Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/fb49bf3f-ed84-328a-9a19-0bbfd8938819.roa
File:                     fb49bf3f-ed84-328a-9a19-0bbfd8938819.roa (raw, json)
Hash identifier:          OZnwbjJER+/R7XLxWszTg3+06vtL3SZ1j6edYdvq/DA=
Subject key identifier:   DF:FB:26:6B:EE:F1:FC:C9:AB:6F:56:55:84:EA:7C:9B:1C:9A:F6:24
Certificate issuer:       /CN=22f3c152-12b6-441e-b4d6-66feab870c4d
Certificate serial:       010D0C9F432858454DD8BB34505543F6BFFE7880
Authority key identifier: 91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/fb49bf3f-ed84-328a-9a19-0bbfd8938819.roa
Signing time:             Sat 23 Mar 2024 15:00:00 +0000
ROA not before:           Sat 23 Mar 2024 15:00:00 +0000
ROA not after:            Fri 21 Jun 2024 15:00:00 +0000
asID:                     834
IP address blocks:        45.62.169.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 23 Mar 2024 19:22:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:4d:d8:bb:34:50:55:43:f6:bf:fe:78:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22f3c152-12b6-441e-b4d6-66feab870c4d
        Validity
            Not Before: Mar 23 15:00:00 2024 GMT
            Not After : Jun 21 15:00:00 2024 GMT
        Subject: CN=8dc5265f-01e8-495a-b0d2-1c3ecf555ae0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e2:c9:8f:ca:6d:bd:d0:82:d8:34:79:d6:29:
                    a7:77:f4:61:88:67:0d:2c:06:30:1c:59:7f:0a:c4:
                    2a:25:f0:d9:99:47:34:eb:8a:91:92:b7:a5:a3:17:
                    a5:78:d8:eb:83:d8:fc:cd:fe:0c:c5:a1:ce:40:33:
                    62:05:d9:63:46:c3:54:d0:0a:5e:bc:23:44:9c:18:
                    1e:dc:cd:38:cd:75:8a:9a:f2:34:4c:d6:c3:9b:80:
                    75:28:a8:e0:c9:06:86:40:5f:1a:e1:73:0f:0a:45:
                    b7:2f:43:75:e7:3d:dd:e9:bd:e1:0f:5c:33:01:5f:
                    c5:ed:63:cc:e4:77:c1:1b:63:5e:79:e7:74:16:46:
                    24:81:71:7b:02:d7:1e:90:6c:ce:c3:98:df:d6:49:
                    fb:e3:92:ec:de:84:3d:de:0b:12:d4:55:b2:f2:f4:
                    08:33:38:77:fd:48:dc:b4:d8:00:24:8d:63:94:8a:
                    46:af:0b:f3:b9:14:ef:50:50:e4:92:e2:5c:b5:8b:
                    3d:69:57:1d:ae:58:8c:5c:35:3c:2a:09:d2:d2:4b:
                    94:f7:0d:25:1f:ae:3f:9d:26:6a:83:7b:a0:35:fb:
                    04:1a:d1:e1:2a:5b:70:4e:7c:4a:8b:68:6e:6d:cd:
                    d2:12:04:b7:1a:4c:de:3a:c3:26:fd:9d:31:c8:18:
                    63:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:FB:26:6B:EE:F1:FC:C9:AB:6F:56:55:84:EA:7C:9B:1C:9A:F6:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/fb49bf3f-ed84-328a-9a19-0bbfd8938819.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl

            X509v3 Authority Key Identifier:
