Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f1099499-e865-4a58-89d5-0df023af2376/8aad13bb-f95f-34f1-8f26-1cf73cbf1370.roa
File:                     8aad13bb-f95f-34f1-8f26-1cf73cbf1370.roa (raw, json)
Hash identifier:          /eu/4x7xWM8U5r7uaZVFM4tcQfb/KfiI3JAjj8tvEPA=
Subject key identifier:   4A:5D:AE:2E:7F:4A:60:97:13:69:E6:C0:5E:6D:AE:66:20:2B:4C:27
Certificate issuer:       /CN=f1099499-e865-4a58-89d5-0df023af2376
Certificate serial:       010D0C9F432858413B135A319E7286B9FEBECF00
Authority key identifier: C4:83:95:BC:07:81:7D:1D:AE:34:86:BC:A2:03:C2:30:72:E3:46:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f1099499-e865-4a58-89d5-0df023af2376.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f1099499-e865-4a58-89d5-0df023af2376/8aad13bb-f95f-34f1-8f26-1cf73cbf1370.roa
Signing time:             Wed 15 Mar 2023 16:52:14 +0000
ROA not before:           Wed 15 Mar 2023 16:52:14 +0000
ROA not after:            Tue 17 Jun 2025 04:00:00 +0000
asID:                     32030
IP address blocks:        45.45.168.0/24 maxlen: 24
                          45.45.169.0/24 maxlen: 24
                          192.40.141.0/24 maxlen: 24
                          2620:128:7000::/48 maxlen: 48
                          2620:128:7003::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:3b:13:5a:31:9e:72:86:b9:fe:be:cf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1099499-e865-4a58-89d5-0df023af2376
        Validity
            Not Before: Mar 15 16:52:14 2023 GMT
            Not After : Jun 17 04:00:00 2025 GMT
        Subject: CN=c3882c79-1be9-424a-a169-121c30a36147
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:8b:57:cd:f5:b7:c8:28:e0:c0:43:bf:2d:8b:
                    15:2a:8b:58:1d:28:19:75:3d:9b:b8:30:fb:90:d4:
                    30:3e:af:88:a4:c8:60:c8:6a:f0:45:17:97:7d:8d:
                    50:30:58:ff:8f:55:ee:15:5c:93:57:ba:f9:a4:01:
                    ec:71:6f:4a:de:89:f5:80:ba:8b:a6:3c:af:b1:ae:
                    b4:3c:de:94:1a:db:52:7f:61:a6:85:d7:54:46:c5:
                    b9:5a:ec:c3:51:4b:49:ff:40:00:81:08:a5:dd:5a:
                    53:5e:de:4e:70:d3:a4:6d:b8:c0:51:cc:ad:d2:0e:
                    0f:53:cf:af:08:94:5d:b3:37:7b:20:b0:c1:86:8e:
                    66:af:a0:85:85:59:f2:ff:17:d3:c9:7a:76:af:a3:
                    42:78:ae:ee:6a:eb:7c:0b:f2:50:92:cd:3b:c3:32:
                    65:eb:cf:fc:cf:8a:cf:69:4e:c5:f8:27:43:ec:ed:
                    21:b4:57:8b:5a:40:0f:98:b1:9f:4b:da:3d:3e:47:
                    be:29:fd:2d:39:18:ef:14:03:b4:1f:72:d0:e5:fc:
                    9f:69:fc:88:23:57:cf:78:03:66:b4:d1:c6:6b:fc:
                    81:11:cd:0d:7b:aa:1c:8f:be:b3:f3:a6:99:4d:23:
                    5e:25:8c:ae:3d:d4:6a:c7:b1:96:6f:88:1f:8e:38:
                    e8:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:5D:AE:2E:7F:4A:60:97:13:69:E6:C0:5E:6D:AE:66:20:2B:4C:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f1099499-e865-4a58-89d5-0df023af2376/8aad13bb-f95f-34f1-8f26-1cf73cbf1370.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f1099499-e865-4a58-89d5-0df023af2376/f1099499-e865-4a58-89d5-0df023af2376.crl

