Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/9a3d6b04-c87b-3fdb-96ae-556322c85366.roa
File:                     9a3d6b04-c87b-3fdb-96ae-556322c85366.roa (raw, json)
Hash identifier:          0oItUkZtQdX0nmXq0L6RjM3nbUiA+SalWWZ5cJ0QwuU=
Subject key identifier:   C6:42:ED:7B:E4:C4:B9:71:D1:C5:F7:91:BD:CD:8B:ED:72:DF:9D:75
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584A0727D275752C6122C26B7A40
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/9a3d6b04-c87b-3fdb-96ae-556322c85366.roa
Signing time:             Fri 30 May 2025 19:11:39 +0000
ROA not before:           Fri 30 May 2025 19:11:39 +0000
ROA not after:            Thu 28 Aug 2025 19:11:39 +0000
asID:                     81
IP address blocks:        152.45.4.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Mon 16 Jun 2025 16:03:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:07:27:d2:75:75:2c:61:22:c2:6b:7a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: May 30 19:11:39 2025 GMT
            Not After : Aug 28 19:11:39 2025 GMT
        Subject: CN=695901c0-83c4-4f97-bdcb-970376ca0f1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ce:92:58:1e:63:d4:f0:17:7b:21:83:62:73:
                    49:b4:f5:3e:f7:3f:4b:01:7a:c4:4c:3f:2c:f7:60:
                    07:10:34:ce:41:c7:6a:84:d7:0b:16:2f:cd:5f:86:
                    03:59:22:06:9f:30:6a:be:dc:2a:bf:ba:19:d5:c7:
                    fe:ab:33:37:4c:66:29:b1:22:d5:23:2d:e2:75:fb:
                    2a:ae:d4:44:94:50:c5:14:17:52:dc:78:1d:5a:d7:
                    7f:f3:69:27:fd:b8:bf:f4:f6:7a:b7:e5:8c:d9:b7:
                    8f:5e:99:c8:75:dd:7a:15:75:2d:b6:e1:1b:2f:8b:
                    57:27:2f:cd:10:c0:4d:ec:3a:49:7b:11:1e:f2:1b:
                    20:79:23:ee:7c:ef:3a:d2:98:10:58:df:1b:90:24:
                    ee:a8:7f:15:e1:ab:33:c1:89:a5:1a:c7:01:b2:04:
                    d2:43:a1:2c:14:ea:40:af:72:4b:b2:29:8c:d9:81:
                    ee:60:4f:01:2d:4b:c5:7e:ef:c4:ee:f0:98:6e:15:
                    4f:dc:88:6d:2f:b9:5a:1d:66:22:df:6a:07:09:2c:
                    29:21:2e:5f:5b:7f:68:22:75:89:0e:c5:f6:63:94:
                    90:1c:3b:6d:d8:58:cc:8c:df:98:cb:99:cd:09:db:
                    12:9f:bf:64:b7:83:77:e2:a9:d3:ce:9f:d2:62:2d:
                    4b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:42:ED:7B:E4:C4:B9:71:D1:C5:F7:91:BD:CD:8B:ED:72:DF:9D:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/9a3d6b04-c87b-3fdb-96ae-556322c85366.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.45.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:25:29:e7:9a:33:cc:b7:1d:c6:80:51:12:ba:a5:64:a2:4b:
         ee:02:84:50:4e:db:ac:7b:c8:eb:7d:71:81:87:0a:bb:9f:96:
         20:3a:75:ee:13:14:06:32:8a:a5:7a:ad:f3:ae:75:84:c6:f3:
         e1:2c:a0:f1:4b:8a:ac:84:73:3d:40:30:5b:b2:4b:b7:f2:dc:
         73:6e:9e:0b:c5:52:d1:ac:5c:00:67:da:a5:61:ef:68:f9:57:
         3b:17:1c:a1:71:b7:3a:35:4a:48:1c:42:da:1b:87:c1:b2:d4:
         09:30:86:c4:c6:28:6d:55:4c:d7:60:0f:88:0c:27:3e:3f:98:
         d2:65:65:49:37:19:ad:96:04:b5:7f:21:73:96:7f:c2:01:ff:
         f1:a2:0c:7f:6e:63:7a:43:f4:47:24:91:4d:d5:b7:11:4c:f0:
         be:3a:12:d3:4a:c2:c3:ef:b8:9b:e9:18:f9:02:ca:01:1c:78:
         ba:3f:dc:56:85:26:35:9f:1a:bb:4e:fe:83:e4:c2:d6:d1:f5:
         3a:a5:95:9c:03:15:41:17:81:5f:e5:31:03:93:4c:01:c8:db:
         55:60:f2:5a:81:a3:ea:fe:4f:85:04:8c:b0:65:94:7e:a5:77:
         a0:e7:60:cb:e9:44:4b:e6:46:f2:85:74:6d:b0:99:31:75:3f:
         2c:52:9a:6b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoHJ9J1dSxhIsJrekAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh
YTZhMB4XDTI1MDUzMDE5MTEzOVoXDTI1MDgyODE5MTEzOVowLzEtMCsGA1UEAxMk
Njk1OTAxYzAtODNjNC00Zjk3LWJkY2ItOTcwMzc2Y2EwZjFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmc6SWB5j1PAXeyGDYnNJtPU+9z9LAXrETD8s
92AHEDTOQcdqhNcLFi/NX4YDWSIGnzBqvtwqv7oZ1cf+qzM3TGYpsSLVIy3idfsq
rtRElFDFFBdS3HgdWtd/82kn/bi/9PZ6t+WM2bePXpnIdd16FXUttuEbL4tXJy/N
EMBN7DpJexEe8hsgeSPufO860pgQWN8bkCTuqH8V4aszwYmlGscBsgTSQ6EsFOpA
r3JLsimM2YHuYE8BLUvFfu/E7vCYbhVP3IhtL7laHWYi32oHCSwpIS5fW39oInWJ
DsX2Y5SQHDtt2FjMjN+Yy5nNCdsSn79kt4N34qnTzp/SYi1LAwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMZC7XvkxLlx0cX3kb3Ni+1y3511MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy
YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvOWEzZDZiMDQtYzg3Yi0z
ZmRiLTk2YWUtNTU2MzIyYzg1MzY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj
OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz
YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi
OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmC0EMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG8lKeeaM8y3HcaAURK6pWSiS+4ChFBO26x7yOt9cYGHCrufliA6de4T
FAYyiqV6rfOudYTG8+EsoPFLiqyEcz1AMFuyS7fy3HNungvFUtGsXABn2qVh72j5
VzsXHKFxtzo1SkgcQtobh8Gy1AkwhsTGKG1VTNdgD4gMJz4/mNJlZUk3Ga2WBLV/
IXOWf8IB//GiDH9uY3pD9EckkU3VtxFM8L46EtNKwsPvuJvpGPkCygEceLo/3FaF
JjWfGrtO/oPkwtbR9TqllZwDFUEXgV/lMQOTTAHI21Vg8lqBo+r+T4UEjLBllH6l
d6DnYMvpREvmRvKFdG2wmTF1PyxSmms=
-----END CERTIFICATE-----