                keyid:91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.62.169.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:4a:f5:93:ad:8d:24:69:17:f8:fc:27:8d:09:72:b9:a2:17:
         07:ed:c2:f2:48:9c:d4:39:87:9a:29:57:54:db:52:0d:85:df:
         17:72:51:e2:f0:64:d5:18:31:fc:03:d4:e4:48:13:a1:ad:2b:
         0e:a8:8a:83:24:3a:92:47:5b:44:8b:ad:8c:6c:67:56:4f:17:
         61:3b:34:cd:7d:ea:0b:6b:79:1c:07:c8:be:8d:54:d5:38:e9:
         e0:47:f4:c3:45:12:29:9b:62:dd:cb:4e:5a:56:f2:20:6d:9b:
         c7:3b:1f:8b:3b:82:c0:68:ac:b1:14:17:01:b7:ab:cc:3b:04:
         04:fe:6b:b5:3e:1d:d6:90:e5:1c:7a:30:f6:75:57:bf:6a:a1:
         32:75:c0:da:54:b9:67:4a:d3:6e:aa:bc:ae:eb:b2:b8:3f:c8:
         fd:54:67:45:a3:bb:85:b3:be:95:91:5d:ac:16:cf:8a:4c:77:
         eb:c1:4e:da:bf:22:6c:12:1e:73:98:46:3d:62:f5:65:d9:96:
         a4:46:9e:33:80:99:b5:e7:29:62:26:f7:66:5f:f2:a1:25:27:
         c9:38:71:d2:06:89:5e:23:31:4f:7a:9a:ad:01:60:22:68:c9:
         11:68:f5:9e:f2:c9:b7:c5:8a:9c:c7:18:28:24:13:07:4c:77:
         8a:2a:42:17
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVN2Ls0UFVD9r/+eIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjJmM2MxNTItMTJiNi00NDFlLWI0ZDYtNjZmZWFiODcw
YzRkMB4XDTI0MDMyMzE1MDAwMFoXDTI0MDYyMTE1MDAwMFowLzEtMCsGA1UEAxMk
OGRjNTI2NWYtMDFlOC00OTVhLWIwZDItMWMzZWNmNTU1YWUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApeLJj8ptvdCC2DR51imnd/RhiGcNLAYwHFl/
CsQqJfDZmUc064qRkreloxeleNjrg9j8zf4MxaHOQDNiBdljRsNU0ApevCNEnBge
3M04zXWKmvI0TNbDm4B1KKjgyQaGQF8a4XMPCkW3L0N15z3d6b3hD1wzAV/F7WPM
5HfBG2Neeed0FkYkgXF7AtcekGzOw5jf1kn745Ls3oQ93gsS1FWy8vQIMzh3/Ujc
tNgAJI1jlIpGrwvzuRTvUFDkkuJctYs9aVcdrliMXDU8KgnS0kuU9w0lH64/nSZq
g3ugNfsEGtHhKltwTnxKi2hubc3SEgS3GkzeOsMm/Z0xyBhjOQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN/7Jmvu8fzJq29WVYTqfJscmvYkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yMmYz
YzE1Mi0xMmI2LTQ0MWUtYjRkNi02NmZlYWI4NzBjNGQvZmI0OWJmM2YtZWQ4NC0z
MjhhLTlhMTktMGJiZmQ4OTM4ODE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjJmM2MxNTItMTJiNi00NDFlLWI0
ZDYtNjZmZWFiODcwYzRkLzIyZjNjMTUyLTEyYjYtNDQxZS1iNGQ2LTY2ZmVhYjg3
MGM0ZC5jcmwwHwYDVR0jBBgwFoAUkeRCH5hh7EAysvnCVlRvINOvvS8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8yMmYzYzE1Mi0xMmI2LTQ0MWUtYjRkNi02NmZl
YWI4NzBjNGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALT6pMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADBK9ZOtjSRpF/j8J40JcrmiFwftwvJInNQ5h5opV1TbUg2F3xdyUeLw
ZNUYMfwD1ORIE6GtKw6oioMkOpJHW0SLrYxsZ1ZPF2E7NM196gtreRwHyL6NVNU4
6eBH9MNFEimbYt3LTlpW8iBtm8c7H4s7gsBorLEUFwG3q8w7BAT+a7U+HdaQ5Rx6
MPZ1V79qoTJ1wNpUuWdK026qvK7rsrg/yP1UZ0Wju4WzvpWRXawWz4pMd+vBTtq/
ImwSHnOYRj1i9WXZlqRGnjOAmbXnKWIm92Zf8qElJ8k4cdIGiV4jMU96mq0BYCJo
yRFo9Z7yybfFipzHGCgkEwdMd4oqQhc=
-----END CERTIFICATE-----