Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/5dbc15cb-9d31-30d4-8f37-119e0fc71c6a.roa
File:                     5dbc15cb-9d31-30d4-8f37-119e0fc71c6a.roa (raw, json)
Hash identifier:          mA+uJROGTWRq3ayOnsSdZdf6UdZ6Op3N3BFwR66QqfE=
Subject key identifier:   87:D1:80:3E:CA:61:79:59:E6:FF:7E:82:8E:3A:58:4A:26:5E:53:BD
Certificate issuer:       /CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
Certificate serial:       010D0C9F43285848573AD7712B78F10ECA2F6E80
Authority key identifier: FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/5dbc15cb-9d31-30d4-8f37-119e0fc71c6a.roa
Signing time:             Fri 27 Dec 2024 02:00:40 +0000
ROA not before:           Fri 27 Dec 2024 02:00:40 +0000
ROA not after:            Thu 27 Mar 2025 01:00:40 +0000
asID:                     16509
IP address blocks:        72.14.147.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Mon 06 Jan 2025 17:56:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:57:3a:d7:71:2b:78:f1:0e:ca:2f:6e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b56f665d-3c28-457f-ab6f-a47444d6d1f7
        Validity
            Not Before: Dec 27 02:00:40 2024 GMT
            Not After : Mar 27 01:00:40 2025 GMT
        Subject: CN=cfd70ff9-2d45-41b7-b438-4cd81de78df0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:63:0c:11:8e:11:30:1a:ba:29:81:bf:95:8e:
                    01:d1:b2:32:7c:ff:7b:7c:da:9e:de:36:64:d6:c1:
                    21:3d:bf:6e:09:7d:8a:75:22:30:24:1a:db:3f:15:
                    1e:95:ad:7e:87:e5:b3:8f:ef:e1:4f:02:e3:33:e6:
                    98:d2:d1:e0:62:cd:61:cc:e7:49:a1:85:00:4d:6f:
                    2f:b7:8a:10:ab:11:df:d9:14:a1:5d:26:5b:f3:e6:
                    b0:41:8f:c2:5b:18:8b:51:ae:a7:01:17:cc:0e:a1:
                    cf:c7:b8:9d:1c:74:76:7c:34:f2:c8:fc:73:6f:49:
                    6a:4b:a8:9e:3b:d8:53:51:86:e3:b3:9e:3d:54:b4:
                    30:85:e6:5e:d0:48:f8:7b:6d:02:35:2b:e0:cf:93:
                    31:26:c5:35:c9:0a:21:1c:56:17:6c:13:a0:05:0b:
                    ac:92:8b:86:5f:4e:9d:19:d7:d1:37:e2:1c:f1:6b:
                    b6:ab:82:d7:30:23:85:65:31:26:30:5c:63:95:e8:
                    5f:82:55:92:6f:d2:5d:c9:09:9b:aa:b7:34:9a:52:
                    9c:fc:9c:c0:0d:43:da:ff:aa:6d:1a:e7:89:1c:57:
                    65:17:2d:09:ed:a7:24:1c:4a:06:02:b3:f4:a5:1f:
                    88:24:bc:3f:8b:b2:e2:e6:60:3c:d2:42:c2:79:06:
                    fd:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:D1:80:3E:CA:61:79:59:E6:FF:7E:82:8E:3A:58:4A:26:5E:53:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/5dbc15cb-9d31-30d4-8f37-119e0fc71c6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7/b56f665d-3c28-457f-ab6f-a47444d6d1f7.crl

            X509v3 Authority Key Identifier:
