Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/91f2f9b7-4d59-30c2-8ee7-87305884447f.roa
File:                     91f2f9b7-4d59-30c2-8ee7-87305884447f.roa (raw, json)
Hash identifier:          verDDh/7+moJL+NHkHiNuI45pes3MoZUgVbrNya19oI=
Subject key identifier:   C5:3B:1C:24:AC:48:9F:23:E0:A9:84:56:A8:B0:05:EC:E6:42:9F:B8
Certificate issuer:       /CN=239e2a72-9347-4316-9be7-20bdf6512711
Certificate serial:       010D0C9F43285844F89557BCFE17F7014C533180
Authority key identifier: C7:00:5A:76:42:60:11:9F:ED:7A:6F:7F:67:94:62:64:EC:2D:6B:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/91f2f9b7-4d59-30c2-8ee7-87305884447f.roa
Signing time:             Thu 22 Feb 2024 02:00:27 +0000
ROA not before:           Thu 22 Feb 2024 02:00:27 +0000
ROA not after:            Wed 22 May 2024 01:00:27 +0000
asID:                     203098
IP address blocks:        104.193.212.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Thu 04 Apr 2024 16:32:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f8:95:57:bc:fe:17:f7:01:4c:53:31:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=239e2a72-9347-4316-9be7-20bdf6512711
        Validity
            Not Before: Feb 22 02:00:27 2024 GMT
            Not After : May 22 01:00:27 2024 GMT
        Subject: CN=127306ac-0720-4c6b-94a0-621a44a451ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d8:ea:17:c3:65:2d:b6:eb:02:68:b3:14:cd:
                    c4:02:a4:c8:8c:7c:99:19:67:a0:1a:8a:9e:9f:35:
                    42:b4:bf:b5:d2:25:51:f3:4a:50:3f:f6:94:5c:32:
                    a9:ea:02:cd:07:97:aa:ed:9c:a8:5d:eb:4a:27:f9:
                    d5:ab:a6:1f:ca:7b:8c:00:2e:3e:da:91:4b:29:df:
                    c7:dc:e1:9a:2d:88:e1:01:b8:92:e4:d5:04:44:05:
                    41:c7:81:2e:1d:7a:ae:90:d9:35:2e:14:45:8e:9c:
                    04:96:cf:4f:5d:d1:9d:f2:01:ee:35:05:f4:06:bd:
                    26:e4:3f:10:f6:f7:d8:4d:60:46:58:c4:8d:6c:8a:
                    eb:8f:fb:c1:74:46:9d:5e:50:45:d6:fd:e0:6c:c6:
                    aa:e6:9b:38:5d:7f:64:c5:bc:69:28:74:45:c2:59:
                    59:a0:d2:93:64:41:7c:ee:73:49:2f:55:b7:3a:dc:
                    2c:ef:e4:70:59:5a:a4:97:a5:07:f7:31:66:bd:a4:
                    44:13:5f:9a:47:03:60:24:fb:bf:d7:33:35:c9:95:
                    20:7e:b9:ed:2b:ac:9d:40:37:c8:20:ca:37:3b:fd:
                    cb:12:c7:7d:9b:0a:e3:73:7c:19:ff:4f:a8:e9:f9:
                    27:c7:86:15:1f:5d:01:ee:ed:83:a2:8a:01:c8:61:
                    83:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:3B:1C:24:AC:48:9F:23:E0:A9:84:56:A8:B0:05:EC:E6:42:9F:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/91f2f9b7-4d59-30c2-8ee7-87305884447f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711/239e2a72-9347-4316-9be7-20bdf6512711.crl

            X509v3 Authority Key Identifier:
