Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/bf61b379-1b59-3f91-b1e0-193e38c3b760.roa
File:                     bf61b379-1b59-3f91-b1e0-193e38c3b760.roa (raw, json)
Hash identifier:          n6Npkm1VuyA7ZjiLRfEsE+fXJz+SIWtddzv0xTQiXOY=
Subject key identifier:   E8:AE:EA:CB:26:0C:E0:05:4A:A1:EE:04:28:88:8F:86:FA:36:4D:C5
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584505B21F8719002AE07A6C2160
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/bf61b379-1b59-3f91-b1e0-193e38c3b760.roa
Signing time:             Mon 26 Feb 2024 18:44:01 +0000
ROA not before:           Mon 26 Feb 2024 18:44:01 +0000
ROA not after:            Sun 26 May 2024 17:44:01 +0000
asID:                     834
IP address blocks:        104.129.240.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Apr 2024 06:14:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:05:b2:1f:87:19:00:2a:e0:7a:6c:21:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Feb 26 18:44:01 2024 GMT
            Not After : May 26 17:44:01 2024 GMT
        Subject: CN=2db6ef40-8bea-445b-8dd7-05bdfcd57d9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:cb:8f:42:da:12:ee:d7:4b:8f:63:83:bc:9e:
                    6a:37:59:e5:48:86:87:32:d2:89:25:24:00:43:63:
                    70:82:56:0e:81:1d:f1:bf:73:94:25:89:4e:c7:5e:
                    e8:c9:c9:5b:ff:cd:ce:2d:e2:f6:78:28:18:1f:af:
                    ed:65:8c:66:9b:b9:d1:e7:c8:cc:ed:11:d8:e2:93:
                    e7:b8:8c:0c:92:f7:c1:f1:70:a8:10:d7:74:20:1d:
                    a8:f2:fd:62:08:f4:28:a3:76:c1:ea:0b:d0:24:56:
                    86:8c:20:88:8d:4b:f6:93:9f:d6:d5:c6:79:bc:7a:
                    c1:33:75:1c:de:7c:26:cc:5f:84:a3:cc:eb:1b:f2:
                    72:fc:d1:a2:fe:88:0a:3b:03:94:72:14:0c:90:d2:
                    ed:e1:7f:24:d5:c3:bd:85:e4:bc:ab:cf:ed:25:62:
                    fa:2f:50:b4:88:5e:18:88:b5:17:54:13:a0:1b:25:
                    a8:52:66:2a:34:4e:a7:42:be:ef:ec:d8:5f:bc:4f:
                    47:ae:8a:b9:69:49:c1:c4:cf:80:9b:4e:9d:35:6a:
                    ef:56:f0:ca:8d:7c:e2:35:56:0c:aa:32:6c:f9:dc:
                    4f:d1:14:2e:0a:4a:53:f4:e5:89:dd:c8:22:6e:8d:
                    40:d9:2b:1f:b4:e3:57:c9:b7:0a:22:1f:e8:e2:38:
                    17:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:AE:EA:CB:26:0C:E0:05:4A:A1:EE:04:28:88:8F:86:FA:36:4D:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/bf61b379-1b59-3f91-b1e0-193e38c3b760.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.129.240.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:44:61:78:48:cc:b3:ad:bb:92:79:ba:6f:27:41:8d:d4:5f:
         61:6f:54:b7:7d:e6:61:b4:65:e7:29:44:ad:63:a0:f7:59:33:
         57:f6:f2:68:3a:77:44:2f:8b:80:4a:b0:3e:b0:dd:a9:95:3b:
         34:4c:b8:c4:c3:fd:bd:70:cf:e6:89:7d:ec:e9:95:dd:ac:e9:
         ac:af:26:0a:46:f9:30:2a:4f:57:15:0f:15:23:d3:4a:83:42:
         2a:a2:19:c7:66:75:46:4d:aa:a4:05:fa:26:70:4e:b3:d0:41:
         38:6f:a7:87:1c:3d:2e:d4:d0:08:6f:ad:98:77:57:c9:90:3c:
         27:e9:1f:56:78:94:18:5f:b5:49:54:dd:2c:20:14:f9:31:d4:
         bc:2c:84:9b:0c:ab:f0:a8:b6:97:6b:aa:5f:6c:9c:73:d4:c7:
         4a:91:68:61:4c:df:7b:1c:f9:8e:f3:fa:bc:5b:24:7d:0f:c6:
         cd:f5:8e:a4:63:31:aa:53:4c:c3:40:a5:6f:7f:27:ea:ca:fb:
         34:88:54:34:6e:96:48:3c:b9:b3:e0:e1:c7:1a:25:c6:2f:d8:
         e9:b6:20:76:70:4f:55:f2:59:2f:a5:66:b6:07:7f:9f:fa:b8:
         3c:13:b9:a8:27:fe:e9:0f:c3:c1:71:54:9a:e0:13:dc:6f:5a:
         fd:48:77:d4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUFsh+HGQAq4HpsIWAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTI0MDIyNjE4NDQwMVoXDTI0MDUyNjE3NDQwMVowLzEtMCsGA1UEAxMk
MmRiNmVmNDAtOGJlYS00NDViLThkZDctMDViZGZjZDU3ZDliMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkcuPQtoS7tdLj2ODvJ5qN1nlSIaHMtKJJSQA
Q2NwglYOgR3xv3OUJYlOx17oyclb/83OLeL2eCgYH6/tZYxmm7nR58jM7RHY4pPn
uIwMkvfB8XCoENd0IB2o8v1iCPQoo3bB6gvQJFaGjCCIjUv2k5/W1cZ5vHrBM3Uc
3nwmzF+Eo8zrG/Jy/NGi/ogKOwOUchQMkNLt4X8k1cO9heS8q8/tJWL6L1C0iF4Y
iLUXVBOgGyWoUmYqNE6nQr7v7NhfvE9Hroq5aUnBxM+Am06dNWrvVvDKjXziNVYM
qjJs+dxP0RQuCkpT9OWJ3cgibo1A2SsftONXybcKIh/o4jgXTwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOiu6ssmDOAFSqHuBCiIj4b6Nk3FMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvYmY2MWIzNzktMWI1OS0z
ZjkxLWIxZTAtMTkzZTM4YzNiNzYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIHwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB9EYXhIzLOtu5J5um8nQY3UX2FvVLd95mG0ZecpRK1joPdZM1f28mg6
d0Qvi4BKsD6w3amVOzRMuMTD/b1wz+aJfezpld2s6ayvJgpG+TAqT1cVDxUj00qD
QiqiGcdmdUZNqqQF+iZwTrPQQThvp4ccPS7U0AhvrZh3V8mQPCfpH1Z4lBhftUlU
3SwgFPkx1LwshJsMq/Cotpdrql9snHPUx0qRaGFM33sc+Y7z+rxbJH0Pxs31jqRj
MapTTMNApW9/J+rK+zSIVDRulkg8ubPg4ccaJcYv2Om2IHZwT1XyWS+lZrYHf5/6
uDwTuagn/ukPw8FxVJrgE9xvWv1Id9Q=
-----END CERTIFICATE-----