                keyid:FB:11:63:27:81:CE:E3:9A:28:74:74:C2:28:2C:2E:94:DD:83:08:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b56f665d-3c28-457f-ab6f-a47444d6d1f7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.14.147.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:7a:ed:02:22:cb:13:67:b1:95:d8:e3:ba:70:f0:0a:44:30:
         39:c3:2b:2a:7a:8c:5b:38:2e:80:c7:15:16:13:30:bb:44:a2:
         13:f9:29:09:cb:4f:25:28:08:38:8e:db:95:f6:e5:84:bd:c6:
         a0:de:5f:b1:f6:3b:6e:18:96:c0:a6:50:a1:5b:a2:08:5c:da:
         43:f7:20:61:b0:4d:02:b6:27:94:08:33:1e:7f:7b:0e:a7:06:
         06:12:a9:4a:ba:f1:60:04:3c:30:80:22:d7:74:6b:4e:cb:18:
         11:8e:7f:ac:c9:56:fe:68:50:fb:6d:74:ef:53:b5:8b:a6:78:
         4a:44:16:71:65:65:06:c9:5d:bd:40:c7:c0:24:4a:63:0c:e1:
         59:0a:ba:ce:e5:76:32:a0:93:50:3c:1f:7f:c1:e3:a7:e2:aa:
         a7:67:3f:2c:aa:8d:4d:27:8c:f4:e4:6a:df:be:45:75:b1:12:
         49:a9:43:f1:38:55:10:d8:6f:9e:60:ea:be:21:5c:28:1a:e5:
         58:f1:2b:9f:52:5a:91:d7:26:7a:3d:e0:2a:15:f6:4c:18:c6:
         13:2d:44:48:a2:9b:43:64:c6:6f:d7:97:c8:ea:33:b8:6b:31:
         a6:49:78:e0:25:9c:dc:1e:db:2f:81:41:3d:05:22:1a:ff:b3:
         09:68:44:ee
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhXOtdxK3jxDsovboAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjU2ZjY2NWQtM2MyOC00NTdmLWFiNmYtYTQ3NDQ0ZDZk
MWY3MB4XDTI0MTIyNzAyMDA0MFoXDTI1MDMyNzAxMDA0MFowLzEtMCsGA1UEAxMk
Y2ZkNzBmZjktMmQ0NS00MWI3LWI0MzgtNGNkODFkZTc4ZGYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGMMEY4RMBq6KYG/lY4B0bIyfP97fNqe3jZk
1sEhPb9uCX2KdSIwJBrbPxUela1+h+Wzj+/hTwLjM+aY0tHgYs1hzOdJoYUATW8v
t4oQqxHf2RShXSZb8+awQY/CWxiLUa6nARfMDqHPx7idHHR2fDTyyPxzb0lqS6ie
O9hTUYbjs549VLQwheZe0Ej4e20CNSvgz5MxJsU1yQohHFYXbBOgBQuskouGX06d
GdfRN+Ic8Wu2q4LXMCOFZTEmMFxjlehfglWSb9JdyQmbqrc0mlKc/JzADUPa/6pt
GueJHFdlFy0J7ackHEoGArP0pR+IJLw/i7Li5mA80kLCeQb98QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIfRgD7KYXlZ5v9+go46WEomXlO9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZm
NjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0NDRkNmQxZjcvNWRiYzE1Y2ItOWQzMS0z
MGQ0LThmMzctMTE5ZTBmYzcxYzZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjU2ZjY2NWQtM2MyOC00NTdmLWFi
NmYtYTQ3NDQ0ZDZkMWY3L2I1NmY2NjVkLTNjMjgtNDU3Zi1hYjZmLWE0NzQ0NGQ2
ZDFmNy5jcmwwHwYDVR0jBBgwFoAU+xFjJ4HO45oodHTCKCwulN2DCMQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9iNTZmNjY1ZC0zYzI4LTQ1N2YtYWI2Zi1hNDc0
NDRkNmQxZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASA6TMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFV67QIiyxNnsZXY47pw8ApEMDnDKyp6jFs4LoDHFRYTMLtEohP5KQnL
TyUoCDiO25X25YS9xqDeX7H2O24YlsCmUKFboghc2kP3IGGwTQK2J5QIMx5/ew6n
BgYSqUq68WAEPDCAItd0a07LGBGOf6zJVv5oUPttdO9TtYumeEpEFnFlZQbJXb1A
x8AkSmMM4VkKus7ldjKgk1A8H3/B46fiqqdnPyyqjU0njPTkat++RXWxEkmpQ/E4
VRDYb55g6r4hXCga5VjxK59SWpHXJno94CoV9kwYxhMtREiim0Nkxm/Xl8jqM7hr
MaZJeOAlnNwe2y+BQT0FIhr/swloRO4=
-----END CERTIFICATE-----