Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87/d3025168-fcd3-326e-9043-a6cc3cc8a721.roa
File:                     d3025168-fcd3-326e-9043-a6cc3cc8a721.roa (raw, json)
Hash identifier:          0B+nduJVeDkMLDGhSpbsJF6sF4rPJgfxXCYawIe6cGc=
Subject key identifier:   33:10:3A:3A:DC:84:C3:FC:B8:93:98:C9:AF:52:F2:2D:CA:C7:78:17
Certificate issuer:       /CN=813aad25-25fa-4b5c-bb84-15fabea23f87
Certificate serial:       010D0C9F43285844F52466F8BC3298BA8DDDC100
Authority key identifier: 5E:97:21:19:44:A8:9C:ED:47:8B:39:3B:EB:C7:36:9C:33:01:CB:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87/d3025168-fcd3-326e-9043-a6cc3cc8a721.roa
Signing time:             Tue 20 Feb 2024 20:25:32 +0000
ROA not before:           Tue 20 Feb 2024 20:25:32 +0000
ROA not after:            Mon 20 May 2024 19:25:32 +0000
asID:                     400936
IP address blocks:        23.154.56.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 06 Apr 2024 08:16:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f5:24:66:f8:bc:32:98:ba:8d:dd:c1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=813aad25-25fa-4b5c-bb84-15fabea23f87
        Validity
            Not Before: Feb 20 20:25:32 2024 GMT
            Not After : May 20 19:25:32 2024 GMT
        Subject: CN=fd293d04-13d2-4e27-9bb5-ad70fba869b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:35:17:10:0c:5a:77:76:38:1b:fd:d9:69:2e:
                    7a:40:5e:d6:fb:2f:9f:b3:33:76:16:70:b1:25:38:
                    39:58:df:40:cf:30:af:bd:50:0d:49:e8:b4:7d:a8:
                    b6:61:04:3c:20:86:6e:38:0a:00:cc:22:2f:02:cb:
                    71:67:98:23:63:82:08:47:61:5a:cb:d3:a7:aa:28:
                    72:bc:fe:81:92:6f:6d:cd:48:91:d9:1c:6a:7a:89:
                    29:86:08:5c:7b:8c:97:6c:74:19:e9:6b:99:47:0a:
                    10:89:a0:33:3f:c3:9a:e1:e2:51:f1:dd:63:af:e3:
                    ba:53:8f:c0:11:a8:e1:ac:ab:be:5b:20:df:7b:2c:
                    10:6d:85:c4:3c:2d:a4:3b:2c:2c:af:20:40:33:58:
                    7f:80:12:9f:5c:ad:5d:74:84:07:da:93:35:a5:49:
                    47:64:90:ef:35:c7:1d:2e:f8:34:d1:8c:2a:4c:62:
                    22:ed:54:e3:f0:46:71:03:7e:e1:a0:22:d9:0e:e4:
                    42:ed:48:8f:ba:69:68:a8:27:c5:12:36:c0:d0:c8:
                    b5:81:95:02:c0:a8:ea:3d:db:24:f1:1e:e1:15:9a:
                    8e:13:aa:a7:ce:96:31:2c:9f:c6:f6:be:f6:74:1b:
                    88:bf:21:99:d7:6e:5c:cf:61:e7:31:ed:1d:d4:fd:
                    51:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:10:3A:3A:DC:84:C3:FC:B8:93:98:C9:AF:52:F2:2D:CA:C7:78:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87/d3025168-fcd3-326e-9043-a6cc3cc8a721.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87/813aad25-25fa-4b5c-bb84-15fabea23f87.crl

            X509v3 Authority Key Identifier:
