Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/0b738220-8958-38bb-84c6-0fcc62004302.roa
File:                     0b738220-8958-38bb-84c6-0fcc62004302.roa (raw, json)
Hash identifier:          xkcgLMpF0rKPRobefCiGusaUc0u8/VY8QKLXkrICtwY=
Subject key identifier:   36:D9:A9:D8:1F:04:76:0D:4A:E5:A9:4B:2A:FE:14:F1:EC:F5:90:A3
Certificate issuer:       /CN=b0d6fd50-b543-4e97-a7f3-0d6a5908ca38
Certificate serial:       010D0C9F43285844F45FE8323C688C0B9F506F00
Authority key identifier: B8:2D:73:8E:4B:5A:99:ED:25:54:55:58:EF:D1:33:51:15:68:F4:FF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/0b738220-8958-38bb-84c6-0fcc62004302.roa
Signing time:             Tue 20 Feb 2024 13:49:37 +0000
ROA not before:           Tue 20 Feb 2024 13:49:37 +0000
ROA not after:            Mon 20 May 2024 12:49:37 +0000
asID:                     834
IP address blocks:        65.181.180.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Mon 25 Mar 2024 19:58:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f4:5f:e8:32:3c:68:8c:0b:9f:50:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0d6fd50-b543-4e97-a7f3-0d6a5908ca38
        Validity
            Not Before: Feb 20 13:49:37 2024 GMT
            Not After : May 20 12:49:37 2024 GMT
        Subject: CN=cdc91fad-6852-40bc-95af-b55145697a39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:93:d4:3b:7e:3f:0f:d2:b4:a4:5b:21:08:79:
                    47:d3:a9:71:a0:36:4c:8d:ac:21:5e:6c:10:f8:9c:
                    85:19:1e:f7:47:21:5d:ba:c5:d7:37:73:ec:a4:0d:
                    2f:bd:88:23:3d:22:48:6f:20:5a:05:d6:af:8c:40:
                    f3:0e:04:8d:55:be:1b:c3:a4:0c:d8:29:c6:3b:8c:
                    34:aa:13:9b:3b:6b:11:fa:d2:ac:c6:8c:ee:d3:8d:
                    7a:56:06:50:2e:d6:2d:e4:6d:41:0c:cd:e2:fe:42:
                    36:4f:c3:b3:42:bd:ae:62:96:e3:36:ce:29:32:0c:
                    ed:68:35:04:83:cb:15:93:23:11:0a:62:6e:94:74:
                    ea:5e:83:00:bc:65:fb:f7:17:31:4f:4a:52:5e:8c:
                    f2:45:92:c7:f8:fd:cd:d1:f2:f7:c5:e1:64:c4:52:
                    39:44:46:af:43:9d:47:13:79:a1:d8:a0:a8:0b:3f:
                    86:12:38:55:2f:da:5e:2f:32:a8:08:24:a4:b6:32:
                    97:98:15:fb:89:fa:78:1c:1e:42:ec:73:88:19:ee:
                    a6:1f:1a:c1:ab:48:da:24:d9:3c:e4:5c:8a:3f:61:
                    a2:5d:ec:06:34:d3:f4:b0:6b:86:0b:07:8e:04:2d:
                    9f:b6:a1:4b:69:5d:ca:fa:89:51:14:e4:20:fb:9f:
                    d6:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:D9:A9:D8:1F:04:76:0D:4A:E5:A9:4B:2A:FE:14:F1:EC:F5:90:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/0b738220-8958-38bb-84c6-0fcc62004302.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.crl

            X509v3 Authority Key Identifier:
                keyid:B8:2D:73:8E:4B:5A:99:ED:25:54:55:58:EF:D1:33:51:15:68:F4:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.181.180.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:3c:36:c0:6a:97:0a:31:26:cc:26:3f:fb:01:70:cf:d0:1d:
         98:b9:d7:9b:1b:58:12:4b:c1:13:8c:b2:7e:e9:e5:e9:c0:d0:
         3a:f0:c8:09:92:cb:2c:3f:8d:dc:dc:3c:56:ea:19:29:74:c1:
         33:22:ab:87:cd:6f:0e:aa:7a:ed:1e:ec:9b:46:c0:03:9a:6d:
         cc:7e:84:69:66:e7:ea:d5:47:a1:38:33:ed:a0:4e:08:77:53:
         ff:30:3f:4f:0e:e3:55:96:6e:62:0b:84:e2:a6:37:65:0a:61:
         7b:d8:8e:1e:fa:0a:2d:2f:52:9f:9c:f2:13:62:2a:98:76:b6:
         50:32:f5:83:81:13:48:27:d2:3d:c6:5c:be:b0:1b:0f:77:48:
         76:ca:50:7f:5b:67:f2:b9:0d:f1:76:70:cd:36:42:8e:bc:e6:
         02:23:9a:bf:7c:63:63:32:1e:a7:00:80:ef:a3:0e:53:ee:ff:
         73:1e:67:f5:9c:9c:b3:46:a6:26:6e:30:0b:59:5e:02:f9:0f:
         59:92:83:f1:ea:c9:e6:d0:09:ef:26:ac:9f:d0:62:ed:6f:de:
         3d:55:14:89:56:93:ba:fe:26:be:14:ef:df:4e:74:5a:fb:e2:
         78:70:a5:59:b1:11:a1:05:1b:02:4f:2d:53:48:e2:71:fb:0a:
         1f:6e:89:e7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWET0X+gyPGiMC59QbwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjBkNmZkNTAtYjU0My00ZTk3LWE3ZjMtMGQ2YTU5MDhj
YTM4MB4XDTI0MDIyMDEzNDkzN1oXDTI0MDUyMDEyNDkzN1owLzEtMCsGA1UEAxMk
Y2RjOTFmYWQtNjg1Mi00MGJjLTk1YWYtYjU1MTQ1Njk3YTM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpPUO34/D9K0pFshCHlH06lxoDZMjawhXmwQ
+JyFGR73RyFdusXXN3PspA0vvYgjPSJIbyBaBdavjEDzDgSNVb4bw6QM2CnGO4w0
qhObO2sR+tKsxozu0416VgZQLtYt5G1BDM3i/kI2T8OzQr2uYpbjNs4pMgztaDUE
g8sVkyMRCmJulHTqXoMAvGX79xcxT0pSXozyRZLH+P3N0fL3xeFkxFI5REavQ51H
E3mh2KCoCz+GEjhVL9peLzKoCCSktjKXmBX7ifp4HB5C7HOIGe6mHxrBq0jaJNk8
5FyKP2GiXewGNNP0sGuGCweOBC2ftqFLaV3K+olRFOQg+5/WZwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDbZqdgfBHYNSuWpSyr+FPHs9ZCjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iMGQ2
ZmQ1MC1iNTQzLTRlOTctYTdmMy0wZDZhNTkwOGNhMzgvMGI3MzgyMjAtODk1OC0z
OGJiLTg0YzYtMGZjYzYyMDA0MzAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYjBkNmZkNTAtYjU0My00ZTk3LWE3
ZjMtMGQ2YTU5MDhjYTM4L2IwZDZmZDUwLWI1NDMtNGU5Ny1hN2YzLTBkNmE1OTA4
Y2EzOC5jcmwwHwYDVR0jBBgwFoAUuC1zjktame0lVFVY79EzURVo9P8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9iMGQ2ZmQ1MC1iNTQzLTRlOTctYTdmMy0wZDZh
NTkwOGNhMzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQbW0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIY8NsBqlwoxJswmP/sBcM/QHZi515sbWBJLwROMsn7p5enA0DrwyAmS
yyw/jdzcPFbqGSl0wTMiq4fNbw6qeu0e7JtGwAOabcx+hGlm5+rVR6E4M+2gTgh3
U/8wP08O41WWbmILhOKmN2UKYXvYjh76Ci0vUp+c8hNiKph2tlAy9YOBE0gn0j3G
XL6wGw93SHbKUH9bZ/K5DfF2cM02Qo685gIjmr98Y2MyHqcAgO+jDlPu/3MeZ/Wc
nLNGpiZuMAtZXgL5D1mSg/HqyebQCe8mrJ/QYu1v3j1VFIlWk7r+Jr4U799OdFr7
4nhwpVmxEaEFGwJPLVNI4nH7Ch9uiec=
-----END CERTIFICATE-----