Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ff061ee-e6cf-447c-8c04-b4a8b1f7e404/ae795b5c-a1fe-3fdd-8ead-41a5235a225f.roa
File:                     ae795b5c-a1fe-3fdd-8ead-41a5235a225f.roa (raw, json)
Hash identifier:          iO2g9/z/nK/toF5zIDDueYWof9mY6r5e2uCF4HNdUQA=
Subject key identifier:   A5:E1:D8:8D:58:2E:AD:D5:CC:8D:79:F1:59:05:8F:CC:1B:4E:B5:D6
Certificate issuer:       /CN=2ff061ee-e6cf-447c-8c04-b4a8b1f7e404
Certificate serial:       010D0C9F432858454B60CCBD569DE784CD170D00
Authority key identifier: 7C:D0:FD:8A:78:11:6A:24:5F:B5:B7:33:D4:92:60:13:FA:58:F9:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ff061ee-e6cf-447c-8c04-b4a8b1f7e404.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ff061ee-e6cf-447c-8c04-b4a8b1f7e404/ae795b5c-a1fe-3fdd-8ead-41a5235a225f.roa
Signing time:             Fri 22 Mar 2024 17:46:44 +0000
ROA not before:           Fri 22 Mar 2024 17:46:44 +0000
ROA not after:            Thu 20 Jun 2024 17:46:44 +0000
asID:                     174
IP address blocks:        64.39.227.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 17 Apr 2024 16:54:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:4b:60:cc:bd:56:9d:e7:84:cd:17:0d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ff061ee-e6cf-447c-8c04-b4a8b1f7e404
        Validity
            Not Before: Mar 22 17:46:44 2024 GMT
            Not After : Jun 20 17:46:44 2024 GMT
        Subject: CN=8d2c4260-8c1e-4d1e-a9c5-a3e8db5314a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:0c:75:2a:dc:02:30:2b:e0:6d:66:2a:01:8e:
                    41:cf:ec:ad:85:de:02:b6:d2:49:33:ea:f9:1a:c0:
                    14:82:c6:92:fe:55:c8:b6:0c:15:c8:e4:36:17:99:
                    7a:b3:2f:67:5b:d5:98:e8:2d:4f:ad:38:8c:74:34:
                    72:3a:6d:44:fc:bc:02:0f:d1:74:2c:be:ee:ae:d2:
                    b6:e4:b1:b7:95:fb:b7:84:22:0c:91:b5:1f:de:d6:
                    29:bf:9a:97:bb:0d:ea:32:2a:1a:be:52:4e:7a:d1:
                    59:1c:92:21:12:31:99:50:50:a0:01:08:d8:8f:bc:
                    2e:4d:07:70:db:6f:3b:af:da:6e:0a:13:ea:a5:d2:
                    7d:3e:81:cf:30:02:0e:ab:03:2d:e0:20:b3:af:8f:
                    9a:42:fd:ca:aa:fe:d2:33:d2:04:a8:39:66:ce:6b:
                    91:5e:68:cc:d6:f0:e0:85:6e:e9:3a:30:2d:8b:2f:
                    17:eb:b8:9a:44:3d:d2:97:e6:16:46:4c:8e:78:93:
                    2e:2d:b6:69:ec:08:23:35:a2:6b:df:a4:10:1e:7b:
                    f1:1e:78:d0:22:44:c1:d2:02:2d:4a:d8:37:34:a8:
                    bf:b9:21:ca:02:92:7e:a0:ae:4a:02:a4:00:3a:a7:
                    0d:e1:e5:53:cc:f5:0f:56:69:d4:86:2b:e7:95:c7:
                    44:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:E1:D8:8D:58:2E:AD:D5:CC:8D:79:F1:59:05:8F:CC:1B:4E:B5:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ff061ee-e6cf-447c-8c04-b4a8b1f7e404/ae795b5c-a1fe-3fdd-8ead-41a5235a225f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ff061ee-e6cf-447c-8c04-b4a8b1f7e404/2ff061ee-e6cf-447c-8c04-b4a8b1f7e404.crl

