Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6b435fd1-de86-44d5-ba01-b63f2e3f01fe/204ae053-1a8c-37aa-990f-a584bc2d036e.roa
File:                     204ae053-1a8c-37aa-990f-a584bc2d036e.roa (raw, json)
Hash identifier:          ZRCr4Phae4o96/VvTp8G8XCUw8YN8+onF7fvHb6MQGM=
Subject key identifier:   E9:EE:2F:F6:68:29:97:3F:81:5F:C8:16:EB:9B:24:CE:54:1B:6D:FF
Certificate issuer:       /CN=6b435fd1-de86-44d5-ba01-b63f2e3f01fe
Certificate serial:       010D0C9F4328583FD7F9CF8751DB7E1534DBC200
Authority key identifier: 75:4B:CB:FB:50:0E:47:EC:7D:4D:53:47:4C:31:9E:C9:44:26:05:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6b435fd1-de86-44d5-ba01-b63f2e3f01fe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6b435fd1-de86-44d5-ba01-b63f2e3f01fe/204ae053-1a8c-37aa-990f-a584bc2d036e.roa
Signing time:             Wed 26 Oct 2022 12:22:55 +0000
ROA not before:           Wed 26 Oct 2022 12:22:55 +0000
ROA not after:            Tue 28 Jan 2025 05:00:00 +0000
asID:                     400377
IP address blocks:        216.255.180.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 09 Mar 2023 00:24:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:d7:f9:cf:87:51:db:7e:15:34:db:c2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b435fd1-de86-44d5-ba01-b63f2e3f01fe
        Validity
            Not Before: Oct 26 12:22:55 2022 GMT
            Not After : Jan 28 05:00:00 2025 GMT
        Subject: CN=10753b7e-fac4-4af1-9f1f-75db54a6dbc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:89:1d:c3:36:14:96:3b:54:3d:2a:06:19:a7:
                    6c:04:f6:81:3e:04:97:3e:89:59:92:cf:41:38:55:
                    b8:15:78:6f:b1:6f:88:53:57:85:e3:e8:1b:5e:19:
                    3c:62:5a:98:a1:2a:90:46:67:d0:bf:ba:aa:69:10:
                    ce:d3:61:93:aa:47:de:92:5a:e7:92:46:f5:d9:b3:
                    2e:c8:02:b2:ee:78:a5:9f:be:f0:9e:8f:81:20:b9:
                    49:a1:3a:7a:bd:25:e3:38:ad:0e:bf:9d:6b:cb:c3:
                    10:5f:cb:80:d8:8b:b1:5c:d9:09:93:98:bd:d9:9d:
                    69:88:ae:af:fe:b1:1e:d2:1d:ea:3d:d0:a7:85:5c:
                    cc:44:32:d9:fd:4b:94:58:8f:d9:fc:dc:35:65:15:
                    11:e4:70:14:dc:30:3e:96:b9:b5:ba:cb:f3:95:10:
                    63:11:ef:3d:2e:5a:70:0c:99:28:bd:f5:a1:ad:f9:
                    2a:61:ac:10:02:5f:75:a4:40:2b:d5:18:6d:2a:42:
                    5c:a7:6e:21:7b:8e:d1:11:be:50:73:3d:f1:13:b6:
                    ce:b0:d6:f2:b4:b1:a9:19:73:11:9e:bc:35:a7:3f:
                    60:a6:a9:d7:e9:64:3f:b3:7b:a8:c4:99:8a:b2:fb:
                    55:55:82:93:8a:75:7b:0f:aa:5b:81:49:a5:d8:45:
                    73:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:EE:2F:F6:68:29:97:3F:81:5F:C8:16:EB:9B:24:CE:54:1B:6D:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6b435fd1-de86-44d5-ba01-b63f2e3f01fe/204ae053-1a8c-37aa-990f-a584bc2d036e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6b435fd1-de86-44d5-ba01-b63f2e3f01fe/6b435fd1-de86-44d5-ba01-b63f2e3f01fe.crl

