Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/35342562-4b31-4754-a32b-c5eec744d4a2/225e79eb-6cc6-3abf-b902-d24e561fe321.roa
File:                     225e79eb-6cc6-3abf-b902-d24e561fe321.roa (raw, json)
Hash identifier:          NWJUcvJnbGQdlWuswbY7Abm1x96scI51iYjZuvR9IAY=
Subject key identifier:   0F:C6:06:71:02:F9:E7:DA:DC:8B:94:80:8F:0E:A6:28:67:AF:8B:B6
Certificate issuer:       /CN=35342562-4b31-4754-a32b-c5eec744d4a2
Certificate serial:       010D0C9F43285842DF1C831BAE646A4109DE5C00
Authority key identifier: ED:DE:39:DE:CF:88:EE:83:2E:4A:66:51:06:B4:E3:36:AB:86:0B:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/35342562-4b31-4754-a32b-c5eec744d4a2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/35342562-4b31-4754-a32b-c5eec744d4a2/225e79eb-6cc6-3abf-b902-d24e561fe321.roa
Signing time:             Sun 13 Aug 2023 13:27:58 +0000
ROA not before:           Sun 13 Aug 2023 13:27:58 +0000
ROA not after:            Sat 11 Nov 2023 14:27:58 +0000
asID:                     64496
IP address blocks:        149.112.152.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:df:1c:83:1b:ae:64:6a:41:09:de:5c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35342562-4b31-4754-a32b-c5eec744d4a2
        Validity
            Not Before: Aug 13 13:27:58 2023 GMT
            Not After : Nov 11 14:27:58 2023 GMT
        Subject: CN=3888bd57-cce7-4358-965d-29273fc3991c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:b1:48:bb:9f:3c:7d:e2:39:6a:49:c2:ae:79:
                    ed:1e:1f:ef:3a:bd:64:be:e2:98:b1:00:00:8e:91:
                    f9:7b:a0:c3:fe:34:df:6c:ad:5e:1e:2e:dc:97:0f:
                    20:ac:11:c2:28:cd:5f:76:09:b4:91:d9:a4:7b:e4:
                    21:01:be:42:69:fc:91:fa:13:59:73:08:3d:d1:60:
                    34:16:e7:e8:4a:bb:79:a6:64:f8:92:67:ef:4b:f1:
                    45:c7:40:11:d3:93:c3:c4:ed:90:b3:4f:b2:f7:fb:
                    db:cd:06:01:46:4c:2c:ba:4d:e6:12:b5:f0:d5:65:
                    7d:32:07:fe:94:c6:77:c5:f8:2c:9f:9c:fb:e8:4a:
                    99:ad:1d:4d:aa:d3:fd:47:dc:15:34:b2:1e:a8:23:
                    d2:ff:94:64:e0:32:60:c4:e8:f3:f2:85:51:f7:27:
                    58:72:5b:4a:67:62:50:c1:bd:b6:25:fa:c2:6b:a5:
                    2d:fc:ce:32:94:b2:79:6a:19:5d:c0:93:d6:d2:d7:
                    8c:88:5a:73:ed:4c:8d:7d:e3:9c:e7:6a:35:09:28:
                    61:6e:78:2f:c7:b7:31:16:e1:f8:37:b4:3c:b2:57:
                    d7:39:4c:ab:7d:90:46:88:4d:c0:9e:f0:5b:9f:1b:
                    66:6c:d0:f3:d4:58:74:40:0e:cf:b6:fe:c0:e4:d7:
                    47:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:C6:06:71:02:F9:E7:DA:DC:8B:94:80:8F:0E:A6:28:67:AF:8B:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/35342562-4b31-4754-a32b-c5eec744d4a2/225e79eb-6cc6-3abf-b902-d24e561fe321.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/35342562-4b31-4754-a32b-c5eec744d4a2/35342562-4b31-4754-a32b-c5eec744d4a2.crl

