Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2d6a17c2-b155-4b32-933b-3f7043e2cecc/d968b899-405c-3df2-8006-7acdd526a513.roa
File:                     d968b899-405c-3df2-8006-7acdd526a513.roa (raw, json)
Hash identifier:          FJ9LVS4qkFyWiEpi+vchj+VzkPxI5ID+OhbU1rxxXaQ=
Subject key identifier:   0C:69:80:F0:D2:C8:69:56:04:F4:84:28:14:5B:28:2F:67:7F:D9:FB
Certificate issuer:       /CN=2d6a17c2-b155-4b32-933b-3f7043e2cecc
Certificate serial:       010D0C9F43285846C24FBEF8E73CB0B419E33020
Authority key identifier: 0B:75:35:AC:19:65:B0:66:0B:65:F7:2F:F2:E3:7F:C4:7A:A3:03:56
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2d6a17c2-b155-4b32-933b-3f7043e2cecc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2d6a17c2-b155-4b32-933b-3f7043e2cecc/d968b899-405c-3df2-8006-7acdd526a513.roa
Signing time:             Sun 04 Aug 2024 01:00:28 +0000
ROA not before:           Sun 04 Aug 2024 01:00:28 +0000
ROA not after:            Sat 02 Nov 2024 01:00:28 +0000
asID:                     3320
IP address blocks:        69.42.209.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 12 Aug 2024 17:17:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:c2:4f:be:f8:e7:3c:b0:b4:19:e3:30:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d6a17c2-b155-4b32-933b-3f7043e2cecc
        Validity
            Not Before: Aug  4 01:00:28 2024 GMT
            Not After : Nov  2 01:00:28 2024 GMT
        Subject: CN=d3cccbb2-4307-45f6-b2c5-9c81aadceefa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:5a:f5:1b:b1:85:2a:b8:7d:75:41:28:13:99:
                    5b:28:89:c9:35:88:d9:d5:8b:f9:f2:86:c4:62:0e:
                    41:69:57:69:53:67:0d:07:6b:6c:2a:2b:f1:60:ff:
                    d0:90:94:d1:b1:14:fe:52:65:84:7e:66:fd:16:22:
                    6b:97:27:3e:1a:bd:c9:00:1e:38:21:2d:ec:7a:3c:
                    c0:ec:79:53:07:3c:80:3d:05:9f:af:dd:df:d4:05:
                    ca:32:9f:8c:27:7e:1b:a2:7c:75:44:9f:fb:9f:97:
                    49:f8:03:54:1d:1f:f3:da:87:0a:73:aa:9f:81:5f:
                    33:30:cf:47:00:04:a2:3f:9a:1b:74:47:8f:a4:c7:
                    28:a0:f7:31:93:ea:ed:94:43:4a:c7:60:2b:b5:59:
                    a0:aa:98:4e:db:e4:53:c0:a9:12:c8:c1:09:ed:dd:
                    f6:c2:a0:de:df:12:fd:88:5d:f0:4b:02:0c:09:8f:
                    c4:e0:ed:e6:dc:97:05:99:e6:79:43:36:6b:91:1e:
                    f6:de:a2:77:92:2c:56:07:1d:f9:76:cc:40:8c:8a:
                    e2:62:ac:f7:0d:5b:9a:de:c9:f5:1f:ba:00:47:86:
                    d8:2e:a1:84:e2:ea:3b:eb:1e:b2:5f:93:23:a6:69:
                    5a:1d:14:2b:68:e2:ae:07:68:60:85:ea:7e:40:08:
                    9b:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:69:80:F0:D2:C8:69:56:04:F4:84:28:14:5B:28:2F:67:7F:D9:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2d6a17c2-b155-4b32-933b-3f7043e2cecc/d968b899-405c-3df2-8006-7acdd526a513.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2d6a17c2-b155-4b32-933b-3f7043e2cecc/2d6a17c2-b155-4b32-933b-3f7043e2cecc.crl

