Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/0cfcb125-6b48-34ee-89be-48af36146dcc.roa
File:                     0cfcb125-6b48-34ee-89be-48af36146dcc.roa (raw, json)
Hash identifier:          f6PHX/QXvWG0WxJInUrhJHKrrlcUciTTgeTLUu2yuIk=
Subject key identifier:   3B:62:3B:02:20:21:DD:AF:A9:49:E4:C7:76:12:2F:B3:21:08:D2:F9
Certificate issuer:       /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
Certificate serial:       010D0C9F43285842460FE1AE594C56A661C6BC60
Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/0cfcb125-6b48-34ee-89be-48af36146dcc.roa
Signing time:             Mon 19 Jun 2023 17:43:51 +0000
ROA not before:           Mon 19 Jun 2023 17:43:51 +0000
ROA not after:            Sun 17 Sep 2023 17:43:51 +0000
asID:                     398465
IP address blocks:        72.14.139.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:46:0f:e1:ae:59:4c:56:a6:61:c6:bc:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
        Validity
            Not Before: Jun 19 17:43:51 2023 GMT
            Not After : Sep 17 17:43:51 2023 GMT
        Subject: CN=c40e9a54-7b5b-4d72-9ebf-3f0c51df91e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:b6:45:83:bc:8c:f5:d7:d7:a2:cc:bf:48:58:
                    36:1c:ba:0b:c5:59:fe:0b:9f:65:54:a3:4b:1e:fc:
                    15:db:fc:8d:4a:75:36:81:86:4a:0e:77:27:ee:41:
                    91:cd:6d:98:13:15:39:2d:81:18:54:69:de:93:2c:
                    87:af:63:38:ad:06:f6:cc:dd:bb:c9:f3:b4:93:5c:
                    ad:7d:20:a9:c9:0a:2d:55:2d:09:05:97:52:d9:60:
                    d1:5e:09:f0:c1:89:07:6c:f1:74:8c:e4:d4:45:b3:
                    d7:ef:5c:85:0d:3c:d8:65:88:6d:19:57:5c:e9:c5:
                    ac:4e:9f:c3:92:71:b5:57:b2:48:b3:c9:55:4a:09:
                    5d:e1:c0:da:7e:99:13:51:92:01:94:fc:6e:09:97:
                    c3:a9:4a:ee:ec:e7:2f:df:d6:a2:f9:07:60:e6:e1:
                    07:1b:45:f0:e9:fc:e7:07:90:bd:47:8f:9d:ab:2c:
                    2b:96:5c:81:d7:31:81:63:2e:d7:c1:01:ae:47:f2:
                    59:49:04:b7:fa:ec:11:8f:fd:49:09:57:02:ca:f4:
                    d3:86:21:67:72:d7:e7:5d:bc:6a:e7:3e:56:14:1f:
                    1d:be:49:14:15:58:24:24:ba:22:b3:8a:7f:94:d2:
                    87:78:6f:00:bf:47:78:cd:80:16:fc:94:3f:05:26:
                    25:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:62:3B:02:20:21:DD:AF:A9:49:E4:C7:76:12:2F:B3:21:08:D2:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/0cfcb125-6b48-34ee-89be-48af36146dcc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl

            X509v3 Authority Key Identifier:
                keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.14.139.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:b6:6d:ee:07:a4:f4:a2:f7:85:79:74:35:98:40:4d:72:29:
         61:a1:58:71:07:7f:36:de:c8:af:d0:54:d0:fd:57:4b:31:37:
         ca:f3:af:79:c1:09:1f:6c:5c:19:a6:1b:13:aa:aa:77:2a:64:
         b4:b8:71:8e:f7:7f:35:a4:86:1e:f9:9f:00:93:45:cd:6d:9a:
         ab:8d:16:f6:a0:9e:88:fb:14:94:03:21:7d:bc:59:b0:9f:5f:
         f7:1f:ec:0f:0d:9d:56:de:d3:08:35:3a:8d:42:7e:83:92:72:
         65:3b:fa:36:27:2a:b5:65:6d:a8:ed:c2:93:9a:ef:9e:cb:57:
         6c:d9:d3:30:d2:7e:49:4d:1d:16:62:63:24:12:df:52:ac:a0:
         04:c6:30:e8:11:f5:3b:01:29:ad:4b:4b:7c:12:86:db:ff:c7:
         ec:f6:ca:ca:02:52:0e:56:1d:d4:bd:6c:3e:49:e6:a3:5a:f7:
         66:0c:85:4a:1e:bc:72:1b:c5:4e:25:d5:f0:6f:97:7c:03:97:
         c3:de:d3:d4:c2:e0:a7:38:21:d7:87:3e:af:52:00:50:4e:1a:
         2b:50:37:ba:98:70:6b:8a:e9:72:a9:59:37:be:56:13:89:27:
         b4:4a:d8:88:f6:f5:01:2d:a8:68:49:7d:b8:5d:ba:b0:c2:b3:
         73:9d:c8:55
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEJGD+GuWUxWpmHGvGAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjU2ZjY2NWQtM2MyOC00NTdmLWFiNmYtYTQ3NDQ0ZDZk
MWY3MB4XDTIzMDYxOTE3NDM1MVoXDTIzMDkxNzE3NDM1MVowLzEtMCsGA1UEAxMk
YzQwZTlhNTQtN2I1Yi00ZDcyLTllYmYtM2YwYzUxZGY5MWUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7ZFg7yM9dfXosy/SFg2HLoLxVn+C59lVKNL
HvwV2/yNSnU2gYZKDncn7kGRzW2YExU5LYEYVGnekyyHr2M4rQb2zN27yfO0k1yt
fSCpyQotVS0JBZdS2WDRXgnwwYkHbPF0jOTURbPX71yFDTzYZYhtGVdc6cWsTp/D
knG1V7JIs8lVSgld4cDafpkTUZIBlPxuCZfDqUru7Ocv39ai+Qdg5uEHG0Xw6fzn
B5C9R4+dqywrllyB1zGBYy7XwQGuR/JZSQS3+uwRj/1JCVcCyvTThiFnctfnXbxq
5z5WFB8dvkkUFVgkJLois4p/lNKHeG8Av0d4zYAW/JQ/BSYl3QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDtiOwIgId2vqUnkx3YSL7MhCNL5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZm
NjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0NDRkNmQxZjcvMGNmY2IxMjUtNmI0OC0z
NGVlLTg5YmUtNDhhZjM2MTQ2ZGNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjU2ZjY2NWQtM2MyOC00NTdmLWFi
NmYtYTQ3NDQ0ZDZkMWY3L2I1NmY2NjVkLTNjMjgtNDU3Zi1hYjZmLWE0NzQ0NGQ2
ZDFmNy5jcmwwHwYDVR0jBBgwFoAU+xFjJ4HO45oodHTCKCwulN2DCMQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZmNjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0
NDRkNmQxZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASA6LMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEq2be4HpPSi94V5dDWYQE1yKWGhWHEHfzbeyK/QVND9V0sxN8rzr3nB
CR9sXBmmGxOqqncqZLS4cY73fzWkhh75nwCTRc1tmquNFvagnoj7FJQDIX28WbCf
X/cf7A8NnVbe0wg1Oo1CfoOScmU7+jYnKrVlbajtwpOa757LV2zZ0zDSfklNHRZi
YyQS31KsoATGMOgR9TsBKa1LS3wShtv/x+z2ysoCUg5WHdS9bD5J5qNa92YMhUoe
vHIbxU4l1fBvl3wDl8Pe09TC4Kc4IdeHPq9SAFBOGitQN7qYcGuK6XKpWTe+VhOJ
J7RK2Ij29QEtqGhJfbhdurDCs3OdyFU=
-----END CERTIFICATE-----