Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/470057e2-4c9e-3e94-b8dc-deafa8b7763e.roa
File:                     470057e2-4c9e-3e94-b8dc-deafa8b7763e.roa (raw, json)
Hash identifier:          N/aEA3pihcLj69A+kdmnFwkHcKeequa2XNR4T4awC5I=
Subject key identifier:   74:0D:CB:C4:EC:59:F9:FC:DA:C9:CC:53:82:7C:21:FC:DE:E3:16:7E
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584585F63D36247C389BDA6FBA00
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/470057e2-4c9e-3e94-b8dc-deafa8b7763e.roa
Signing time:             Fri 12 Apr 2024 17:24:44 +0000
ROA not before:           Fri 12 Apr 2024 17:24:44 +0000
ROA not after:            Thu 11 Jul 2024 17:24:44 +0000
asID:                     136787
IP address blocks:        136.0.86.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 25 Apr 2024 20:35:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:85:f6:3d:36:24:7c:38:9b:da:6f:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Apr 12 17:24:44 2024 GMT
            Not After : Jul 11 17:24:44 2024 GMT
        Subject: CN=ea347835-f6f0-4c30-a866-0c9a143184d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:a5:d6:d4:2d:87:52:37:e7:f2:11:51:49:10:
                    4b:c1:33:a6:45:bb:8d:e8:32:37:ac:fe:80:e9:95:
                    5c:44:bf:a0:c5:b3:ea:91:6a:fe:d4:b8:93:4f:62:
                    57:04:2b:4d:96:91:dd:ae:ce:3d:04:ca:10:08:6c:
                    8b:3d:cd:81:dd:ce:7a:32:6a:00:56:d9:22:0b:f7:
                    c8:a0:21:f6:fc:20:f5:54:b6:57:df:18:f6:a6:cc:
                    0f:af:0b:fe:59:99:2d:bf:47:ab:6f:a1:c9:44:81:
                    ef:c3:10:ff:74:d3:fd:9a:67:54:6e:24:e7:55:94:
                    a9:7f:a0:ca:40:6c:6a:c7:cf:65:8d:f4:54:73:d7:
                    8e:a2:3c:78:83:e9:a8:29:f6:88:6d:8b:2a:d8:e7:
                    b3:3a:ef:65:6c:5d:63:97:80:2b:15:ca:fe:ca:b8:
                    5f:ab:7d:2d:2d:df:59:0e:da:f4:40:58:06:2d:b6:
                    b7:b6:d4:e9:e2:50:92:7f:e3:ec:26:4b:31:3d:8d:
                    46:05:a4:cd:b6:98:1a:e9:fb:61:fd:d5:c6:88:c6:
                    7d:8d:61:bd:4e:28:58:17:2a:8b:d9:33:1e:3e:5d:
                    73:4a:5f:c3:0b:2c:80:70:2a:93:ee:6c:8b:d2:40:
                    5f:ba:01:41:3f:98:28:57:38:d0:8c:32:51:43:01:
                    37:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:0D:CB:C4:EC:59:F9:FC:DA:C9:CC:53:82:7C:21:FC:DE:E3:16:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/470057e2-4c9e-3e94-b8dc-deafa8b7763e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:52:51:f9:27:92:81:09:2e:2b:5a:3f:58:13:ba:45:29:62:
         60:d9:07:86:95:c7:c9:a2:1b:a6:d1:9d:96:60:d0:76:b5:06:
         05:b0:55:22:c5:a6:a4:5a:1b:7d:a2:4b:ff:73:97:d1:d6:6b:
         8f:58:f1:bf:80:69:03:42:d6:b1:bf:7e:c4:36:50:c9:73:fa:
         7a:bd:51:84:f0:04:a2:f4:b7:d8:0d:56:93:63:60:ea:21:af:
         fa:ec:91:63:eb:38:57:1b:20:74:83:a1:a2:8d:8f:a5:0f:73:
         1e:bf:00:63:b2:f1:2c:34:00:9c:d8:fd:80:5e:22:33:c4:ae:
         7e:e6:41:ed:5e:a4:c1:69:f7:fe:ea:e8:23:c3:85:41:c5:88:
         0b:1a:8f:c9:ed:e4:0d:dc:c8:de:ec:ea:56:77:ec:c8:26:e3:
         09:11:09:44:b8:12:10:ff:fb:de:44:3a:5b:6d:0d:d5:a9:69:
         39:3a:67:b7:56:f1:b7:14:3f:a3:7a:be:eb:92:95:88:52:e5:
         0b:1e:16:bf:0f:06:cf:8d:5f:59:12:19:08:25:4c:e5:ff:3e:
         5b:9b:b9:69:ef:25:bf:77:04:5e:46:6a:71:b5:e0:8b:e3:de:
         08:17:bf:f3:03:6a:31:50:0c:23:b5:d4:d9:bd:f9:15:22:fb:
         bf:b6:3c:12
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWF9j02JHw4m9pvugAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI0MDQxMjE3MjQ0NFoXDTI0MDcxMTE3MjQ0NFowLzEtMCsGA1UEAxMk
ZWEzNDc4MzUtZjZmMC00YzMwLWE4NjYtMGM5YTE0MzE4NGQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgKXW1C2HUjfn8hFRSRBLwTOmRbuN6DI3rP6A
6ZVcRL+gxbPqkWr+1LiTT2JXBCtNlpHdrs49BMoQCGyLPc2B3c56MmoAVtkiC/fI
oCH2/CD1VLZX3xj2pswPrwv+WZktv0erb6HJRIHvwxD/dNP9mmdUbiTnVZSpf6DK
QGxqx89ljfRUc9eOojx4g+moKfaIbYsq2OezOu9lbF1jl4ArFcr+yrhfq30tLd9Z
Dtr0QFgGLba3ttTp4lCSf+PsJksxPY1GBaTNtpga6fth/dXGiMZ9jWG9TihYFyqL
2TMePl1zSl/DCyyAcCqT7myL0kBfugFBP5goVzjQjDJRQwE30QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHQNy8TsWfn82snMU4J8Ifze4xZ+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNDcwMDU3ZTItNGM5ZS0z
ZTk0LWI4ZGMtZGVhZmE4Yjc3NjNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiABWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGtSUfknkoEJLitaP1gTukUpYmDZB4aVx8miG6bRnZZg0Ha1BgWwVSLF
pqRaG32iS/9zl9HWa49Y8b+AaQNC1rG/fsQ2UMlz+nq9UYTwBKL0t9gNVpNjYOoh
r/rskWPrOFcbIHSDoaKNj6UPcx6/AGOy8Sw0AJzY/YBeIjPErn7mQe1epMFp9/7q
6CPDhUHFiAsaj8nt5A3cyN7s6lZ37Mgm4wkRCUS4EhD/+95EOlttDdWpaTk6Z7dW
8bcUP6N6vuuSlYhS5QseFr8PBs+NX1kSGQglTOX/PlubuWnvJb93BF5GanG14Ivj
3ggXv/MDajFQDCO11Nm9+RUi+7+2PBI=
-----END CERTIFICATE-----