Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907/6df4d36f-f90d-3ae7-a3c1-4491abf4c697.roa
File:                     6df4d36f-f90d-3ae7-a3c1-4491abf4c697.roa (raw, json)
Hash identifier:          Fgu2HpT+jmysQRt8ZwMSE3DBRfpQjPUgvSHnXrQB1Fw=
Subject key identifier:   D0:C0:97:5E:6C:14:40:95:89:4B:5B:A4:85:AC:E1:8C:B1:51:97:35
Certificate issuer:       /CN=be483f2f-cbaa-4c2b-a9e4-8af3c0f86907
Certificate serial:       010D0C9F4328583EB52F71B41755E972B1DE6C40
Authority key identifier: 4E:6A:B5:94:3B:FD:05:66:C6:1B:3E:96:4C:95:80:1A:48:1D:DE:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907/6df4d36f-f90d-3ae7-a3c1-4491abf4c697.roa
Signing time:             Wed 27 Jul 2022 17:50:36 +0000
ROA not before:           Wed 27 Jul 2022 17:50:36 +0000
ROA not after:            Tue 29 Oct 2024 04:00:00 +0000
asID:                     36175
IP address blocks:        66.43.16.0/20 maxlen: 24

Validation:               Failed, certificate revoked on Wed 27 Jul 2022 19:18:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:b5:2f:71:b4:17:55:e9:72:b1:de:6c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be483f2f-cbaa-4c2b-a9e4-8af3c0f86907
        Validity
            Not Before: Jul 27 17:50:36 2022 GMT
            Not After : Oct 29 04:00:00 2024 GMT
        Subject: CN=5ea5a5c5-d642-4706-84cb-550a8b87ee39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:96:13:4d:1f:fc:c6:a1:74:55:7f:43:a9:a6:
                    7e:80:0f:5f:22:0f:d4:9f:86:ee:06:77:f0:84:00:
                    d9:99:99:fc:c3:7b:60:4a:c2:58:55:9a:9d:54:38:
                    45:ae:a3:28:d9:81:05:b4:1a:a4:83:a7:81:88:57:
                    d9:e5:28:73:da:ae:4d:6f:60:0d:9c:75:81:e4:80:
                    8b:7d:4a:30:dc:a3:46:d4:88:7e:5a:3a:04:cc:e9:
                    af:48:1b:90:05:2c:29:45:7a:14:40:31:0f:2c:e7:
                    f0:a5:b0:1f:cc:eb:bf:63:60:67:89:f8:79:6d:15:
                    17:bd:94:22:1e:fe:f4:33:70:e8:e2:1e:16:80:c2:
                    92:c3:b3:bc:9b:2d:d0:50:17:9e:ae:15:2f:42:1a:
                    88:b4:20:5f:80:38:6b:ca:54:1a:aa:21:73:53:e0:
                    db:44:03:b1:13:16:62:58:ef:50:3c:10:7f:67:b9:
                    0d:aa:33:1d:e6:a2:7d:3c:ca:f0:f3:b6:a9:b4:db:
                    02:33:15:d2:06:af:ee:13:96:ed:8d:a2:39:5b:d6:
                    bd:cb:e9:05:46:6c:63:2f:78:8c:91:c6:21:c7:0e:
                    ea:b9:ea:ec:e3:c9:09:97:a2:54:05:be:86:29:7c:
                    3b:30:73:fb:df:9f:8a:c8:c4:79:55:60:ff:74:f8:
                    93:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:C0:97:5E:6C:14:40:95:89:4B:5B:A4:85:AC:E1:8C:B1:51:97:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907/6df4d36f-f90d-3ae7-a3c1-4491abf4c697.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907.crl

            X509v3 Authority Key Identifier:
                keyid:4E:6A:B5:94:3B:FD:05:66:C6:1B:3E:96:4C:95:80:1A:48:1D:DE:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/be483f2f-cbaa-4c2b-a9e4-8af3c0f86907.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.43.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:61:7a:1d:95:9b:f6:ca:ff:9d:72:17:12:0f:04:bc:01:9e:
         8a:35:d6:ec:c5:02:7c:f5:39:69:b1:de:87:42:94:45:72:1c:
         d8:ec:f9:77:6f:a0:03:88:9d:89:82:71:6b:7c:fb:12:49:0d:
         7b:7b:e3:8c:1d:fc:44:ca:23:4e:80:93:0e:19:55:cf:ad:97:
         53:c7:ce:23:06:70:79:66:e6:55:3c:71:92:b9:54:28:c1:66:
         7f:55:9f:13:1c:2b:ed:ac:43:d9:f1:cc:1e:fa:4c:59:77:2c:
         d1:a2:4e:de:07:ea:4b:53:de:92:23:c3:86:2d:27:4c:38:65:
         6e:fd:45:bf:30:b8:7d:71:3a:10:19:d1:80:7b:29:e6:b8:84:
         d6:63:23:9f:3d:8f:2c:d4:f3:68:e2:0a:21:8e:19:9a:a6:10:
         7a:e9:a2:07:d0:07:52:9d:04:ae:2b:7e:01:01:e7:49:3e:5e:
         eb:bc:09:90:e5:3b:7b:d8:a9:01:b6:dc:ad:7c:94:24:19:08:
         fb:84:9e:ab:3d:a4:e9:e5:6f:17:c2:13:08:6c:8a:67:63:ec:
         57:91:ed:a1:c1:2e:67:31:7e:19:cc:36:cb:bf:20:23:9c:4f:
         7f:95:bd:b1:9c:a7:ea:cf:28:82:cc:62:1a:4e:fe:83:8c:0f:
         39:3d:47:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----