                keyid:5E:97:21:19:44:A8:9C:ED:47:8B:39:3B:EB:C7:36:9C:33:01:CB:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.154.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:39:73:00:32:78:78:b6:67:9a:56:c0:b9:48:f4:00:16:e1:
         6c:ea:cb:cd:54:cf:c0:69:02:fe:64:7d:31:04:c2:c6:cf:b2:
         fb:e7:1e:ec:38:33:cd:aa:07:45:7b:c2:9f:d9:1c:33:3a:91:
         f9:c1:cb:53:4b:49:a3:3c:92:c7:7c:70:30:44:68:33:98:64:
         f6:08:45:f1:e3:29:d9:ac:81:e5:79:d9:cd:a8:e1:d1:97:61:
         94:c9:a2:a8:8c:68:f3:27:df:0d:6c:bb:e6:00:47:3f:45:93:
         f5:97:81:28:60:99:88:34:ff:e0:cd:4f:aa:ea:8c:18:1d:e6:
         6a:c0:06:16:25:99:ac:5c:96:d3:c9:4d:81:41:33:87:98:06:
         fd:d5:f8:88:ac:f4:17:8c:a1:9c:60:e0:e9:e2:cb:e8:df:21:
         7e:a4:97:e3:ba:ba:94:ec:a5:03:fa:6c:dc:2f:bf:15:70:3c:
         33:c5:7d:28:20:ba:a4:2f:30:ae:af:ff:2e:f5:b8:b1:80:df:
         b4:6c:2c:8d:4a:94:08:f1:ca:60:bc:b7:a5:0b:22:42:2f:df:
         e4:3f:09:60:12:48:aa:38:87:4d:db:c9:71:78:73:8f:ee:32:
         8b:e1:03:dd:2c:24:6f:40:43:6a:78:ac:3b:7c:6a:67:36:20:
         2e:c3:56:c6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWET1JGb4vDKYuo3dwQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODEzYWFkMjUtMjVmYS00YjVjLWJiODQtMTVmYWJlYTIz
Zjg3MB4XDTI0MDIyMDIwMjUzMloXDTI0MDUyMDE5MjUzMlowLzEtMCsGA1UEAxMk
ZmQyOTNkMDQtMTNkMi00ZTI3LTliYjUtYWQ3MGZiYTg2OWI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDUXEAxad3Y4G/3ZaS56QF7W+y+fszN2FnCx
JTg5WN9AzzCvvVANSei0fai2YQQ8IIZuOAoAzCIvAstxZ5gjY4IIR2Fay9Onqihy
vP6Bkm9tzUiR2Rxqeokphghce4yXbHQZ6WuZRwoQiaAzP8Oa4eJR8d1jr+O6U4/A
EajhrKu+WyDfeywQbYXEPC2kOywsryBAM1h/gBKfXK1ddIQH2pM1pUlHZJDvNccd
Lvg00YwqTGIi7VTj8EZxA37hoCLZDuRC7UiPumloqCfFEjbA0Mi1gZUCwKjqPdsk
8R7hFZqOE6qnzpYxLJ/G9r72dBuIvyGZ125cz2HnMe0d1P1RcQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDMQOjrchMP8uJOYya9S8i3Kx3gXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84MTNh
YWQyNS0yNWZhLTRiNWMtYmI4NC0xNWZhYmVhMjNmODcvZDMwMjUxNjgtZmNkMy0z
MjZlLTkwNDMtYTZjYzNjYzhhNzIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODEzYWFkMjUtMjVmYS00YjVjLWJi
ODQtMTVmYWJlYTIzZjg3LzgxM2FhZDI1LTI1ZmEtNGI1Yy1iYjg0LTE1ZmFiZWEy
M2Y4Ny5jcmwwHwYDVR0jBBgwFoAUXpchGUSonO1Hizk768c2nDMBy4owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS84MTNhYWQyNS0yNWZhLTRiNWMtYmI4NC0xNWZh
YmVhMjNmODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5o4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAA5cwAyeHi2Z5pWwLlI9AAW4Wzqy81Uz8BpAv5kfTEEwsbPsvvnHuw4
M82qB0V7wp/ZHDM6kfnBy1NLSaM8ksd8cDBEaDOYZPYIRfHjKdmsgeV52c2o4dGX
YZTJoqiMaPMn3w1su+YARz9Fk/WXgShgmYg0/+DNT6rqjBgd5mrABhYlmaxcltPJ
TYFBM4eYBv3V+Iis9BeMoZxg4Oniy+jfIX6kl+O6upTspQP6bNwvvxVwPDPFfSgg
uqQvMK6v/y71uLGA37RsLI1KlAjxymC8t6ULIkIv3+Q/CWASSKo4h03byXF4c4/u
MovhA90sJG9AQ2p4rDt8amc2IC7DVsY=
-----END CERTIFICATE-----