Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6b435fd1-de86-44d5-ba01-b63f2e3f01fe/df8db7c3-00af-3879-905f-3760d54324ae.roa
File:                     df8db7c3-00af-3879-905f-3760d54324ae.roa (raw, json)
Hash identifier:          ZiYKZ/uTRs1kGAlBu8Jz4Hk4sykqa+DYiOxYYCUWvdA=
Subject key identifier:   3F:91:CD:78:0B:A5:F3:3A:6F:EF:DF:F7:46:A0:67:09:DB:4C:0A:7F
Certificate issuer:       /CN=6b435fd1-de86-44d5-ba01-b63f2e3f01fe
Certificate serial:       010D0C9F4328583FDCAC4DCD9843A96926AAA680
Authority key identifier: 75:4B:CB:FB:50:0E:47:EC:7D:4D:53:47:4C:31:9E:C9:44:26:05:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6b435fd1-de86-44d5-ba01-b63f2e3f01fe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6b435fd1-de86-44d5-ba01-b63f2e3f01fe/df8db7c3-00af-3879-905f-3760d54324ae.roa
Signing time:             Wed 26 Oct 2022 12:22:55 +0000
ROA not before:           Wed 26 Oct 2022 12:22:55 +0000
ROA not after:            Tue 28 Jan 2025 05:00:00 +0000
asID:                     207459
IP address blocks:        216.255.183.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:dc:ac:4d:cd:98:43:a9:69:26:aa:a6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b435fd1-de86-44d5-ba01-b63f2e3f01fe
        Validity
            Not Before: Oct 26 12:22:55 2022 GMT
            Not After : Jan 28 05:00:00 2025 GMT
        Subject: CN=a258db15-d423-4bad-9bda-e78e941c61b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:4b:f5:fe:20:48:dd:1c:36:cb:ad:42:ee:c3:
                    c8:8c:b1:9e:34:c1:73:d1:89:e1:b5:06:24:0f:f7:
                    bf:0a:d0:36:1b:9e:b6:91:90:ae:67:dc:4b:83:0b:
                    3e:80:66:fb:c7:d3:82:07:66:7e:f1:32:59:2d:c4:
                    67:49:0d:a6:3b:14:44:7a:00:d6:7a:b9:75:7a:23:
                    18:08:b3:d4:ad:43:a0:f9:e9:9a:5c:4b:3e:42:01:
                    09:98:9d:ee:b4:7a:02:17:09:d0:af:73:53:a8:2b:
                    e0:8d:42:2e:21:ec:42:42:53:7c:bf:9c:44:06:ac:
                    8c:5a:49:b1:1a:58:5a:fd:70:af:8b:43:bf:f5:96:
                    ff:2f:f0:a2:d6:f6:9f:ed:44:90:b8:92:e0:5d:8a:
                    87:9e:cf:82:fb:1e:aa:dc:a3:d0:16:41:3e:e2:02:
                    a8:32:b1:a2:fb:93:0a:8b:b2:12:3f:21:35:30:d8:
                    31:fc:24:d8:11:c9:e5:ef:c3:cc:e5:10:cd:8b:17:
                    f4:da:bc:f7:54:a6:fa:27:6e:ec:0c:00:80:02:71:
                    47:11:ed:01:d6:40:8f:31:84:5d:af:e3:29:11:b5:
                    99:d2:8b:81:9a:09:0e:b2:14:e2:2a:53:e1:fe:40:
                    44:b9:85:6c:8f:fa:b1:a5:1f:44:99:81:eb:a5:0d:
                    f0:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:91:CD:78:0B:A5:F3:3A:6F:EF:DF:F7:46:A0:67:09:DB:4C:0A:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6b435fd1-de86-44d5-ba01-b63f2e3f01fe/df8db7c3-00af-3879-905f-3760d54324ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6b435fd1-de86-44d5-ba01-b63f2e3f01fe/6b435fd1-de86-44d5-ba01-b63f2e3f01fe.crl

