Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85/e1850cd8-6bab-3e39-86a8-3cdbd7d2ba33.roa
File:                     e1850cd8-6bab-3e39-86a8-3cdbd7d2ba33.roa (raw, json)
Hash identifier:          3NBunI18u5four0d+UQhf7F38Fx/48noYZ3ttSJGFLs=
Subject key identifier:   4B:CA:29:5D:29:91:A8:13:46:3C:AF:51:04:E8:62:E6:3D:00:8A:46
Certificate issuer:       /CN=888d6cc7-0aa2-467e-9649-a453942c2d85
Certificate serial:       010D0C9F43285846401294FCCD6B1A644CE07C80
Authority key identifier: 85:9E:C9:BC:47:3A:4F:8D:1F:C8:6B:8F:48:E7:B2:AA:BE:7A:56:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85/e1850cd8-6bab-3e39-86a8-3cdbd7d2ba33.roa
Signing time:             Tue 18 Jun 2024 09:22:11 +0000
ROA not before:           Tue 18 Jun 2024 09:22:11 +0000
ROA not after:            Mon 16 Sep 2024 09:22:11 +0000
asID:                     400866
IP address blocks:        199.7.140.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 16 Jul 2024 17:24:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:40:12:94:fc:cd:6b:1a:64:4c:e0:7c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=888d6cc7-0aa2-467e-9649-a453942c2d85
        Validity
            Not Before: Jun 18 09:22:11 2024 GMT
            Not After : Sep 16 09:22:11 2024 GMT
        Subject: CN=205599c5-e845-44ad-8656-e3bb2530b6c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:86:bf:1f:11:c4:90:06:27:a6:e5:94:71:38:
                    cf:d1:fe:75:89:b6:79:be:fc:a0:1d:17:e8:36:e1:
                    be:32:50:d1:86:77:9a:6d:19:a7:1c:f6:b0:27:59:
                    d8:d5:b9:45:f8:eb:39:18:36:aa:10:fc:00:c0:da:
                    c2:1b:6c:07:13:34:71:35:ad:c9:23:42:cb:ac:26:
                    7d:4a:13:ed:e0:d7:ae:23:4d:93:06:09:dd:e8:48:
                    04:b6:92:a3:91:6f:db:78:36:39:24:5e:b4:0f:36:
                    fe:ce:1c:ee:5e:e2:81:43:27:3d:61:ce:df:69:db:
                    76:27:21:31:0d:ea:87:3b:e9:fe:b7:f7:d7:08:15:
                    ff:5c:b2:77:7e:79:e7:97:05:0f:db:6c:66:f6:2a:
                    55:7b:f3:17:23:c9:cc:b8:f4:67:00:d3:b3:0f:72:
                    30:93:15:c5:6f:63:20:ea:66:a5:34:f0:40:a5:30:
                    93:fe:f7:2e:32:ef:d0:31:b0:46:51:54:8b:69:76:
                    14:7d:e9:85:31:1d:5f:56:b5:d4:c1:e8:54:e0:bd:
                    fc:5a:58:65:91:59:20:3a:f1:f4:46:3d:c0:f2:80:
                    d9:8d:48:65:0c:e0:4d:7b:40:e7:1b:78:6d:0f:6c:
                    2b:6f:5f:d8:1b:ed:a0:8b:5b:ba:7c:a3:5a:05:16:
                    71:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:CA:29:5D:29:91:A8:13:46:3C:AF:51:04:E8:62:E6:3D:00:8A:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85/e1850cd8-6bab-3e39-86a8-3cdbd7d2ba33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85/888d6cc7-0aa2-467e-9649-a453942c2d85.crl

            X509v3 Authority Key Identifier:
                keyid:85:9E:C9:BC:47:3A:4F:8D:1F:C8:6B:8F:48:E7:B2:AA:BE:7A:56:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/888d6cc7-0aa2-467e-9649-a453942c2d85.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:9f:ee:aa:56:06:31:70:b3:cd:fc:c6:ce:2d:2f:6e:a4:10:
         32:fc:c3:21:d2:2c:25:07:c5:14:99:78:8b:da:a7:fe:7c:1b:
         cc:26:82:8d:c9:e1:00:27:dc:12:ec:bd:46:77:d4:b2:cd:39:
         a5:2b:d6:b6:1b:a6:a6:12:ca:f9:f4:2f:ee:6d:83:62:3f:f4:
         67:21:23:3b:2a:3d:62:3b:32:df:9b:cf:2f:2c:b2:a5:60:77:
         d3:c2:d0:52:ea:5c:f0:0d:0b:6d:d6:ca:97:01:76:0d:f6:1e:
         24:15:2c:4b:d6:8b:81:cb:62:fc:48:ef:13:bb:49:47:40:94:
         c3:e6:ec:6e:df:c3:ad:82:9f:80:e3:fd:35:be:bf:40:c4:2c:
         08:08:c6:f2:00:55:8f:58:e3:88:67:f4:64:b0:50:fc:bc:75:
         a4:be:c8:30:12:99:16:76:d5:7d:a6:e4:a3:1b:81:6a:a8:5f:
         19:eb:8c:32:c2:cf:dd:3c:e9:8e:6c:7e:ac:70:5e:78:fe:eb:
         ec:e0:35:6c:a3:61:4f:8a:c9:83:f7:0c:7a:40:d3:d7:35:0d:
         b3:4d:a9:12:79:eb:e4:a8:74:7b:04:e7:be:52:5d:9b:e7:c2:
         c1:3f:b5:d3:1b:87:82:94:67:ed:e2:cf:56:37:6d:72:48:8f:
         ed:5e:c2:ad
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEZAEpT8zWsaZEzgfIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODg4ZDZjYzctMGFhMi00NjdlLTk2NDktYTQ1Mzk0MmMy
ZDg1MB4XDTI0MDYxODA5MjIxMVoXDTI0MDkxNjA5MjIxMVowLzEtMCsGA1UEAxMk
MjA1NTk5YzUtZTg0NS00NGFkLTg2NTYtZTNiYjI1MzBiNmM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoa/HxHEkAYnpuWUcTjP0f51ibZ5vvygHRfo
NuG+MlDRhneabRmnHPawJ1nY1blF+Os5GDaqEPwAwNrCG2wHEzRxNa3JI0LLrCZ9
ShPt4NeuI02TBgnd6EgEtpKjkW/beDY5JF60Dzb+zhzuXuKBQyc9Yc7fadt2JyEx
DeqHO+n+t/fXCBX/XLJ3fnnnlwUP22xm9ipVe/MXI8nMuPRnANOzD3IwkxXFb2Mg
6malNPBApTCT/vcuMu/QMbBGUVSLaXYUfemFMR1fVrXUwehU4L38WlhlkVkgOvH0
Rj3A8oDZjUhlDOBNe0DnG3htD2wrb1/YG+2gi1u6fKNaBRZxNQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEvKKV0pkagTRjyvUQToYuY9AIpGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84ODhk
NmNjNy0wYWEyLTQ2N2UtOTY0OS1hNDUzOTQyYzJkODUvZTE4NTBjZDgtNmJhYi0z
ZTM5LTg2YTgtM2NkYmQ3ZDJiYTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvODg4ZDZjYzctMGFhMi00NjdlLTk2
NDktYTQ1Mzk0MmMyZDg1Lzg4OGQ2Y2M3LTBhYTItNDY3ZS05NjQ5LWE0NTM5NDJj
MmQ4NS5jcmwwHwYDVR0jBBgwFoAUhZ7JvEc6T40fyGuPSOeyqr56VrIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy84ODhkNmNjNy0wYWEyLTQ2N2UtOTY0OS1hNDUz
OTQyYzJkODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxweMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIef7qpWBjFws838xs4tL26kEDL8wyHSLCUHxRSZeIvap/58G8wmgo3J
4QAn3BLsvUZ31LLNOaUr1rYbpqYSyvn0L+5tg2I/9GchIzsqPWI7Mt+bzy8ssqVg
d9PC0FLqXPANC23WypcBdg32HiQVLEvWi4HLYvxI7xO7SUdAlMPm7G7fw62Cn4Dj
/TW+v0DELAgIxvIAVY9Y44hn9GSwUPy8daS+yDASmRZ21X2m5KMbgWqoXxnrjDLC
z9086Y5sfqxwXnj+6+zgNWyjYU+KyYP3DHpA09c1DbNNqRJ56+SodHsE575SXZvn
wsE/tdMbh4KUZ+3iz1Y3bXJIj+1ewq0=
-----END CERTIFICATE-----