            X509v3 Authority Key Identifier:
                keyid:0B:75:35:AC:19:65:B0:66:0B:65:F7:2F:F2:E3:7F:C4:7A:A3:03:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2d6a17c2-b155-4b32-933b-3f7043e2cecc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.42.209.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:26:6b:24:08:a6:ad:94:35:9d:46:6e:04:e4:2e:0d:3b:51:
         fc:fb:53:01:ae:fc:81:23:32:d1:82:4f:88:6c:0e:44:bf:a5:
         56:40:37:98:a4:a3:9d:fc:2c:23:92:88:dc:9e:04:22:22:0c:
         a8:0e:44:a5:5d:55:ff:c0:70:c6:c3:a6:d0:43:f9:f9:61:cc:
         9f:bf:7b:21:07:07:47:53:5f:a1:ce:ea:7b:2a:e8:7a:cb:dd:
         2c:98:f3:dc:02:33:4d:75:7a:b7:67:2a:4d:1b:e9:5c:49:3f:
         d0:55:4e:5f:ce:45:b9:2e:f2:96:e8:1b:de:0f:20:a7:1e:4d:
         77:b3:8a:de:f7:7e:ac:a1:12:3c:a1:3c:26:63:a2:5c:13:68:
         cf:56:95:7a:ca:ab:60:ab:35:e9:9e:c4:2b:3c:5f:16:e8:ff:
         a1:17:70:a8:f1:32:0e:7f:75:15:21:76:1a:99:aa:59:80:eb:
         d5:cc:7d:ef:ac:2e:e0:59:17:ad:95:c6:18:25:4f:e9:75:a5:
         3e:a4:b8:c7:3e:b3:c9:a3:94:d3:57:11:6a:2e:d9:66:35:8a:
         bb:3e:95:d1:3f:da:cf:b6:b4:cc:cd:83:c9:ce:76:30:43:f4:
         1a:7c:e5:9d:6c:21:54:47:30:a4:1e:a3:b0:2a:d9:db:c3:91:
         5a:00:67:6d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEbCT7745zywtBnjMCAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmQ2YTE3YzItYjE1NS00YjMyLTkzM2ItM2Y3MDQzZTJj
ZWNjMB4XDTI0MDgwNDAxMDAyOFoXDTI0MTEwMjAxMDAyOFowLzEtMCsGA1UEAxMk
ZDNjY2NiYjItNDMwNy00NWY2LWIyYzUtOWM4MWFhZGNlZWZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVr1G7GFKrh9dUEoE5lbKInJNYjZ1Yv58obE
Yg5BaVdpU2cNB2tsKivxYP/QkJTRsRT+UmWEfmb9FiJrlyc+Gr3JAB44IS3sejzA
7HlTBzyAPQWfr93f1AXKMp+MJ34bonx1RJ/7n5dJ+ANUHR/z2ocKc6qfgV8zMM9H
AASiP5obdEePpMcooPcxk+rtlENKx2ArtVmgqphO2+RTwKkSyMEJ7d32wqDe3xL9
iF3wSwIMCY/E4O3m3JcFmeZ5QzZrkR723qJ3kixWBx35dsxAjIriYqz3DVua3sn1
H7oAR4bYLqGE4uo76x6yX5MjpmlaHRQraOKuB2hghep+QAibqQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAxpgPDSyGlWBPSEKBRbKC9nf9n7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yZDZh
MTdjMi1iMTU1LTRiMzItOTMzYi0zZjcwNDNlMmNlY2MvZDk2OGI4OTktNDA1Yy0z
ZGYyLTgwMDYtN2FjZGQ1MjZhNTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMmQ2YTE3YzItYjE1NS00YjMyLTkz
M2ItM2Y3MDQzZTJjZWNjLzJkNmExN2MyLWIxNTUtNGIzMi05MzNiLTNmNzA0M2Uy
Y2VjYy5jcmwwHwYDVR0jBBgwFoAUC3U1rBllsGYLZfcv8uN/xHqjA1YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8yZDZhMTdjMi1iMTU1LTRiMzItOTMzYi0zZjcw
NDNlMmNlY2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARSrRMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHomayQIpq2UNZ1GbgTkLg07Ufz7UwGu/IEjMtGCT4hsDkS/pVZAN5ik
o538LCOSiNyeBCIiDKgORKVdVf/AcMbDptBD+flhzJ+/eyEHB0dTX6HO6nsq6HrL
3SyY89wCM011erdnKk0b6VxJP9BVTl/ORbku8pboG94PIKceTXezit73fqyhEjyh
PCZjolwTaM9WlXrKq2CrNemexCs8Xxbo/6EXcKjxMg5/dRUhdhqZqlmA69XMfe+s
LuBZF62VxhglT+l1pT6kuMc+s8mjlNNXEWou2WY1irs+ldE/2s+2tMzNg8nOdjBD
9Bp85Z1sIVRHMKQeo7Aq2dvDkVoAZ20=
-----END CERTIFICATE-----