            X509v3 Authority Key Identifier:
                keyid:ED:DE:39:DE:CF:88:EE:83:2E:4A:66:51:06:B4:E3:36:AB:86:0B:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/35342562-4b31-4754-a32b-c5eec744d4a2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:b2:e1:9b:83:79:80:14:70:ae:40:9e:27:21:9b:33:5e:eb:
         13:44:dc:cc:7e:c6:1e:a5:d5:cb:ca:fb:02:ad:09:28:a8:f1:
         14:7c:04:2b:3c:25:97:fa:8e:76:99:53:63:66:b1:b5:0d:0b:
         62:78:52:58:00:4d:2e:51:e5:e0:f8:2e:35:82:8c:9c:7a:15:
         70:1f:35:99:49:1e:17:f9:e4:5d:56:81:b0:76:e4:7d:99:bb:
         1d:b9:2a:fb:b7:02:1f:d1:00:7d:fb:6c:19:54:f2:aa:f8:bc:
         01:9e:de:34:d0:b9:66:b5:33:81:cf:6b:c3:df:69:6a:10:a0:
         ac:c4:2b:0b:8f:64:04:55:21:e4:7b:c6:86:8f:15:5d:30:59:
         6a:0c:f5:e4:91:4c:eb:15:2f:57:b7:06:f0:48:88:77:c5:51:
         d1:bb:bb:6a:df:27:6d:aa:d0:b3:55:38:0e:66:cc:40:18:74:
         68:4b:88:f5:a2:58:6f:95:b2:19:86:9a:08:93:08:1a:d0:2b:
         41:e1:b5:ad:b5:c3:8e:ff:46:2b:90:bf:3d:8f:c5:b0:03:fc:
         b0:ca:b1:8a:ba:8a:a1:b2:1d:fb:17:69:92:f1:5d:cc:7b:9b:
         22:5f:35:18:b3:ed:1b:e4:fb:06:33:08:6b:0d:83:3d:e1:f7:
         bf:e0:89:6d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWELfHIMbrmRqQQneXAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzUzNDI1NjItNGIzMS00NzU0LWEzMmItYzVlZWM3NDRk
NGEyMB4XDTIzMDgxMzEzMjc1OFoXDTIzMTExMTE0Mjc1OFowLzEtMCsGA1UEAxMk
Mzg4OGJkNTctY2NlNy00MzU4LTk2NWQtMjkyNzNmYzM5OTFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrFIu588feI5aknCrnntHh/vOr1kvuKYsQAA
jpH5e6DD/jTfbK1eHi7clw8grBHCKM1fdgm0kdmke+QhAb5CafyR+hNZcwg90WA0
FufoSrt5pmT4kmfvS/FFx0AR05PDxO2Qs0+y9/vbzQYBRkwsuk3mErXw1WV9Mgf+
lMZ3xfgsn5z76EqZrR1NqtP9R9wVNLIeqCPS/5Rk4DJgxOjz8oVR9ydYcltKZ2JQ
wb22JfrCa6Ut/M4ylLJ5ahldwJPW0teMiFpz7UyNfeOc52o1CShhbngvx7cxFuH4
N7Q8slfXOUyrfZBGiE3AnvBbnxtmbNDz1Fh0QA7Ptv7A5NdHTwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA/GBnEC+efa3IuUgI8Opihnr4u2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zNTM0
MjU2Mi00YjMxLTQ3NTQtYTMyYi1jNWVlYzc0NGQ0YTIvMjI1ZTc5ZWItNmNjNi0z
YWJmLWI5MDItZDI0ZTU2MWZlMzIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMzUzNDI1NjItNGIzMS00NzU0LWEz
MmItYzVlZWM3NDRkNGEyLzM1MzQyNTYyLTRiMzEtNDc1NC1hMzJiLWM1ZWVjNzQ0
ZDRhMi5jcmwwHwYDVR0jBBgwFoAU7d453s+I7oMuSmZRBrTjNquGC8EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8zNTM0MjU2Mi00YjMxLTQ3NTQtYTMyYi1jNWVl
Yzc0NGQ0YTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlXCYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG6y4ZuDeYAUcK5AnichmzNe6xNE3Mx+xh6l1cvK+wKtCSio8RR8BCs8
JZf6jnaZU2NmsbUNC2J4UlgATS5R5eD4LjWCjJx6FXAfNZlJHhf55F1WgbB25H2Z
ux25Kvu3Ah/RAH37bBlU8qr4vAGe3jTQuWa1M4HPa8PfaWoQoKzEKwuPZARVIeR7
xoaPFV0wWWoM9eSRTOsVL1e3BvBIiHfFUdG7u2rfJ22q0LNVOA5mzEAYdGhLiPWi
WG+VshmGmgiTCBrQK0Hhta21w47/RiuQvz2PxbAD/LDKsYq6iqGyHfsXaZLxXcx7
myJfNRiz7Rvk+wYzCGsNgz3h97/giW0=
-----END CERTIFICATE-----