Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2cbc626e-463f-3d93-9d22-04f958a11dc6.roa
File:                     2cbc626e-463f-3d93-9d22-04f958a11dc6.roa (raw, json)
Hash identifier:          QfKbeCzGYHKkfSZzf6a5/TfJYw4byH0pE6yhmVXjC3A=
Subject key identifier:   50:C9:3D:F7:C7:69:84:1E:1E:4D:FC:40:AF:CD:4E:22:95:41:F6:3B
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584585F63F3CE911796CC66400A0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2cbc626e-463f-3d93-9d22-04f958a11dc6.roa
Signing time:             Fri 12 Apr 2024 17:24:45 +0000
ROA not before:           Fri 12 Apr 2024 17:24:45 +0000
ROA not after:            Thu 11 Jul 2024 17:24:45 +0000
asID:                     149440
IP address blocks:        23.27.163.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 03 Jun 2024 20:18:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:85:f6:3f:3c:e9:11:79:6c:c6:64:00:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Apr 12 17:24:45 2024 GMT
            Not After : Jul 11 17:24:45 2024 GMT
        Subject: CN=98e81201-43fc-4001-8799-213ed5ac5853
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:43:0e:61:bf:da:97:df:8c:dc:db:de:8d:d9:
                    a1:b8:cd:19:f0:4f:ac:a0:48:a5:ed:6f:25:74:84:
                    55:4a:28:10:92:61:74:1f:49:26:7b:3b:05:d1:8a:
                    fe:8a:7f:f0:89:ed:0d:20:69:7d:64:7a:94:86:94:
                    5e:c0:c5:f1:b8:e1:b3:39:05:79:c2:ab:67:62:7a:
                    ca:e2:49:f3:7b:27:07:08:77:b5:8e:45:58:06:f3:
                    a8:94:15:2d:49:e1:5d:12:39:c1:5f:cb:88:4b:df:
                    84:e0:a5:94:59:1c:a5:e1:b6:f9:4f:1f:d5:ad:39:
                    41:d8:56:61:a6:06:86:47:c1:b3:84:61:ae:24:c7:
                    dd:f0:f4:d7:74:bf:58:fc:d9:0d:91:b4:b4:18:07:
                    89:7d:d1:29:0b:49:8b:2a:76:ff:3b:f2:3f:82:a2:
                    85:47:04:4b:29:97:a1:61:00:85:ff:8e:d5:77:5d:
                    29:79:50:46:8b:36:42:38:10:1b:5c:ea:37:de:8d:
                    0a:17:41:2f:62:69:66:5d:90:8e:06:53:6f:46:d3:
                    08:81:3e:4e:1d:9b:f9:a7:cc:26:50:e6:84:42:e1:
                    fa:53:fd:e4:bc:ea:20:7f:9a:0a:9c:d8:0a:2e:13:
                    ff:4e:e4:d0:0e:6c:7a:79:a7:40:ea:bc:f1:86:b4:
                    17:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:C9:3D:F7:C7:69:84:1E:1E:4D:FC:40:AF:CD:4E:22:95:41:F6:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2cbc626e-463f-3d93-9d22-04f958a11dc6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.163.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:f2:46:b1:db:da:43:59:c1:a3:b4:7c:8e:20:c8:2c:2a:d7:
         99:c0:a3:fa:51:7f:4f:e4:95:57:ac:4c:11:67:dc:4b:f0:dd:
         46:fd:c8:ee:ad:53:e2:4b:49:9d:a9:ac:7b:d2:42:99:db:eb:
         a3:ba:a5:06:54:ca:e2:56:06:69:c3:bc:65:ce:b9:ed:52:5d:
         7e:c8:2f:d4:52:a3:88:ba:98:bc:25:1a:aa:ec:fd:9b:99:92:
         9e:77:93:e0:25:6c:72:6a:ab:57:b2:27:77:23:83:fe:8e:bc:
         da:c8:97:8d:d6:18:c2:55:71:82:a7:84:86:c9:f9:4c:b5:10:
         99:fb:6a:9d:57:de:bc:6b:26:6a:d2:0c:14:10:cf:ea:5c:a7:
         84:cc:65:d4:13:9d:c8:ac:ff:4c:ae:e8:7b:3b:fd:6f:c5:1c:
         a2:61:f9:52:bb:14:5f:01:25:60:bf:11:98:59:b5:8b:10:f3:
         a2:1d:2a:a2:0e:21:08:8f:a6:a7:a3:ab:86:d8:56:64:3f:bf:
         57:3d:ef:2a:98:db:78:55:0b:64:44:3e:05:5f:d5:e5:bf:36:
         b6:c6:41:17:db:ea:13:14:4c:54:88:29:43:cd:57:4f:1f:a5:
         00:41:39:b2:9a:76:6c:6a:a2:7a:47:3f:30:66:96:3a:e1:c7:
         12:11:17:32
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWF9j886RF5bMZkAKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI0MDQxMjE3MjQ0NVoXDTI0MDcxMTE3MjQ0NVowLzEtMCsGA1UEAxMk
OThlODEyMDEtNDNmYy00MDAxLTg3OTktMjEzZWQ1YWM1ODUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEMOYb/al9+M3NvejdmhuM0Z8E+soEil7W8l
dIRVSigQkmF0H0kmezsF0Yr+in/wie0NIGl9ZHqUhpRewMXxuOGzOQV5wqtnYnrK
4knzeycHCHe1jkVYBvOolBUtSeFdEjnBX8uIS9+E4KWUWRyl4bb5Tx/VrTlB2FZh
pgaGR8GzhGGuJMfd8PTXdL9Y/NkNkbS0GAeJfdEpC0mLKnb/O/I/gqKFRwRLKZeh
YQCF/47Vd10peVBGizZCOBAbXOo33o0KF0EvYmlmXZCOBlNvRtMIgT5OHZv5p8wm
UOaEQuH6U/3kvOogf5oKnNgKLhP/TuTQDmx6eadA6rzxhrQXjQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFDJPffHaYQeHk38QK/NTiKVQfY7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMmNiYzYyNmUtNDYzZi0z
ZDkzLTlkMjItMDRmOTU4YTExZGM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxujMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG3yRrHb2kNZwaO0fI4gyCwq15nAo/pRf0/klVesTBFn3Evw3Ub9yO6t
U+JLSZ2prHvSQpnb66O6pQZUyuJWBmnDvGXOue1SXX7IL9RSo4i6mLwlGqrs/ZuZ
kp53k+AlbHJqq1eyJ3cjg/6OvNrIl43WGMJVcYKnhIbJ+Uy1EJn7ap1X3rxrJmrS
DBQQz+pcp4TMZdQTncis/0yu6Hs7/W/FHKJh+VK7FF8BJWC/EZhZtYsQ86IdKqIO
IQiPpqejq4bYVmQ/v1c97yqY23hVC2REPgVf1eW/NrbGQRfb6hMUTFSIKUPNV08f
pQBBObKadmxqonpHPzBmljrhxxIRFzI=
-----END CERTIFICATE-----