Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391/c15a29b4-c188-3922-9576-b147972c68a4.roa
File:                     c15a29b4-c188-3922-9576-b147972c68a4.roa (raw, json)
Hash identifier:          LmYdNCVrm4CX1oi5fH24LxxKpYvfCnrNkT7jsj9vqVU=
Subject key identifier:   5E:E2:5E:A3:55:D5:21:F7:62:F2:DC:D0:E9:CA:C5:43:23:F3:ED:C5
Certificate issuer:       /CN=4418b7bb-7f1c-4333-9b8e-babf8b8fa391
Certificate serial:       010D0C9F4328584942DE22C2C364883E5CEEAF30
Authority key identifier: 17:E9:E4:BC:6B:9B:24:9D:73:30:0A:9A:89:6E:F3:7B:9C:E5:43:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391/c15a29b4-c188-3922-9576-b147972c68a4.roa
Signing time:             Fri 21 Mar 2025 11:44:45 +0000
ROA not before:           Fri 21 Mar 2025 11:44:45 +0000
ROA not after:            Thu 19 Jun 2025 11:44:45 +0000
asID:                     26548
IP address blocks:        199.96.164.0/22 maxlen: 22
Validation:               Failed, certificate revoked on Mon 24 Mar 2025 15:53:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:42:de:22:c2:c3:64:88:3e:5c:ee:af:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4418b7bb-7f1c-4333-9b8e-babf8b8fa391
        Validity
            Not Before: Mar 21 11:44:45 2025 GMT
            Not After : Jun 19 11:44:45 2025 GMT
        Subject: CN=3d63beff-19c4-400d-9b11-23065cd28ff9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4d:3b:3f:e3:8d:57:63:31:20:e0:45:f2:39:
                    40:76:77:7e:ad:44:eb:f7:48:0f:b5:d5:ed:df:e4:
                    d0:f6:a8:87:d7:8b:bf:9b:92:92:6c:b6:a2:5b:87:
                    b8:0d:93:27:1d:66:b9:44:b4:38:cd:d0:1b:a8:af:
                    b4:20:48:7f:ed:ef:70:51:81:4c:b1:8b:4c:da:1a:
                    33:eb:ca:f1:2c:af:e5:bb:66:b5:04:7d:b1:75:17:
                    89:f8:62:8a:bc:5c:6e:8a:3e:08:88:df:e1:83:0f:
                    a9:93:dd:a4:04:1e:4f:5d:a8:2d:fc:12:71:a4:bd:
                    32:b0:ec:76:0d:ba:36:07:0a:ca:bb:49:33:f3:f3:
                    ec:7f:f9:01:b0:87:06:50:e6:21:ad:66:93:3f:59:
                    e6:f7:c9:9a:e1:71:f6:67:82:5f:fe:58:b9:2a:07:
                    7d:08:01:c8:26:a9:9b:c7:ae:0c:09:00:82:5d:c8:
                    6d:b5:10:77:21:8c:73:d9:1a:a3:b4:3d:1d:b2:98:
                    e0:66:7a:24:e6:5d:f4:ca:78:0e:96:14:05:70:1d:
                    84:2e:08:9a:9d:cf:67:d9:20:b6:e5:3b:94:06:8c:
                    25:32:2f:ff:0d:da:cf:1a:4e:58:4d:bd:bc:b1:b9:
                    02:5d:de:c6:74:93:75:5d:41:4a:ab:eb:9e:a3:3d:
                    3f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:E2:5E:A3:55:D5:21:F7:62:F2:DC:D0:E9:CA:C5:43:23:F3:ED:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391/c15a29b4-c188-3922-9576-b147972c68a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391/4418b7bb-7f1c-4333-9b8e-babf8b8fa391.crl

