Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ca1292a3-6b65-323b-b46d-507dadd57328.roa
File:                     ca1292a3-6b65-323b-b46d-507dadd57328.roa (raw, json)
Hash identifier:          k55FZujMTv9VYlFTV78qzS125kSnBisEs+WMhhO3FWs=
Subject key identifier:   74:C5:8A:2B:AF:2E:58:35:62:55:8E:45:EC:F3:16:53:1F:B5:93:3D
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F43285844BB2A4E1CB0C3B6EB6B2D0040
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ca1292a3-6b65-323b-b46d-507dadd57328.roa
Signing time:             Wed 31 Jan 2024 02:00:26 +0000
ROA not before:           Wed 31 Jan 2024 02:00:26 +0000
ROA not after:            Tue 30 Apr 2024 01:00:26 +0000
asID:                     20940
IP address blocks:        2001:418:2401:9::/64 maxlen: 64

Validation:               Failed, certificate revoked on Tue 09 Apr 2024 16:30:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:bb:2a:4e:1c:b0:c3:b6:eb:6b:2d:00:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Jan 31 02:00:26 2024 GMT
            Not After : Apr 30 01:00:26 2024 GMT
        Subject: CN=180d2141-ab13-4d84-be91-339adc970e0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:6a:cf:23:7b:f3:83:28:70:e3:05:6c:7c:1e:
                    59:13:36:d8:ef:8e:e0:05:5f:ee:e0:7f:da:f3:c2:
                    dd:9f:a1:e3:39:2a:16:ee:d8:e4:73:58:fc:7a:62:
                    69:43:31:7c:81:0e:36:ec:10:83:02:7f:fc:a7:4d:
                    8e:6e:3f:71:44:38:c5:a1:8d:8c:77:e0:fe:25:05:
                    78:69:c0:cf:11:f5:e6:83:51:f3:5b:1c:af:ca:b8:
                    5f:17:0f:1e:55:06:5c:a8:0d:27:42:7d:ee:4e:73:
                    a7:3c:0c:de:dc:cd:b6:2e:28:f9:10:04:15:c1:2a:
                    cf:9a:8e:12:e5:3c:dd:dc:7e:8f:db:5e:bd:db:ab:
                    41:dd:d2:9e:81:0e:bc:ec:5b:4c:f3:76:9c:8f:e2:
                    4b:28:62:b3:28:42:3a:ef:ed:f9:2f:b7:80:fb:4a:
                    15:e3:8b:6c:01:9d:ad:2d:69:c0:47:e1:46:7c:99:
                    40:dc:19:da:8b:b2:be:85:69:e1:0b:0e:9b:1d:46:
                    48:d9:33:86:21:92:88:00:12:b4:be:c4:ec:2f:23:
                    9e:29:48:d9:22:ee:db:fd:d2:ad:64:86:2a:ba:ec:
                    3a:8b:64:fe:1e:cb:0e:47:fa:7a:6f:6a:fc:c5:77:
                    65:86:25:ab:25:28:6b:99:4b:cf:19:5b:55:9c:58:
                    27:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:C5:8A:2B:AF:2E:58:35:62:55:8E:45:EC:F3:16:53:1F:B5:93:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ca1292a3-6b65-323b-b46d-507dadd57328.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:418:2401:9::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:9a:09:b5:41:e1:bc:97:98:c1:93:26:85:9d:8c:d2:59:8a:
         57:9e:30:75:b8:31:83:04:f0:1d:33:74:a1:92:cf:a9:3b:c4:
         c4:27:3b:69:e1:25:50:70:dc:78:b4:f3:83:aa:19:7d:03:b6:
         26:f4:b4:b9:f1:37:ca:44:8c:f9:45:11:55:89:a6:a7:a7:bd:
         ee:b9:ab:28:c0:fa:c2:bf:64:8d:78:02:cd:1f:86:2e:c3:57:
         ce:38:e0:e4:ce:2b:fe:77:d8:37:5e:f4:58:56:ed:15:bc:36:
         62:66:7e:76:15:20:3d:1c:83:13:fd:38:ed:5d:64:1a:3d:bd:
         ee:13:af:14:22:0c:72:36:b0:b4:f2:80:16:7c:8a:02:e2:d8:
         71:28:b0:20:d8:84:58:12:a4:09:f6:46:c3:6c:bf:81:8e:f0:
         ec:94:72:14:d5:55:28:1d:ba:8b:dc:3a:47:b9:18:2f:61:12:
         4a:63:72:ea:9c:e2:a8:d9:b8:d1:82:43:0b:72:07:c1:2f:1b:
         22:ca:4f:4d:3e:d7:32:7e:21:bd:26:ba:a3:45:99:32:51:ef:
         40:64:73:24:15:f0:bf:7b:03:03:5c:53:3d:7c:18:00:af:3e:
         43:22:6d:c3:34:f6:ec:39:2c:a0:68:09:6f:8d:9d:12:d1:c7:
         c6:bc:f0:f7
-----BEGIN CERTIFICATE-----
MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWES7Kk4csMO262stAEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk
OTdmMB4XDTI0MDEzMTAyMDAyNloXDTI0MDQzMDAxMDAyNlowLzEtMCsGA1UEAxMk
MTgwZDIxNDEtYWIxMy00ZDg0LWJlOTEtMzM5YWRjOTcwZTBkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiGrPI3vzgyhw4wVsfB5ZEzbY747gBV/u4H/a
88Ldn6HjOSoW7tjkc1j8emJpQzF8gQ427BCDAn/8p02Obj9xRDjFoY2Md+D+JQV4
acDPEfXmg1HzWxyvyrhfFw8eVQZcqA0nQn3uTnOnPAze3M22Lij5EAQVwSrPmo4S
5Tzd3H6P216926tB3dKegQ687FtM83acj+JLKGKzKEI67+35L7eA+0oV44tsAZ2t
LWnAR+FGfJlA3Bnai7K+hWnhCw6bHUZI2TOGIZKIABK0vsTsLyOeKUjZIu7b/dKt
ZIYquuw6i2T+HssOR/p6b2r8xXdlhiWrJShrmUvPGVtVnFgnvwIDAQABo4IDWjCC
A1YwHQYDVR0OBBYEFHTFiiuvLlg1YlWORezzFlMftZM9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz
ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvY2ExMjkyYTMtNmI2NS0z
MjNiLWI0NmQtNTA3ZGFkZDU3MzI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm
ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0
ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3
NjcxNGQ5N2YuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAIAEEGCQB
AAkwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw
czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG
9w0BAQsFAAOCAQEAL5oJtUHhvJeYwZMmhZ2M0lmKV54wdbgxgwTwHTN0oZLPqTvE
xCc7aeElUHDceLTzg6oZfQO2JvS0ufE3ykSM+UURVYmmp6e97rmrKMD6wr9kjXgC
zR+GLsNXzjjg5M4r/nfYN170WFbtFbw2YmZ+dhUgPRyDE/047V1kGj297hOvFCIM
cjawtPKAFnyKAuLYcSiwINiEWBKkCfZGw2y/gY7w7JRyFNVVKB26i9w6R7kYL2ES
SmNy6pziqNm40YJDC3IHwS8bIspPTT7XMn4hvSa6o0WZMlHvQGRzJBXwv3sDA1xT
PXwYAK8+QyJtwzT27DksoGgJb42dEtHHxrzw9w==
-----END CERTIFICATE-----