            X509v3 Authority Key Identifier:
                keyid:7C:D0:FD:8A:78:11:6A:24:5F:B5:B7:33:D4:92:60:13:FA:58:F9:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ff061ee-e6cf-447c-8c04-b4a8b1f7e404.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.39.227.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:f3:de:0a:20:15:bd:38:79:b8:11:00:0f:a9:0c:5a:b2:79:
         f5:aa:34:1a:f3:69:f8:0b:b4:0b:62:11:40:ac:bb:19:55:f6:
         ad:b4:8e:61:10:ef:d7:cf:43:c9:86:3b:a1:cd:e0:13:5a:6c:
         71:65:ae:d7:66:8d:17:3a:e4:1b:bb:5d:4b:20:18:0b:85:75:
         5d:a2:97:65:de:97:9d:1f:e3:34:72:77:47:d4:a7:05:56:5a:
         b3:3f:4b:4e:56:8d:fc:85:73:2c:b3:bd:39:24:cf:a9:74:7d:
         96:94:45:e8:69:d3:40:96:4a:a7:7a:32:38:0f:ea:a7:4c:ce:
         73:9f:94:13:6f:b3:81:be:89:b5:9c:a3:90:54:71:e3:68:07:
         b9:3b:9d:ed:52:32:e4:c6:aa:db:2a:ba:ed:d1:00:83:72:df:
         51:89:6e:6d:45:d2:c0:ce:59:82:43:40:05:8a:f4:21:51:f3:
         eb:c1:f0:56:af:24:a8:a6:06:dd:4a:3f:9f:c9:d9:42:a5:24:
         1b:03:a6:12:42:d3:d1:7e:44:04:0a:54:ef:b4:6b:f1:ab:77:
         63:6a:8d:ba:b3:e6:bf:ad:88:2b:f3:6e:c2:65:0f:19:74:c4:
         97:22:17:e6:21:aa:53:10:2a:06:aa:77:4f:29:d1:2f:60:b0:
         a9:dc:78:18
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVLYMy9Vp3nhM0XDQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmZmMDYxZWUtZTZjZi00NDdjLThjMDQtYjRhOGIxZjdl
NDA0MB4XDTI0MDMyMjE3NDY0NFoXDTI0MDYyMDE3NDY0NFowLzEtMCsGA1UEAxMk
OGQyYzQyNjAtOGMxZS00ZDFlLWE5YzUtYTNlOGRiNTMxNGEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Ax1KtwCMCvgbWYqAY5Bz+ythd4CttJJM+r5
GsAUgsaS/lXItgwVyOQ2F5l6sy9nW9WY6C1PrTiMdDRyOm1E/LwCD9F0LL7urtK2
5LG3lfu3hCIMkbUf3tYpv5qXuw3qMioavlJOetFZHJIhEjGZUFCgAQjYj7wuTQdw
2287r9puChPqpdJ9PoHPMAIOqwMt4CCzr4+aQv3Kqv7SM9IEqDlmzmuRXmjM1vDg
hW7pOjAtiy8X67iaRD3Sl+YWRkyOeJMuLbZp7AgjNaJr36QQHnvxHnjQIkTB0gIt
Stg3NKi/uSHKApJ+oK5KAqQAOqcN4eVTzPUPVmnUhivnlcdEUQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKXh2I1YLq3VzI158VkFj8wbTrXWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yZmYw
NjFlZS1lNmNmLTQ0N2MtOGMwNC1iNGE4YjFmN2U0MDQvYWU3OTViNWMtYTFmZS0z
ZmRkLThlYWQtNDFhNTIzNWEyMjVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMmZmMDYxZWUtZTZjZi00NDdjLThj
MDQtYjRhOGIxZjdlNDA0LzJmZjA2MWVlLWU2Y2YtNDQ3Yy04YzA0LWI0YThiMWY3
ZTQwNC5jcmwwHwYDVR0jBBgwFoAUfND9ingRaiRftbcz1JJgE/pY+UgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8yZmYwNjFlZS1lNmNmLTQ0N2MtOGMwNC1iNGE4
YjFmN2U0MDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQCfjMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALXz3gogFb04ebgRAA+pDFqyefWqNBrzafgLtAtiEUCsuxlV9q20jmEQ
79fPQ8mGO6HN4BNabHFlrtdmjRc65Bu7XUsgGAuFdV2il2Xel50f4zRyd0fUpwVW
WrM/S05WjfyFcyyzvTkkz6l0fZaURehp00CWSqd6MjgP6qdMznOflBNvs4G+ibWc
o5BUceNoB7k7ne1SMuTGqtsquu3RAINy31GJbm1F0sDOWYJDQAWK9CFR8+vB8Fav
JKimBt1KP5/J2UKlJBsDphJC09F+RAQKVO+0a/Grd2Nqjbqz5r+tiCvzbsJlDxl0
xJciF+YhqlMQKgaqd08p0S9gsKnceBg=
-----END CERTIFICATE-----