Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/33d1dc49-0f28-3094-a037-e53b12fe9623.roa
File:                     33d1dc49-0f28-3094-a037-e53b12fe9623.roa (raw, json)
Hash identifier:          HM+0I8hmSQVHpPZIEqPUeLd8a/rr4MAHpGRpYubr0ug=
Subject key identifier:   29:2F:E1:C4:9C:6E:A5:CA:B7:CF:D4:53:98:58:7D:F5:62:E0:94:80
Certificate issuer:       /CN=0388d52a-f8dd-4c02-8c3e-e12809f93cfe
Certificate serial:       010D0C9F432858418AE463CE110715A6E8EB9F40
Authority key identifier: 71:B5:55:B0:0D:0A:11:17:D2:49:51:4A:8C:44:F0:4F:3D:A1:66:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/33d1dc49-0f28-3094-a037-e53b12fe9623.roa
Signing time:             Wed 08 Mar 2023 19:34:09 +0000
ROA not before:           Wed 08 Mar 2023 19:34:09 +0000
ROA not after:            Tue 10 Jun 2025 04:00:00 +0000
asID:                     0
IP address blocks:        128.254.187.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:8a:e4:63:ce:11:07:15:a6:e8:eb:9f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0388d52a-f8dd-4c02-8c3e-e12809f93cfe
        Validity
            Not Before: Mar  8 19:34:09 2023 GMT
            Not After : Jun 10 04:00:00 2025 GMT
        Subject: CN=c115ed2b-5141-4f30-8e44-08bd5485f580
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:6a:17:6f:3f:d5:74:d4:3b:36:37:3a:c0:90:
                    8d:e0:5b:63:41:d9:31:05:bd:39:05:60:da:eb:34:
                    9e:93:96:dd:72:74:cc:bd:ce:dd:97:8a:6f:52:4a:
                    35:4d:92:cd:8b:15:8a:42:6c:04:96:28:bb:cc:57:
                    04:ae:0b:02:91:6c:59:36:15:84:0d:1b:00:f5:50:
                    32:71:8e:21:9f:d5:56:16:87:5c:bc:87:94:59:d0:
                    16:fc:e7:a4:e0:0c:22:b3:8c:1b:f3:16:46:45:e8:
                    ac:02:1f:c6:b9:c1:b3:e6:06:6b:ef:66:bd:38:bb:
                    1e:90:52:14:64:fd:a1:99:af:b3:ed:4c:f9:ce:b9:
                    94:82:90:3b:c8:ba:ea:73:ce:3d:f0:ce:5d:22:1a:
                    fb:90:74:52:bf:aa:41:a8:e9:b6:3d:44:2d:7d:6d:
                    94:db:c9:41:33:c1:cf:70:be:70:a7:cb:e5:dc:85:
                    06:73:06:44:9a:87:1f:13:96:29:2d:32:3a:96:99:
                    87:88:33:e4:df:a3:0e:02:a8:97:0d:0f:bf:40:fd:
                    e3:7e:40:49:28:d9:f2:56:8e:d3:44:cc:b8:ac:7c:
                    de:b7:60:fc:82:ab:d9:6b:e4:e1:9e:ac:b1:63:c0:
                    ae:74:8e:88:dc:d7:22:d1:c2:8b:b4:cf:37:b5:84:
                    b7:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:2F:E1:C4:9C:6E:A5:CA:B7:CF:D4:53:98:58:7D:F5:62:E0:94:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/33d1dc49-0f28-3094-a037-e53b12fe9623.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.crl

            X509v3 Authority Key Identifier:
                keyid:71:B5:55:B0:0D:0A:11:17:D2:49:51:4A:8C:44:F0:4F:3D:A1:66:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.254.187.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:43:f2:f3:43:aa:bc:df:2c:82:c1:91:c9:34:7d:76:2d:53:
         48:45:c8:6b:18:f4:d3:4c:5b:3b:d6:71:36:fb:c4:63:97:4e:
         99:ef:00:d9:aa:5c:47:5d:78:77:cb:2b:ea:1f:28:a2:e3:83:
         9d:ae:d0:f6:2c:6f:4d:5c:24:8b:d2:81:02:cc:68:64:f3:2c:
         6b:8b:11:bb:41:8d:b9:70:93:9f:c2:0f:e1:2a:b5:2d:82:e5:
         10:29:40:1e:06:1c:0d:39:c2:9d:8a:e2:81:d5:6b:e6:1e:c1:
         03:4b:3a:2b:79:bd:95:83:1f:50:29:ae:63:0e:25:2d:a6:84:
         31:2c:42:54:a0:85:1d:a6:40:5d:dc:1c:c4:31:fb:31:79:01:
         19:7c:a1:4e:fc:fd:eb:76:12:51:ca:ed:72:98:2a:c9:7b:46:
         cf:cb:c6:3e:89:9c:34:ac:94:7c:73:a5:25:b3:ef:26:59:07:
         ea:59:ac:75:c3:a6:aa:ee:68:e8:45:fb:cc:1b:07:6f:20:57:
         3c:eb:c5:96:74:89:ac:26:20:ed:73:f7:b6:59:05:6e:93:e0:
         67:f1:bd:bd:04:c1:b4:8d:9f:16:2a:22:15:e1:6d:c2:8e:eb:
         23:79:48:43:e8:2c:df:a0:02:8a:0a:4b:c3:5e:73:14:ad:cc:
         df:6b:7a:5e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEGK5GPOEQcVpujrn0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDM4OGQ1MmEtZjhkZC00YzAyLThjM2UtZTEyODA5Zjkz
Y2ZlMB4XDTIzMDMwODE5MzQwOVoXDTI1MDYxMDA0MDAwMFowLzEtMCsGA1UEAxMk
YzExNWVkMmItNTE0MS00ZjMwLThlNDQtMDhiZDU0ODVmNTgwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGoXbz/VdNQ7Njc6wJCN4FtjQdkxBb05BWDa
6zSek5bdcnTMvc7dl4pvUko1TZLNixWKQmwElii7zFcErgsCkWxZNhWEDRsA9VAy
cY4hn9VWFodcvIeUWdAW/Oek4Awis4wb8xZGReisAh/GucGz5gZr72a9OLsekFIU
ZP2hma+z7Uz5zrmUgpA7yLrqc8498M5dIhr7kHRSv6pBqOm2PUQtfW2U28lBM8HP
cL5wp8vl3IUGcwZEmocfE5YpLTI6lpmHiDPk36MOAqiXDQ+/QP3jfkBJKNnyVo7T
RMy4rHzet2D8gqvZa+ThnqyxY8CudI6I3Nci0cKLtM83tYS35QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCkv4cScbqXKt8/UU5hYffVi4JSAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wMzg4
ZDUyYS1mOGRkLTRjMDItOGMzZS1lMTI4MDlmOTNjZmUvMzNkMWRjNDktMGYyOC0z
MDk0LWEwMzctZTUzYjEyZmU5NjIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMDM4OGQ1MmEtZjhkZC00YzAyLThj
M2UtZTEyODA5ZjkzY2ZlLzAzODhkNTJhLWY4ZGQtNGMwMi04YzNlLWUxMjgwOWY5
M2NmZS5jcmwwHwYDVR0jBBgwFoAUcbVVsA0KERfSSVFKjETwTz2hZm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS8wMzg4ZDUyYS1mOGRkLTRjMDItOGMzZS1lMTI4
MDlmOTNjZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgP67MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACdD8vNDqrzfLILBkck0fXYtU0hFyGsY9NNMWzvWcTb7xGOXTpnvANmq
XEddeHfLK+ofKKLjg52u0PYsb01cJIvSgQLMaGTzLGuLEbtBjblwk5/CD+EqtS2C
5RApQB4GHA05wp2K4oHVa+YewQNLOit5vZWDH1AprmMOJS2mhDEsQlSghR2mQF3c
HMQx+zF5ARl8oU78/et2ElHK7XKYKsl7Rs/Lxj6JnDSslHxzpSWz7yZZB+pZrHXD
pqruaOhF+8wbB28gVzzrxZZ0iawmIO1z97ZZBW6T4Gfxvb0EwbSNnxYqIhXhbcKO
6yN5SEPoLN+gAooKS8NecxStzN9rel4=
-----END CERTIFICATE-----