Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/3e7fc810-e6d1-333b-b6df-abb0d80b03c1.roa
File:                     3e7fc810-e6d1-333b-b6df-abb0d80b03c1.roa (raw, json)
Hash identifier:          pRKHt4cZvS51peo3dYrXOK9mC57wgj1FavjMEEc0XJc=
Subject key identifier:   06:F9:0C:0F:A4:3F:21:3F:BB:60:CC:E6:DE:5A:0C:5B:36:C8:9D:F1
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F432858430CE5C878A03C6C02485D0FC0
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/3e7fc810-e6d1-333b-b6df-abb0d80b03c1.roa
Signing time:             Tue 29 Aug 2023 23:04:53 +0000
ROA not before:           Tue 29 Aug 2023 23:04:53 +0000
ROA not after:            Tue 28 Nov 2023 00:04:53 +0000
asID:                     14618
IP address blocks:        170.85.48.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:0c:e5:c8:78:a0:3c:6c:02:48:5d:0f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Aug 29 23:04:53 2023 GMT
            Not After : Nov 28 00:04:53 2023 GMT
        Subject: CN=dfdebbed-4ccc-4f87-b777-2e0db627ac02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:20:9e:3e:af:99:4c:3d:f3:c9:f4:86:be:74:
                    6e:b4:4f:b9:b5:8f:3a:05:ed:b8:5d:a1:eb:d3:68:
                    79:6a:17:6b:d6:79:97:a5:63:c5:4a:9b:c4:7c:dc:
                    a2:41:9c:d0:93:f9:91:16:0f:9f:a3:e7:a0:08:37:
                    0f:90:51:c9:42:63:73:92:25:c9:5a:d4:0e:67:9d:
                    54:bc:c4:ed:71:e6:ea:12:64:09:a1:a7:83:09:73:
                    3a:95:b3:cd:54:0a:46:f5:dd:84:56:f4:8a:6e:d1:
                    25:ec:bd:63:79:78:66:1a:f0:3e:0e:85:1d:23:c1:
                    40:0f:07:ce:43:09:a2:bd:ea:27:ca:90:cc:c4:ea:
                    50:4e:aa:63:26:ad:55:86:58:8f:1c:ac:09:0b:b7:
                    4f:fe:c1:07:d1:3b:20:78:3d:2c:5f:3a:1d:10:a6:
                    d0:49:b8:46:7f:08:12:12:a1:c3:11:48:e1:b0:75:
                    b1:f2:45:fc:8d:2a:33:f4:e9:51:3c:fb:44:5c:2a:
                    34:27:1c:c1:54:49:1b:3d:9a:c2:5f:50:76:1b:db:
                    d0:67:80:fb:bf:16:8e:8a:d4:9e:f5:ae:dd:20:85:
                    31:a1:f4:5f:a3:2b:d8:e5:b6:35:1a:06:d3:8d:54:
                    2d:ca:40:a7:55:86:da:cc:3f:8b:95:cd:0d:cb:aa:
                    ce:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:F9:0C:0F:A4:3F:21:3F:BB:60:CC:E6:DE:5A:0C:5B:36:C8:9D:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/3e7fc810-e6d1-333b-b6df-abb0d80b03c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.85.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:b1:f0:a4:ff:28:df:0e:5f:ab:8d:a9:8c:19:12:c5:9d:dd:
         b9:95:19:35:3d:18:6c:65:46:24:fd:91:74:b2:0f:10:fc:16:
         a4:b9:f9:27:03:f4:2b:86:ec:1c:9d:41:8c:3f:fd:d6:c6:80:
         98:d9:79:0c:92:1b:f9:99:61:d2:4b:1e:b4:e6:42:53:c3:e6:
         26:cf:02:c4:47:aa:f2:af:4c:f1:6f:c9:fb:01:21:90:65:4f:
         ff:5d:2e:37:be:a2:4f:0f:93:65:d5:af:2e:14:3c:2e:c6:00:
         7a:46:50:b7:bc:f1:5d:f7:ec:b9:0e:c7:91:3b:4e:f1:eb:bb:
         0a:c0:cc:35:dc:68:20:27:98:a4:37:13:6c:bd:1d:39:c5:77:
         21:ad:d2:7d:96:4b:2c:11:81:56:d3:d4:4f:df:00:63:95:24:
         ed:1e:ad:91:2a:78:9f:00:98:79:6a:88:e7:fc:44:df:f0:fc:
         ec:e8:82:31:7a:0d:ed:cc:70:d8:36:40:92:7d:0a:52:fe:40:
         ab:97:fd:18:1e:da:31:b6:3f:5a:ce:08:b9:15:80:91:90:d1:
         79:f9:bf:ec:95:cc:a3:08:f3:f8:70:64:9a:ed:a9:d2:eb:a7:
         67:24:a0:08:87:70:7c:94:dc:a2:3b:da:89:fe:1b:58:85:ca:
         be:1f:d1:cb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEMM5ch4oDxsAkhdD8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy
ZTQ4MB4XDTIzMDgyOTIzMDQ1M1oXDTIzMTEyODAwMDQ1M1owLzEtMCsGA1UEAxMk
ZGZkZWJiZWQtNGNjYy00Zjg3LWI3NzctMmUwZGI2MjdhYzAyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAniCePq+ZTD3zyfSGvnRutE+5tY86Be24XaHr
02h5ahdr1nmXpWPFSpvEfNyiQZzQk/mRFg+fo+egCDcPkFHJQmNzkiXJWtQOZ51U
vMTtcebqEmQJoaeDCXM6lbPNVApG9d2EVvSKbtEl7L1jeXhmGvA+DoUdI8FADwfO
QwmiveonypDMxOpQTqpjJq1VhliPHKwJC7dP/sEH0TsgeD0sXzodEKbQSbhGfwgS
EqHDEUjhsHWx8kX8jSoz9OlRPPtEXCo0JxzBVEkbPZrCX1B2G9vQZ4D7vxaOitSe
9a7dIIUxofRfoyvY5bY1GgbTjVQtykCnVYbazD+Llc0Ny6rOdwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAb5DA+kPyE/u2DM5t5aDFs2yJ3xMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm
MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvM2U3ZmM4MTAtZTZkMS0z
MzNiLWI2ZGYtYWJiMGQ4MGIwM2MxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl
OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4
MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi
YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqlUwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC+x8KT/KN8OX6uNqYwZEsWd3bmVGTU9GGxlRiT9kXSyDxD8FqS5+ScD
9CuG7BydQYw//dbGgJjZeQySG/mZYdJLHrTmQlPD5ibPAsRHqvKvTPFvyfsBIZBl
T/9dLje+ok8Pk2XVry4UPC7GAHpGULe88V337LkOx5E7TvHruwrAzDXcaCAnmKQ3
E2y9HTnFdyGt0n2WSywRgVbT1E/fAGOVJO0erZEqeJ8AmHlqiOf8RN/w/OzogjF6
De3McNg2QJJ9ClL+QKuX/Rge2jG2P1rOCLkVgJGQ0Xn5v+yVzKMI8/hwZJrtqdLr
p2ckoAiHcHyU3KI72on+G1iFyr4f0cs=
-----END CERTIFICATE-----