            X509v3 Authority Key Identifier:
                keyid:17:E9:E4:BC:6B:9B:24:9D:73:30:0A:9A:89:6E:F3:7B:9C:E5:43:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.96.164.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:ab:ca:c7:00:9c:c6:1f:f9:f8:92:82:4a:b0:fd:03:e9:99:
         7f:84:03:75:63:8a:1d:d5:af:37:f9:c2:a5:79:d8:6a:a6:29:
         6c:5e:b9:f0:71:1f:4a:63:fc:48:f7:c8:f5:a2:a5:ac:c7:ef:
         f8:f6:33:93:89:8e:46:f1:10:c0:13:46:01:fd:d2:11:c8:0b:
         92:3f:c2:59:a7:8c:25:ba:88:89:17:39:b9:c1:80:8e:34:85:
         2e:2f:29:8e:5d:f9:e1:a1:95:15:b1:1d:80:e0:8c:1e:76:a4:
         eb:b2:15:ac:6e:f2:a1:ef:3a:d0:aa:8e:5a:9d:d2:8f:8a:1a:
         d0:bf:d9:da:3b:ef:bc:70:14:64:6a:46:ab:49:23:5f:c1:e4:
         1d:d1:19:fb:46:da:fe:df:ec:17:80:97:33:62:8d:0a:59:19:
         8b:1d:f5:b5:8b:db:f1:54:4b:ab:27:4b:35:2d:ad:88:8d:20:
         a0:45:b1:f4:84:2b:9f:f1:75:2c:88:f3:28:7a:51:34:8e:12:
         9f:9a:4f:8c:22:89:65:6a:34:2a:7c:de:4f:ad:98:11:fb:ca:
         67:8b:72:ad:2e:af:29:b3:de:3b:af:c6:58:ee:61:0c:23:8b:
         91:2e:a9:3b:57:22:a2:ee:3d:49:3f:4e:b5:0b:2b:9f:20:bd:
         9b:a8:62:f5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElC3iLCw2SIPlzurzAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDQxOGI3YmItN2YxYy00MzMzLTliOGUtYmFiZjhiOGZh
MzkxMB4XDTI1MDMyMTExNDQ0NVoXDTI1MDYxOTExNDQ0NVowLzEtMCsGA1UEAxMk
M2Q2M2JlZmYtMTljNC00MDBkLTliMTEtMjMwNjVjZDI4ZmY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtU07P+ONV2MxIOBF8jlAdnd+rUTr90gPtdXt
3+TQ9qiH14u/m5KSbLaiW4e4DZMnHWa5RLQ4zdAbqK+0IEh/7e9wUYFMsYtM2hoz
68rxLK/lu2a1BH2xdReJ+GKKvFxuij4IiN/hgw+pk92kBB5PXagt/BJxpL0ysOx2
Dbo2BwrKu0kz8/Psf/kBsIcGUOYhrWaTP1nm98ma4XH2Z4Jf/li5Kgd9CAHIJqmb
x64MCQCCXchttRB3IYxz2RqjtD0dspjgZnok5l30yngOlhQFcB2ELgianc9n2SC2
5TuUBowlMi//DdrPGk5YTb28sbkCXd7GdJN1XUFKq+ueoz0/0wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF7iXqNV1SH3YvLc0OnKxUMj8+3FMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80NDE4
YjdiYi03ZjFjLTQzMzMtOWI4ZS1iYWJmOGI4ZmEzOTEvYzE1YTI5YjQtYzE4OC0z
OTIyLTk1NzYtYjE0Nzk3MmM2OGE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNDQxOGI3YmItN2YxYy00MzMzLTli
OGUtYmFiZjhiOGZhMzkxLzQ0MThiN2JiLTdmMWMtNDMzMy05YjhlLWJhYmY4Yjhm
YTM5MS5jcmwwHwYDVR0jBBgwFoAUF+nkvGubJJ1zMAqaiW7ze5zlQ5EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC80NDE4YjdiYi03ZjFjLTQzMzMtOWI4ZS1iYWJm
OGI4ZmEzOTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx2CkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAaryscAnMYf+fiSgkqw/QPpmX+EA3Vjih3Vrzf5wqV52GqmKWxeufBx
H0pj/Ej3yPWipazH7/j2M5OJjkbxEMATRgH90hHIC5I/wlmnjCW6iIkXObnBgI40
hS4vKY5d+eGhlRWxHYDgjB52pOuyFaxu8qHvOtCqjlqd0o+KGtC/2do777xwFGRq
RqtJI1/B5B3RGftG2v7f7BeAlzNijQpZGYsd9bWL2/FUS6snSzUtrYiNIKBFsfSE
K5/xdSyI8yh6UTSOEp+aT4wiiWVqNCp83k+tmBH7ymeLcq0urymz3juvxljuYQwj
i5EuqTtXIqLuPUk/TrULK58gvZuoYvU=
-----END CERTIFICATE-----