            X509v3 Authority Key Identifier:
                keyid:C4:83:95:BC:07:81:7D:1D:AE:34:86:BC:A2:03:C2:30:72:E3:46:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f1099499-e865-4a58-89d5-0df023af2376.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.45.168.0/23
                  192.40.141.0/24
                IPv6:
                  2620:128:7000::/48
                  2620:128:7003::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:86:4e:34:92:97:52:93:15:ae:7e:d4:40:98:e2:c5:9e:ee:
         bf:f0:a1:11:ec:14:c5:fd:83:f8:a9:b1:7f:31:34:ff:59:30:
         85:c0:e2:e2:48:25:c2:94:7a:ed:64:e9:2f:dc:84:88:33:6c:
         03:e7:9a:46:4f:57:c0:d2:a1:20:74:c8:ee:20:41:40:37:13:
         3d:37:4e:39:4e:db:68:c8:90:d6:55:f0:91:e2:c6:6e:3c:71:
         d6:14:df:5e:41:6a:56:d8:58:0d:aa:02:1a:85:1b:52:42:42:
         51:d1:af:67:7d:ad:34:ce:5a:9d:34:db:34:f8:87:8f:36:0a:
         48:b2:84:73:5e:39:ae:bc:c9:57:c8:40:8a:c1:07:d7:09:66:
         00:11:26:0f:8f:4f:50:45:a2:3a:9f:29:2c:b4:7f:f3:1d:7c:
         72:18:57:e9:68:5c:bd:b5:b7:f6:d4:e8:1b:b3:c1:40:92:6a:
         7b:3a:b0:8b:b1:04:c3:4a:0c:7f:11:88:d6:45:9e:c4:ca:a0:
         4e:1c:22:10:7e:b8:be:9c:04:11:5f:60:67:65:b8:62:8f:82:
         ad:dd:90:c7:eb:92:e6:71:7a:53:6a:be:9e:7a:13:24:24:4f:
         26:41:cd:cb:d0:c3:73:43:91:9a:17:68:ae:ee:4e:e4:99:8d:
         73:7f:46:92
-----BEGIN CERTIFICATE-----
MIIGYzCCBUugAwIBAgIUAQ0Mn0MoWEE7E1oxnnKGuf6+zwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjEwOTk0OTktZTg2NS00YTU4LTg5ZDUtMGRmMDIzYWYy
Mzc2MB4XDTIzMDMxNTE2NTIxNFoXDTI1MDYxNzA0MDAwMFowLzEtMCsGA1UEAxMk
YzM4ODJjNzktMWJlOS00MjRhLWExNjktMTIxYzMwYTM2MTQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4tXzfW3yCjgwEO/LYsVKotYHSgZdT2buDD7
kNQwPq+IpMhgyGrwRReXfY1QMFj/j1XuFVyTV7r5pAHscW9K3on1gLqLpjyvsa60
PN6UGttSf2GmhddURsW5WuzDUUtJ/0AAgQil3VpTXt5OcNOkbbjAUcyt0g4PU8+v
CJRdszd7ILDBho5mr6CFhVny/xfTyXp2r6NCeK7uaut8C/JQks07wzJl68/8z4rP
aU7F+CdD7O0htFeLWkAPmLGfS9o9Pke+Kf0tORjvFAO0H3LQ5fyfafyII1fPeANm
tNHGa/yBEc0Ne6ocj76z86aZTSNeJYyuPdRqx7GWb4gfjjjovQIDAQABo4IDdTCC
A3EwHQYDVR0OBBYEFEpdri5/SmCXE2nmwF5trmYgK0wnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mMTA5
OTQ5OS1lODY1LTRhNTgtODlkNS0wZGYwMjNhZjIzNzYvOGFhZDEzYmItZjk1Zi0z
NGYxLThmMjYtMWNmNzNjYmYxMzcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjEwOTk0OTktZTg2NS00YTU4LTg5
ZDUtMGRmMDIzYWYyMzc2L2YxMDk5NDk5LWU4NjUtNGE1OC04OWQ1LTBkZjAyM2Fm
MjM3Ni5jcmwwHwYDVR0jBBgwFoAUxIOVvAeBfR2uNIa8ogPCMHLjRl4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9mMTA5OTQ5OS1lODY1LTRhNTgtODlkNS0wZGYw
MjNhZjIzNzYuY2VyMD8GCCsGAQUFBwEHAQH/BDAwLjASBAIAATAMAwQBLS2oAwQA
wCiNMBgEAgACMBIDBwAmIAEocAADBwAmIAEocAMwVAYDVR0gAQH/BEowSDBGBggr
BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv
dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAOIZONJKXUpMV
rn7UQJjixZ7uv/ChEewUxf2D+KmxfzE0/1kwhcDi4kglwpR67WTpL9yEiDNsA+ea
Rk9XwNKhIHTI7iBBQDcTPTdOOU7baMiQ1lXwkeLGbjxx1hTfXkFqVthYDaoCGoUb
UkJCUdGvZ32tNM5anTTbNPiHjzYKSLKEc145rrzJV8hAisEH1wlmABEmD49PUEWi
Op8pLLR/8x18chhX6WhcvbW39tToG7PBQJJqezqwi7EEw0oMfxGI1kWexMqgThwi
EH64vpwEEV9gZ2W4Yo+Crd2Qx+uS5nF6U2q+nnoTJCRPJkHNy9DDc0ORmhdoru5O
5JmNc39Gkg==
-----END CERTIFICATE-----