Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/044d8847-8a92-3c14-aaad-d4f1429e21db.roa
File:                     044d8847-8a92-3c14-aaad-d4f1429e21db.roa (raw, json)
Hash identifier:          B/CwHV7maYRPLXkdjIYXN4/CE70wT188M2pAdR2IE4o=
Subject key identifier:   71:52:82:40:9F:65:54:07:B0:97:B2:58:19:7C:2E:EE:4A:DC:A8:E8
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328583F8FE22A8CD18110C111F1F700
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/044d8847-8a92-3c14-aaad-d4f1429e21db.roa
Signing time:             Wed 12 Oct 2022 12:00:00 +0000
ROA not before:           Wed 12 Oct 2022 12:00:00 +0000
ROA not after:            Tue 14 Jan 2025 05:00:00 +0000
asID:                     15169
IP address blocks:        142.250.219.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:24:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:8f:e2:2a:8c:d1:81:10:c1:11:f1:f7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Oct 12 12:00:00 2022 GMT
            Not After : Jan 14 05:00:00 2025 GMT
        Subject: CN=4286724b-7e66-4e0c-9f06-1bcd67f739ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:37:9d:fc:95:d9:fe:22:52:30:4e:2c:72:9b:
                    74:dd:6c:1c:d2:d3:8e:98:f0:36:2f:69:0a:0d:3a:
                    91:b9:16:c7:31:6d:48:b1:67:c2:8f:84:ec:84:a3:
                    3e:45:a2:07:09:a6:93:f5:16:0d:de:bb:03:e0:9d:
                    d0:65:86:1e:64:f8:fc:97:5f:40:78:e4:87:58:11:
                    85:d5:0f:68:b8:36:96:13:a1:09:db:15:f3:0d:00:
                    68:b8:8d:9f:50:f3:81:62:58:e5:c9:c6:89:70:69:
                    80:5d:f7:33:87:65:26:8d:8c:b7:53:7b:80:2b:c9:
                    6d:54:c4:2a:0c:7f:43:97:00:34:64:2b:50:e5:e3:
                    38:45:ac:af:61:d2:4d:c4:de:16:b5:c6:e0:2f:5a:
                    a4:ac:f2:43:c1:dd:8b:46:d1:6c:51:38:f9:47:79:
                    71:aa:22:c8:53:49:61:b5:c0:a1:37:64:35:7f:eb:
                    3c:a6:f5:0b:d7:79:b9:d0:59:ec:4d:2d:df:86:5a:
                    04:3c:14:f9:e7:83:76:8b:d8:81:d9:31:a6:15:a9:
                    10:cd:43:7b:33:8d:b9:f4:fb:a7:ee:ca:b5:a1:71:
                    80:ca:9b:27:4d:e1:c2:e5:29:66:88:70:2a:11:d4:
                    bd:ca:a7:2f:2d:0c:a4:0b:a9:a0:d5:b7:0c:b9:36:
                    d7:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:52:82:40:9F:65:54:07:B0:97:B2:58:19:7C:2E:EE:4A:DC:A8:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/044d8847-8a92-3c14-aaad-d4f1429e21db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.250.219.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:59:7f:95:6e:fa:0a:ab:2b:cb:39:21:e2:a0:3d:39:73:ce:
         8b:50:f3:ea:7d:15:2e:1d:eb:12:7c:ec:37:58:b2:31:c0:0b:
         38:c3:78:f6:55:85:4c:b2:41:0d:01:e1:29:0e:c2:6a:bf:ca:
         e2:7a:a1:7a:e3:d7:96:cb:d1:66:24:69:f2:43:34:b7:71:b3:
         d0:d1:06:1d:69:e1:62:13:d8:a8:56:cf:0e:d6:2f:9d:c4:a3:
         41:af:f6:e8:79:a9:7f:cb:ad:8f:1c:93:dd:46:cd:3a:fa:91:
         4a:2d:b9:0f:14:0d:3e:74:19:c6:5b:77:28:72:52:29:14:4e:
         52:91:ae:63:3d:08:75:88:5c:93:86:1a:28:0b:e4:6f:ed:3c:
         00:e4:e6:72:17:76:68:a2:28:31:57:d0:82:79:03:b6:36:a5:
         ba:cb:75:cd:1f:29:d4:c2:55:da:0f:f2:7a:ff:55:e3:18:9b:
         e8:a2:88:2d:99:70:dc:38:9a:ee:6e:fd:26:05:02:41:b4:90:
         a5:87:cb:eb:66:70:59:75:ff:18:c1:1d:8f:da:88:09:07:36:
         38:e9:50:c0:9d:3e:6d:78:e4:a6:24:83:13:bb:ec:9a:76:ac:
         51:0e:28:07:31:db:8f:d0:35:fb:2e:e8:bd:6f:f9:25:dd:37:
         45:5a:8c:a1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD+P4iqM0YEQwRHx9wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTIyMTAxMjEyMDAwMFoXDTI1MDExNDA1MDAwMFowLzEtMCsGA1UEAxMk
NDI4NjcyNGItN2U2Ni00ZTBjLTlmMDYtMWJjZDY3ZjczOWNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDed/JXZ/iJSME4scpt03Wwc0tOOmPA2L2kK
DTqRuRbHMW1IsWfCj4TshKM+RaIHCaaT9RYN3rsD4J3QZYYeZPj8l19AeOSHWBGF
1Q9ouDaWE6EJ2xXzDQBouI2fUPOBYljlycaJcGmAXfczh2UmjYy3U3uAK8ltVMQq
DH9DlwA0ZCtQ5eM4RayvYdJNxN4WtcbgL1qkrPJDwd2LRtFsUTj5R3lxqiLIU0lh
tcChN2Q1f+s8pvUL13m50FnsTS3fhloEPBT554N2i9iB2TGmFakQzUN7M4259Pun
7sq1oXGAypsnTeHC5SlmiHAqEdS9yqcvLQykC6mg1bcMuTbX1QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHFSgkCfZVQHsJeyWBl8Lu5K3KjoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMDQ0ZDg4NDctOGE5Mi0z
YzE0LWFhYWQtZDRmMTQyOWUyMWRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvrbMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABBZf5Vu+gqrK8s5IeKgPTlzzotQ8+p9FS4d6xJ87DdYsjHACzjDePZV
hUyyQQ0B4SkOwmq/yuJ6oXrj15bL0WYkafJDNLdxs9DRBh1p4WIT2KhWzw7WL53E
o0Gv9uh5qX/LrY8ck91GzTr6kUotuQ8UDT50GcZbdyhyUikUTlKRrmM9CHWIXJOG
GigL5G/tPADk5nIXdmiiKDFX0IJ5A7Y2pbrLdc0fKdTCVdoP8nr/VeMYm+iiiC2Z
cNw4mu5u/SYFAkG0kKWHy+tmcFl1/xjBHY/aiAkHNjjpUMCdPm145KYkgxO77Jp2
rFEOKAcx24/QNfsu6L1v+SXdN0VajKE=
-----END CERTIFICATE-----