Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/260078ce-082d-4ff4-9558-d1a0f0d1ecdd/648e579b-8bda-3d9b-a7ce-77df7512e9b1.roa
File:                     648e579b-8bda-3d9b-a7ce-77df7512e9b1.roa (raw, json)
Hash identifier:          trv6fZoniZEbak80OYbOW3gBOAoqXVqjQtFJ6kLj7CA=
Subject key identifier:   DD:48:34:06:0A:4A:C5:87:5A:CF:38:16:98:D2:2E:57:11:A8:37:29
Certificate issuer:       /CN=260078ce-082d-4ff4-9558-d1a0f0d1ecdd
Certificate serial:       010D0C9F43285846B59D443FA66D5D0D21D68000
Authority key identifier: 8E:7C:54:ED:F1:F8:A9:28:D2:4A:B4:AB:87:79:D8:43:18:4B:A9:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/260078ce-082d-4ff4-9558-d1a0f0d1ecdd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/260078ce-082d-4ff4-9558-d1a0f0d1ecdd/648e579b-8bda-3d9b-a7ce-77df7512e9b1.roa
Signing time:             Tue 30 Jul 2024 11:51:12 +0000
ROA not before:           Tue 30 Jul 2024 11:51:12 +0000
ROA not after:            Mon 28 Oct 2024 11:51:12 +0000
asID:                     199610
IP address blocks:        104.193.176.0/21 maxlen: 24
                          162.244.164.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Mon 16 Sep 2024 10:45:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:b5:9d:44:3f:a6:6d:5d:0d:21:d6:80:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=260078ce-082d-4ff4-9558-d1a0f0d1ecdd
        Validity
            Not Before: Jul 30 11:51:12 2024 GMT
            Not After : Oct 28 11:51:12 2024 GMT
        Subject: CN=a0b1d4d5-1cf7-4446-be10-4001c5fff67f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:dc:c6:06:2f:e4:01:f6:84:3a:8f:4b:e2:88:
                    4c:66:43:ae:65:32:8b:fd:01:46:49:1f:39:22:a5:
                    00:ab:a3:88:2b:37:76:4a:ae:97:81:93:87:0d:0e:
                    5c:a0:87:e2:7e:f9:05:ca:fe:12:1f:75:93:23:58:
                    3d:cd:a6:66:41:48:a3:77:cf:87:27:d4:82:3e:38:
                    98:3f:5a:77:b5:4d:cb:ae:9f:11:f0:be:4c:59:b7:
                    ac:93:83:bd:96:7f:08:ca:c2:37:24:fb:c8:42:f4:
                    b0:8d:4d:b0:be:bb:81:00:b9:ed:45:83:d7:b0:29:
                    63:1a:1f:7f:7b:bd:9e:92:75:79:e9:f9:d8:5a:a6:
                    13:a7:74:93:e2:da:b9:06:fb:41:c0:56:cc:f9:e3:
                    5d:dc:81:6a:48:9f:6b:ee:e0:79:15:5d:47:7e:10:
                    d9:9d:02:82:f2:ab:0e:12:d9:9e:6b:50:a8:5b:10:
                    46:f6:81:9d:80:d5:d7:0e:4f:9d:41:c4:a0:1a:58:
                    2a:df:ea:8a:dd:f6:0e:cc:e5:6b:20:ff:ec:71:65:
                    80:00:93:fb:15:ad:c6:40:34:0c:91:09:f7:44:ca:
                    1c:1d:d2:a3:ea:65:5c:3b:e2:1e:a5:51:3d:f3:0a:
                    55:02:12:08:04:29:9a:2a:ea:b4:51:d6:f1:21:89:
                    3b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:48:34:06:0A:4A:C5:87:5A:CF:38:16:98:D2:2E:57:11:A8:37:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/260078ce-082d-4ff4-9558-d1a0f0d1ecdd/648e579b-8bda-3d9b-a7ce-77df7512e9b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/260078ce-082d-4ff4-9558-d1a0f0d1ecdd/260078ce-082d-4ff4-9558-d1a0f0d1ecdd.crl

