b3:59:54:98:56:95:65:
                    5b:64:d7:df:ae:7d:2b:e6:97:6d:19:5a:49:cd:a6:
                    f4:d2:74:d0:7a:cf:13:5b:a6:9d:b5:84:5b:e6:78:
                    d7:b2:3d:4b:6e:fd:2a:66:3f:86:22:54:4f:f4:18:
                    37:0d:bc:88:28:d5:88:e6:3b:05:f7:5f:1f:c4:4e:
                    9b:34:61:af:79:d1:4b:6f:89:ae:6f:38:d9:7a:0e:
                    76:11:6b:ea:65:84:f3:5a:f8:56:b4:c6:5f:a2:36:
                    40:71:97:a9:d0:db:f7:bd:a8:0a:77:e3:10:75:9d:
                    7f:97:90:81:98:58:7a:8d:af:be:de:e8:3a:b0:9d:
                    3f:7c:96:a0:f1:76:a5:0b:09:44:ad:e2:d3:ba:bb:
                    8f:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:E1:0D:15:F6:59:5C:5A:16:E8:E1:2D:2E:45:FA:D1:02:1B:18:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/8d54768c-fa21-3993-9e80-a4e5f835cff0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl

            X509v3 Authority Key Identifier:
                keyid:BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.67.207.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:d4:24:ff:cf:35:c6:42:f2:de:2a:e0:5d:dd:e2:6c:a2:ef:
         de:cd:81:55:66:66:a5:ec:4e:08:ef:cb:98:3e:14:be:1b:04:
         f8:0a:cc:04:64:28:0d:26:cd:16:e4:8a:a4:2a:c5:bf:25:bb:
         9d:d1:19:43:06:53:c7:18:1a:44:70:c9:58:f6:d3:95:55:ca:
         fb:1e:43:45:5a:81:7d:a1:d5:99:23:98:12:f6:47:7b:35:d9:
         a9:b3:61:a9:ff:8a:42:3f:17:57:bf:52:7f:7d:22:f6:37:f4:
         2d:ff:24:ea:81:6d:2c:1e:8b:41:da:15:3e:fb:44:69:25:98:
         b7:03:d9:ab:1d:e6:55:60:3f:88:6e:06:4d:8a:7b:5e:53:fe:
         e7:4a:c6:97:74:f2:75:0b:5e:98:c7:4b:4e:8d:1b:85:31:e6:
         ec:ad:a1:6b:a3:ff:d0:92:62:43:04:20:3c:b5:5d:e4:a4:4a:
         1e:42:01:d0:25:76:8b:e9:14:c6:d7:82:e6:93:42:b5:02:07:
         7f:39:9e:27:f6:67:0c:30:d2:63:44:d9:17:45:58:a7:f2:5a:
         4e:24:13:a9:d5:db:15:ab:d7:4a:28:87:ed:6c:56:73:01:a2:
         fd:c9:a0:83:10:dc:a0:da:4b:04:43:a8:ad:f1:ec:32:52:95:
         78:72:33:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----