            X509v3 Authority Key Identifier:
                keyid:75:4B:CB:FB:50:0E:47:EC:7D:4D:53:47:4C:31:9E:C9:44:26:05:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6b435fd1-de86-44d5-ba01-b63f2e3f01fe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.255.180.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:57:ee:1e:e9:b6:85:1b:da:f5:c9:e7:7f:a0:cf:25:88:a8:
         91:0f:d1:c0:a6:a3:6c:6d:0d:71:29:27:42:b3:4c:02:c0:e2:
         54:ad:f7:4b:6f:d8:67:b1:79:e2:b7:e0:5d:2d:06:24:6a:43:
         e5:de:72:04:55:62:45:7a:29:3e:ed:9c:f8:83:ea:f7:8b:d4:
         81:59:24:73:ad:ba:b6:76:b3:88:95:a8:b6:53:9c:e5:7e:93:
         6c:1d:97:96:ea:95:50:a1:e8:fd:58:15:66:12:9d:39:02:0f:
         18:2a:c4:0d:d1:85:16:8b:95:36:db:cc:2f:b8:1b:a9:3b:c3:
         88:4d:19:3b:78:e1:bd:9d:22:74:3b:e3:3d:03:fe:a8:23:64:
         ba:7a:48:c2:08:92:09:2b:4a:1f:15:d1:8a:e4:df:51:e0:8a:
         1f:f8:22:c6:21:40:b3:6e:c2:5b:e1:d5:8a:7a:7e:14:ef:27:
         6a:2e:03:d0:9b:49:d3:3c:c1:fa:78:1f:9b:d3:d9:4c:b3:a0:
         ba:d6:cc:41:87:70:dc:c3:3c:bf:fe:be:6a:3e:73:83:43:77:
         ce:05:cd:08:53:6a:fa:89:6b:f8:17:05:b3:75:ce:b4:47:c1:
         ab:f6:52:5a:b1:97:74:00:c0:76:fa:ad:56:62:b0:ba:a3:4c:
         84:55:f3:cd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD/X+c+HUdt+FTTbwgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmI0MzVmZDEtZGU4Ni00NGQ1LWJhMDEtYjYzZjJlM2Yw
MWZlMB4XDTIyMTAyNjEyMjI1NVoXDTI1MDEyODA1MDAwMFowLzEtMCsGA1UEAxMk
MTA3NTNiN2UtZmFjNC00YWYxLTlmMWYtNzVkYjU0YTZkYmM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApokdwzYUljtUPSoGGadsBPaBPgSXPolZks9B
OFW4FXhvsW+IU1eF4+gbXhk8YlqYoSqQRmfQv7qqaRDO02GTqkfeklrnkkb12bMu
yAKy7niln77wno+BILlJoTp6vSXjOK0Ov51ry8MQX8uA2IuxXNkJk5i92Z1piK6v
/rEe0h3qPdCnhVzMRDLZ/UuUWI/Z/Nw1ZRUR5HAU3DA+lrm1usvzlRBjEe89Llpw
DJkovfWhrfkqYawQAl91pEAr1RhtKkJcp24he47REb5Qcz3xE7bOsNbytLGpGXMR
nrw1pz9gpqnX6WQ/s3uoxJmKsvtVVYKTinV7D6pbgUml2EVzdwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOnuL/ZoKZc/gV/IFuubJM5UG23/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82YjQz
NWZkMS1kZTg2LTQ0ZDUtYmEwMS1iNjNmMmUzZjAxZmUvMjA0YWUwNTMtMWE4Yy0z
N2FhLTk5MGYtYTU4NGJjMmQwMzZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNmI0MzVmZDEtZGU4Ni00NGQ1LWJh
MDEtYjYzZjJlM2YwMWZlLzZiNDM1ZmQxLWRlODYtNDRkNS1iYTAxLWI2M2YyZTNm
MDFmZS5jcmwwHwYDVR0jBBgwFoAUdUvL+1AOR+x9TVNHTDGeyUQmBQkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy82YjQzNWZkMS1kZTg2LTQ0ZDUtYmEwMS1iNjNm
MmUzZjAxZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2P+0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAL5X7h7ptoUb2vXJ53+gzyWIqJEP0cCmo2xtDXEpJ0KzTALA4lSt90tv
2GexeeK34F0tBiRqQ+XecgRVYkV6KT7tnPiD6veL1IFZJHOturZ2s4iVqLZTnOV+
k2wdl5bqlVCh6P1YFWYSnTkCDxgqxA3RhRaLlTbbzC+4G6k7w4hNGTt44b2dInQ7
4z0D/qgjZLp6SMIIkgkrSh8V0Yrk31Hgih/4IsYhQLNuwlvh1Yp6fhTvJ2ouA9Cb
SdM8wfp4H5vT2UyzoLrWzEGHcNzDPL/+vmo+c4NDd84FzQhTavqJa/gXBbN1zrRH
wav2Ulqxl3QAwHb6rVZisLqjTIRV880=
-----END CERTIFICATE-----