            X509v3 Authority Key Identifier:
                keyid:75:4B:CB:FB:50:0E:47:EC:7D:4D:53:47:4C:31:9E:C9:44:26:05:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6b435fd1-de86-44d5-ba01-b63f2e3f01fe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.255.183.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:f7:29:b8:39:ba:b1:cb:9a:8a:aa:e3:63:6f:87:6d:12:fa:
         21:07:44:3a:55:a4:b2:c9:44:b4:71:10:95:66:12:04:6c:a2:
         83:c2:30:08:dc:ac:d6:81:fe:f8:aa:aa:39:2b:7f:29:f9:24:
         0f:5c:3e:6f:41:cc:8e:61:3d:59:8b:a0:d2:90:c1:cd:24:96:
         bd:f3:38:f1:cf:a9:a3:01:19:be:3f:4e:3b:25:14:6e:d0:03:
         dc:6a:60:bb:98:7d:46:e6:94:8d:ae:45:df:f5:fd:ad:29:5e:
         2d:94:64:d8:55:0e:7d:dd:f2:91:82:59:1d:9e:2b:9d:83:ef:
         79:90:92:e4:cf:ff:23:23:bf:2b:97:db:40:f2:5e:3f:f0:b7:
         28:77:4a:3f:08:1b:fb:dd:b0:2e:98:0d:f7:09:28:ee:59:aa:
         6e:ba:03:b3:4b:f6:3a:b0:5e:9d:ce:a5:6e:5d:52:d9:01:c9:
         9a:83:d4:64:2c:73:fa:78:cb:f3:2e:a5:cf:c8:d3:18:94:e1:
         4a:3d:05:47:b8:5f:b8:1b:7d:0c:2d:b6:75:e0:a1:51:58:63:
         c1:7e:b5:9e:1a:c3:4f:ce:2b:6b:9b:91:50:00:1f:04:0b:04:
         24:93:96:7a:ae:ab:75:bf:d2:f5:64:0d:40:6d:2b:60:98:a0:
         96:76:bb:72
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD/crE3NmEOpaSaqpoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmI0MzVmZDEtZGU4Ni00NGQ1LWJhMDEtYjYzZjJlM2Yw
MWZlMB4XDTIyMTAyNjEyMjI1NVoXDTI1MDEyODA1MDAwMFowLzEtMCsGA1UEAxMk
YTI1OGRiMTUtZDQyMy00YmFkLTliZGEtZTc4ZTk0MWM2MWIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0v1/iBI3Rw2y61C7sPIjLGeNMFz0YnhtQYk
D/e/CtA2G562kZCuZ9xLgws+gGb7x9OCB2Z+8TJZLcRnSQ2mOxREegDWerl1eiMY
CLPUrUOg+emaXEs+QgEJmJ3utHoCFwnQr3NTqCvgjUIuIexCQlN8v5xEBqyMWkmx
Glha/XCvi0O/9Zb/L/Ci1vaf7USQuJLgXYqHns+C+x6q3KPQFkE+4gKoMrGi+5MK
i7ISPyE1MNgx/CTYEcnl78PM5RDNixf02rz3VKb6J27sDACAAnFHEe0B1kCPMYRd
r+MpEbWZ0ouBmgkOshTiKlPh/kBEuYVsj/qxpR9EmYHrpQ3w0QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD+RzXgLpfM6b+/f90agZwnbTAp/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82YjQz
NWZkMS1kZTg2LTQ0ZDUtYmEwMS1iNjNmMmUzZjAxZmUvZGY4ZGI3YzMtMDBhZi0z
ODc5LTkwNWYtMzc2MGQ1NDMyNGFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNmI0MzVmZDEtZGU4Ni00NGQ1LWJh
MDEtYjYzZjJlM2YwMWZlLzZiNDM1ZmQxLWRlODYtNDRkNS1iYTAxLWI2M2YyZTNm
MDFmZS5jcmwwHwYDVR0jBBgwFoAUdUvL+1AOR+x9TVNHTDGeyUQmBQkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy82YjQzNWZkMS1kZTg2LTQ0ZDUtYmEwMS1iNjNm
MmUzZjAxZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2P+3MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAET3Kbg5urHLmoqq42Nvh20S+iEHRDpVpLLJRLRxEJVmEgRsooPCMAjc
rNaB/viqqjkrfyn5JA9cPm9BzI5hPVmLoNKQwc0klr3zOPHPqaMBGb4/TjslFG7Q
A9xqYLuYfUbmlI2uRd/1/a0pXi2UZNhVDn3d8pGCWR2eK52D73mQkuTP/yMjvyuX
20DyXj/wtyh3Sj8IG/vdsC6YDfcJKO5Zqm66A7NL9jqwXp3OpW5dUtkByZqD1GQs
c/p4y/Mupc/I0xiU4Uo9BUe4X7gbfQwttnXgoVFYY8F+tZ4aw0/OK2ubkVAAHwQL
BCSTlnquq3W/0vVkDUBtK2CYoJZ2u3I=
-----END CERTIFICATE-----