                keyid:C7:00:5A:76:42:60:11:9F:ED:7A:6F:7F:67:94:62:64:EC:2D:6B:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/239e2a72-9347-4316-9be7-20bdf6512711.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.193.212.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:93:d5:25:36:19:06:bc:23:f6:e2:9b:50:91:9e:12:04:ab:
         77:a2:f5:c2:00:96:ba:7d:ad:f9:d3:d4:86:f3:73:20:d2:cb:
         b6:f0:99:1a:b4:83:1a:d7:ec:a7:22:77:9a:e3:34:a4:a3:79:
         96:70:f9:ca:c1:01:6f:73:f0:6e:f6:c8:d9:89:a6:8e:8b:72:
         3c:f4:0e:af:84:29:75:9f:c7:96:07:0a:c8:db:1b:16:a1:0a:
         ac:1f:72:53:d9:27:92:ad:4a:c2:c2:03:7e:f0:9e:5d:b1:b4:
         80:a1:61:03:6a:01:2a:36:6e:71:9f:bc:bc:41:2b:33:6e:dd:
         34:24:97:b7:4b:9c:de:39:8a:46:46:36:88:69:8e:72:be:e1:
         42:88:76:62:6e:8f:13:96:9a:ba:d9:3b:d6:90:af:a4:65:73:
         8a:20:b1:8c:0b:1f:56:f5:13:2b:6c:83:25:42:b9:1d:a5:f3:
         fa:d1:46:99:be:fa:c6:6f:15:1f:e3:43:50:93:b5:0c:d6:a7:
         ef:64:92:c2:1a:43:8e:5c:a4:52:24:65:3f:c0:e7:9d:ea:76:
         a7:b1:52:1f:3d:ba:93:35:52:b6:4f:f5:dc:2e:ff:27:41:09:
         ef:52:7c:cb:c8:f4:58:e7:c3:1a:bb:ad:7d:ba:5f:b7:14:e2:
         2c:8a:00:dc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWET4lVe8/hf3AUxTMYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjM5ZTJhNzItOTM0Ny00MzE2LTliZTctMjBiZGY2NTEy
NzExMB4XDTI0MDIyMjAyMDAyN1oXDTI0MDUyMjAxMDAyN1owLzEtMCsGA1UEAxMk
MTI3MzA2YWMtMDcyMC00YzZiLTk0YTAtNjIxYTQ0YTQ1MWVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdjqF8NlLbbrAmizFM3EAqTIjHyZGWegGoqe
nzVCtL+10iVR80pQP/aUXDKp6gLNB5eq7ZyoXetKJ/nVq6YfynuMAC4+2pFLKd/H
3OGaLYjhAbiS5NUERAVBx4EuHXqukNk1LhRFjpwEls9PXdGd8gHuNQX0Br0m5D8Q
9vfYTWBGWMSNbIrrj/vBdEadXlBF1v3gbMaq5ps4XX9kxbxpKHRFwllZoNKTZEF8
7nNJL1W3Otws7+RwWVqkl6UH9zFmvaREE1+aRwNgJPu/1zM1yZUgfrntK6ydQDfI
IMo3O/3LEsd9mwrjc3wZ/0+o6fknx4YVH10B7u2DoooByGGDTwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMU7HCSsSJ8j4KmEVqiwBezmQp+4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yMzll
MmE3Mi05MzQ3LTQzMTYtOWJlNy0yMGJkZjY1MTI3MTEvOTFmMmY5YjctNGQ1OS0z
MGMyLThlZTctODczMDU4ODQ0NDdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjM5ZTJhNzItOTM0Ny00MzE2LTli
ZTctMjBiZGY2NTEyNzExLzIzOWUyYTcyLTkzNDctNDMxNi05YmU3LTIwYmRmNjUx
MjcxMS5jcmwwHwYDVR0jBBgwFoAUxwBadkJgEZ/tem9/Z5RiZOwta1QwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yMzllMmE3Mi05MzQ3LTQzMTYtOWJlNy0yMGJk
ZjY1MTI3MTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaMHUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFuT1SU2GQa8I/bim1CRnhIEq3ei9cIAlrp9rfnT1IbzcyDSy7bwmRq0
gxrX7Kcid5rjNKSjeZZw+crBAW9z8G72yNmJpo6Lcjz0Dq+EKXWfx5YHCsjbGxah
CqwfclPZJ5KtSsLCA37wnl2xtIChYQNqASo2bnGfvLxBKzNu3TQkl7dLnN45ikZG
NohpjnK+4UKIdmJujxOWmrrZO9aQr6Rlc4ogsYwLH1b1EytsgyVCuR2l8/rRRpm+
+sZvFR/jQ1CTtQzWp+9kksIaQ45cpFIkZT/A553qdqexUh89upM1UrZP9dwu/ydB
Ce9SfMvI9Fjnwxq7rX26X7cU4iyKANw=
-----END CERTIFICATE-----