Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/4fee6d8e-f736-3f52-befe-df9d43e58104.roa
File:                     4fee6d8e-f736-3f52-befe-df9d43e58104.roa (raw, json)
Hash identifier:          93FBMHP4arZSoJ0Q8eCja4wOibYEATd3x+qhtbQH+0M=
Subject key identifier:   6E:5A:7E:94:BB:E5:F3:58:95:3E:DE:E4:C2:FE:B1:B8:3E:5C:BA:6B
Certificate issuer:       /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Certificate serial:       010D0C9F4328584503C01C79D68C39BF14715040
Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/4fee6d8e-f736-3f52-befe-df9d43e58104.roa
Signing time:             Mon 26 Feb 2024 02:00:26 +0000
ROA not before:           Mon 26 Feb 2024 02:00:26 +0000
ROA not after:            Sun 26 May 2024 01:00:26 +0000
asID:                     13213
IP address blocks:        149.143.162.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 27 Feb 2024 18:17:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:03:c0:1c:79:d6:8c:39:bf:14:71:50:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
        Validity
            Not Before: Feb 26 02:00:26 2024 GMT
            Not After : May 26 01:00:26 2024 GMT
        Subject: CN=1c3511de-dfc5-4a89-8c4a-05b38e26412b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:b0:80:97:83:c1:c3:3c:de:e4:b6:a8:12:f6:
                    3e:76:e3:1a:eb:37:bc:c2:bf:8e:47:a7:bb:63:dd:
                    fa:c1:5a:11:4d:8b:12:32:fe:08:37:80:90:33:0d:
                    df:44:5b:43:7c:b6:cc:8d:66:8c:b3:6f:fa:e2:bb:
                    fb:3e:5b:60:59:4e:f3:39:b8:d2:28:96:78:73:b3:
                    4d:00:d9:f0:f3:46:61:69:12:6b:ba:1b:13:79:9a:
                    8d:55:16:c0:78:05:8b:eb:11:0c:f1:b2:64:11:82:
                    6e:e3:14:8b:96:d9:97:b8:49:d8:9b:b2:8a:8c:6a:
                    c5:1b:30:b7:90:84:1e:9e:f1:27:7f:67:3f:15:09:
                    43:72:8e:39:b8:14:6c:36:9a:25:20:93:34:13:51:
                    41:18:67:85:0f:80:c5:fb:25:5c:f4:be:44:82:3d:
                    06:72:c6:7b:77:c8:c0:8b:af:1b:bd:8e:01:e7:89:
                    1a:25:d5:88:4e:23:99:3d:9b:49:e1:cf:3b:64:a8:
                    76:32:96:8c:93:e5:2d:47:f7:8b:d5:d0:f7:fa:2f:
                    fa:26:ac:a8:52:57:38:49:99:db:07:42:2d:55:23:
                    a3:25:b9:7d:d1:23:c9:29:64:8f:a6:ec:cf:ae:bd:
                    97:c1:a2:52:97:a0:20:e9:6f:83:2e:b1:f2:5b:bc:
                    88:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:5A:7E:94:BB:E5:F3:58:95:3E:DE:E4:C2:FE:B1:B8:3E:5C:BA:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/4fee6d8e-f736-3f52-befe-df9d43e58104.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl

            X509v3 Authority Key Identifier:
                keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.143.162.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:ec:58:57:ef:84:ee:f3:94:92:51:59:ed:58:b5:90:a9:ed:
         d0:76:bd:bd:9a:9b:3d:13:20:f3:0e:59:4c:2a:43:c8:4e:ff:
         9d:95:5a:4a:65:31:3b:0e:d5:ba:81:25:e6:e1:40:c4:08:0b:
         88:ff:e6:ee:13:87:80:86:99:d2:04:50:85:9c:07:22:72:f3:
         fa:02:18:39:ef:2d:bd:df:ba:ac:e8:56:28:30:3c:c8:55:a5:
         af:de:0c:b7:49:ee:0b:d0:64:fa:10:3b:8e:82:5d:24:6c:6e:
         03:5f:27:d3:f6:46:1c:e8:b9:b6:b9:93:d8:d0:56:4b:22:ed:
         c0:70:a5:90:77:54:b5:78:60:b2:29:19:bb:cd:82:92:62:0c:
         58:39:ad:98:08:2f:26:58:3e:88:a6:2b:30:92:b3:d5:67:0e:
         c9:e3:64:20:3c:5a:98:5a:fc:37:28:bb:5b:5f:dd:4a:18:cc:
         73:18:c0:3a:31:f8:90:9e:05:fb:cb:f6:6d:7f:f2:75:28:fd:
         18:43:1c:29:e5:68:b5:ed:fb:ad:4e:6f:a5:46:df:99:9a:6c:
         cf:ad:b4:1c:1c:0b:cc:3f:83:3e:6b:a2:f7:7a:63:58:48:32:
         56:80:44:d5:d7:3a:e9:6c:e4:13:73:69:f5:f0:db:6a:fc:17:
         fc:42:e8:e8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUDwBx51ow5vxRxUEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3
ZDNkMB4XDTI0MDIyNjAyMDAyNloXDTI0MDUyNjAxMDAyNlowLzEtMCsGA1UEAxMk
MWMzNTExZGUtZGZjNS00YTg5LThjNGEtMDViMzhlMjY0MTJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2rCAl4PBwzze5LaoEvY+duMa6ze8wr+OR6e7
Y936wVoRTYsSMv4IN4CQMw3fRFtDfLbMjWaMs2/64rv7PltgWU7zObjSKJZ4c7NN
ANnw80ZhaRJruhsTeZqNVRbAeAWL6xEM8bJkEYJu4xSLltmXuEnYm7KKjGrFGzC3
kIQenvEnf2c/FQlDco45uBRsNpolIJM0E1FBGGeFD4DF+yVc9L5Egj0GcsZ7d8jA
i68bvY4B54kaJdWITiOZPZtJ4c87ZKh2MpaMk+UtR/eL1dD3+i/6JqyoUlc4SZnb
B0ItVSOjJbl90SPJKWSPpuzPrr2XwaJSl6Ag6W+DLrHyW7yItQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG5afpS75fNYlT7e5ML+sbg+XLprMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5
OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvNGZlZTZkOGUtZjczNi0z
ZjUyLWJlZmUtZGY5ZDQzZTU4MTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4
NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz
N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5
NGI0MzdkM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlY+iMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADvsWFfvhO7zlJJRWe1YtZCp7dB2vb2amz0TIPMOWUwqQ8hO/52VWkpl
MTsO1bqBJebhQMQIC4j/5u4Th4CGmdIEUIWcByJy8/oCGDnvLb3fuqzoVigwPMhV
pa/eDLdJ7gvQZPoQO46CXSRsbgNfJ9P2Rhzouba5k9jQVksi7cBwpZB3VLV4YLIp
GbvNgpJiDFg5rZgILyZYPoimKzCSs9VnDsnjZCA8Wpha/Dcou1tf3UoYzHMYwDox
+JCeBfvL9m1/8nUo/RhDHCnlaLXt+61Ob6VG35mabM+ttBwcC8w/gz5rovd6Y1hI
MlaARNXXOuls5BNzafXw22r8F/xC6Og=
-----END CERTIFICATE-----