            X509v3 Authority Key Identifier:
                keyid:8E:7C:54:ED:F1:F8:A9:28:D2:4A:B4:AB:87:79:D8:43:18:4B:A9:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/260078ce-082d-4ff4-9558-d1a0f0d1ecdd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.193.176.0/21
                  162.244.164.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:4e:3e:da:1f:1a:8b:27:a4:e5:41:f4:06:2b:b9:57:d0:57:
         d9:c5:65:9f:d8:a0:42:bb:d4:18:73:fb:0d:db:21:f3:17:db:
         41:eb:ac:03:50:52:47:16:2f:8c:e0:e6:ea:f2:d2:44:50:94:
         f8:b6:83:cd:13:e0:aa:2d:23:55:8f:45:09:a9:6a:91:7c:1a:
         20:fe:e1:72:d1:6b:2b:50:a3:37:e0:9e:4a:9d:1e:42:c2:7f:
         e5:b9:b4:88:68:41:43:fb:c0:31:3b:32:4b:6b:a5:d2:de:26:
         d7:77:c2:db:55:39:f0:c9:4d:0c:69:f2:20:3d:a3:de:59:e4:
         bd:43:d0:b1:37:e6:1e:aa:7a:79:74:de:ee:d1:7f:bf:91:79:
         4a:7f:a8:90:0b:6b:61:00:2d:26:14:08:1d:d3:45:1e:14:6a:
         26:ef:31:e7:02:18:25:4e:cd:62:b1:6d:82:1e:ae:5e:26:20:
         19:62:89:52:3f:1a:c0:c7:0a:ed:c2:a6:08:c8:99:d1:19:c5:
         51:f6:97:b9:98:e2:17:cc:ec:c9:37:fa:57:5d:09:3e:b7:03:
         ad:fb:75:9f:96:31:7d:9b:c2:7e:9d:9d:72:ba:fa:dc:51:fa:
         78:cc:d8:e1:7d:e9:46:b5:63:cb:90:43:7d:40:7a:6f:99:19:
         b1:a5:82:4a
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEa1nUQ/pm1dDSHWgAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjYwMDc4Y2UtMDgyZC00ZmY0LTk1NTgtZDFhMGYwZDFl
Y2RkMB4XDTI0MDczMDExNTExMloXDTI0MTAyODExNTExMlowLzEtMCsGA1UEAxMk
YTBiMWQ0ZDUtMWNmNy00NDQ2LWJlMTAtNDAwMWM1ZmZmNjdmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdzGBi/kAfaEOo9L4ohMZkOuZTKL/QFGSR85
IqUAq6OIKzd2Sq6XgZOHDQ5coIfifvkFyv4SH3WTI1g9zaZmQUijd8+HJ9SCPjiY
P1p3tU3Lrp8R8L5MWbesk4O9ln8IysI3JPvIQvSwjU2wvruBALntRYPXsCljGh9/
e72eknV56fnYWqYTp3ST4tq5BvtBwFbM+eNd3IFqSJ9r7uB5FV1HfhDZnQKC8qsO
Etmea1CoWxBG9oGdgNXXDk+dQcSgGlgq3+qK3fYOzOVrIP/scWWAAJP7Fa3GQDQM
kQn3RMocHdKj6mVcO+IepVE98wpVAhIIBCmaKuq0UdbxIYk7OwIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFN1INAYKSsWHWs84FpjSLlcRqDcpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNjAw
NzhjZS0wODJkLTRmZjQtOTU1OC1kMWEwZjBkMWVjZGQvNjQ4ZTU3OWItOGJkYS0z
ZDliLWE3Y2UtNzdkZjc1MTJlOWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjYwMDc4Y2UtMDgyZC00ZmY0LTk1
NTgtZDFhMGYwZDFlY2RkLzI2MDA3OGNlLTA4MmQtNGZmNC05NTU4LWQxYTBmMGQx
ZWNkZC5jcmwwHwYDVR0jBBgwFoAUjnxU7fH4qSjSSrSrh3nYQxhLqeUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNjAwNzhjZS0wODJkLTRmZjQtOTU1OC1kMWEw
ZjBkMWVjZGQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDaMGwAwQC
ovSkMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAIVOPtofGosnpOVB9AYruVfQV9nFZZ/YoEK71Bhz+w3bIfMX
20HrrANQUkcWL4zg5ury0kRQlPi2g80T4KotI1WPRQmpapF8GiD+4XLRaytQozfg
nkqdHkLCf+W5tIhoQUP7wDE7MktrpdLeJtd3wttVOfDJTQxp8iA9o95Z5L1D0LE3
5h6qenl03u7Rf7+ReUp/qJALa2EALSYUCB3TRR4UaibvMecCGCVOzWKxbYIerl4m
IBliiVI/GsDHCu3CpgjImdEZxVH2l7mY4hfM7Mk3+lddCT63A637dZ+WMX2bwn6d
nXK6+txR+njM2OF96Ua1Y8uQQ31Aem+ZGbGlgko=
-----END CERTIFICATE-----