Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9b738056-d47b-34db-938d-aaa82d4458e7.roa
File:                     9b738056-d47b-34db-938d-aaa82d4458e7.roa (raw, json)
Hash identifier:          coBPrZtopwcLY+IPqGmJ+W7blMG5m+ODF6XVHiPkIwY=
Subject key identifier:   F1:2B:21:95:5A:60:49:E0:EE:82:2C:40:A2:EC:AC:85:34:FB:30:6E
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328583F3EEB46873151B0036C8109D0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9b738056-d47b-34db-938d-aaa82d4458e7.roa
Signing time:             Tue 13 Sep 2022 12:00:00 +0000
ROA not before:           Tue 13 Sep 2022 12:00:00 +0000
ROA not after:            Mon 16 Dec 2024 05:00:00 +0000
asID:                     15169
IP address blocks:        142.250.79.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 21 Mar 2024 23:22:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:3e:eb:46:87:31:51:b0:03:6c:81:09:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Sep 13 12:00:00 2022 GMT
            Not After : Dec 16 05:00:00 2024 GMT
        Subject: CN=270edc81-fe48-4187-b92d-d33d11522863
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:43:bf:c7:aa:9c:dc:f2:10:a1:3d:ab:60:a1:
                    6d:ef:66:1b:df:7d:20:4b:18:5b:1d:06:29:e0:bc:
                    77:7b:7d:77:25:3e:95:78:9b:79:18:d0:a8:23:24:
                    e9:fc:6c:61:fd:fe:e5:a5:e2:5a:6b:07:89:83:19:
                    39:dc:3d:83:ef:22:9c:53:32:c0:5b:b8:a0:5d:e1:
                    5e:69:98:5b:9e:c7:06:ef:f6:8e:31:e3:a0:db:7a:
                    53:56:41:1c:ba:d1:86:b9:be:d1:a2:d2:05:7a:bb:
                    1f:29:73:17:2c:40:2a:68:ad:e3:5b:bb:d4:80:21:
                    9c:3e:e8:b7:b7:91:c0:f2:00:14:4a:b7:e1:23:a4:
                    0f:a9:7c:48:03:1d:06:87:26:b7:3f:7e:7e:5e:92:
                    a8:90:d7:c9:e9:c4:d6:68:1f:72:5d:75:6d:7c:91:
                    c4:12:1c:cc:97:08:1a:e4:06:65:9a:b3:2f:16:4b:
                    f5:26:34:33:59:b2:ab:7b:c5:df:58:f2:12:4c:50:
                    f1:c2:36:89:29:56:00:41:ea:20:de:c3:b4:db:8f:
                    ba:e6:c4:05:23:9f:21:d2:75:1a:54:eb:10:80:f4:
                    96:91:69:09:41:16:3f:0e:17:9a:1c:2c:18:d4:e1:
                    77:57:03:7c:aa:30:bb:d1:b1:e4:17:3c:d3:a1:d2:
                    8e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:2B:21:95:5A:60:49:E0:EE:82:2C:40:A2:EC:AC:85:34:FB:30:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9b738056-d47b-34db-938d-aaa82d4458e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.250.79.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:e0:29:13:56:cc:8f:b5:98:85:88:e1:16:eb:1e:4e:e2:ed:
         24:fc:54:26:b4:46:44:bc:9e:83:69:e1:65:52:bf:6d:f7:ca:
         22:95:8e:b2:d5:5d:05:9d:09:92:07:95:ea:f2:d2:32:15:3d:
         7b:2c:e1:df:a6:5e:9c:75:ce:00:ef:75:85:7f:a6:7e:88:b1:
         ce:d8:56:d2:c8:00:6e:2a:f1:17:98:9d:1a:e6:fa:fe:6e:3e:
         db:e3:26:55:8f:09:33:8e:db:56:9e:9b:f4:45:0c:a7:c3:e6:
         c4:0a:0e:d6:81:14:06:c2:0e:4a:72:8a:d9:23:b9:fb:3b:63:
         bd:90:49:61:9d:9e:03:f7:0b:26:3c:a4:26:db:2c:bd:f5:0b:
         8c:e6:a2:ee:46:e7:85:10:4a:27:56:4a:2c:a3:f9:9a:2b:3d:
         39:83:30:92:05:16:82:67:4d:39:3a:e6:11:2f:21:53:ae:ec:
         3c:86:63:f4:f3:95:01:64:82:39:0e:db:d9:c1:0d:59:88:cc:
         7d:94:d0:07:48:53:eb:ff:ff:3f:0f:dc:7c:7a:99:e0:72:ef:
         25:cd:b3:75:8e:f3:1c:7e:a2:ae:c9:74:e2:63:b6:de:e0:6a:
         99:a7:d8:df:e3:ea:79:47:eb:1a:21:9a:a4:c9:a7:ca:dd:89:
         0f:89:90:f9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD8+60aHMVGwA2yBCdAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTIyMDkxMzEyMDAwMFoXDTI0MTIxNjA1MDAwMFowLzEtMCsGA1UEAxMk
MjcwZWRjODEtZmU0OC00MTg3LWI5MmQtZDMzZDExNTIyODYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiUO/x6qc3PIQoT2rYKFt72Yb330gSxhbHQYp
4Lx3e313JT6VeJt5GNCoIyTp/Gxh/f7lpeJaaweJgxk53D2D7yKcUzLAW7igXeFe
aZhbnscG7/aOMeOg23pTVkEcutGGub7RotIFersfKXMXLEAqaK3jW7vUgCGcPui3
t5HA8gAUSrfhI6QPqXxIAx0Ghya3P35+XpKokNfJ6cTWaB9yXXVtfJHEEhzMlwga
5AZlmrMvFkv1JjQzWbKre8XfWPISTFDxwjaJKVYAQeog3sO024+65sQFI58h0nUa
VOsQgPSWkWkJQRY/DheaHCwY1OF3VwN8qjC70bHkFzzTodKORQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPErIZVaYEng7oIsQKLsrIU0+zBuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOWI3MzgwNTYtZDQ3Yi0z
NGRiLTkzOGQtYWFhODJkNDQ1OGU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvpPMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJjgKRNWzI+1mIWI4RbrHk7i7ST8VCa0RkS8noNp4WVSv233yiKVjrLV
XQWdCZIHlery0jIVPXss4d+mXpx1zgDvdYV/pn6Isc7YVtLIAG4q8ReYnRrm+v5u
PtvjJlWPCTOO21aem/RFDKfD5sQKDtaBFAbCDkpyitkjufs7Y72QSWGdngP3CyY8
pCbbLL31C4zmou5G54UQSidWSiyj+ZorPTmDMJIFFoJnTTk65hEvIVOu7DyGY/Tz
lQFkgjkO29nBDVmIzH2U0AdIU+v//z8P3Hx6meBy7yXNs3WO8xx+oq7JdOJjtt7g
apmn2N/j6nlH6xohmqTJp8rdiQ+JkPk=
-----END CERTIFICATE-----