Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8d0cbe54-3dc5-308b-97bd-c0bfed2402ec.roa
File:                     8d0cbe54-3dc5-308b-97bd-c0bfed2402ec.roa (raw, json)
Hash identifier:          4tIHnWvGc1gY7GH/+aCM8CvCEEWUWA4BaMtnolqH9uE=
Subject key identifier:   BB:03:2B:CD:95:CE:F1:55:78:9C:A1:35:BF:37:44:99:9D:57:C6:B4
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584585F63606446E21A149944000
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8d0cbe54-3dc5-308b-97bd-c0bfed2402ec.roa
Signing time:             Fri 12 Apr 2024 17:24:40 +0000
ROA not before:           Fri 12 Apr 2024 17:24:40 +0000
ROA not after:            Thu 11 Jul 2024 17:24:40 +0000
asID:                     10557
IP address blocks:        23.27.221.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 03 Jun 2024 20:29:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:85:f6:36:06:44:6e:21:a1:49:94:40:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Apr 12 17:24:40 2024 GMT
            Not After : Jul 11 17:24:40 2024 GMT
        Subject: CN=725060d3-c9ad-4b02-aa2a-35f08962aac7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:42:93:90:3c:fc:2e:93:c4:c3:b2:c2:fa:72:
                    e2:94:d4:11:4a:73:ff:cb:05:dc:0d:49:01:8e:a6:
                    f6:a9:d9:e2:f7:99:50:ea:a8:73:d0:e7:b8:52:3b:
                    f9:a1:cb:d1:d9:5a:27:1c:a7:bd:96:27:64:73:a9:
                    d1:10:89:1a:dc:0d:aa:83:f1:f9:da:48:02:6f:e2:
                    34:3b:e8:fd:1c:09:52:6a:a6:cf:c4:26:94:bf:11:
                    e7:6f:1e:7e:12:42:37:08:1c:f0:41:48:9d:90:0a:
                    06:89:ce:bf:86:81:fd:45:96:41:ae:a6:7f:3c:24:
                    0c:62:33:b6:3f:90:ea:72:2c:3a:7a:3c:0b:2f:46:
                    64:53:da:c3:b9:a3:47:e9:d0:ca:ef:10:5d:ca:6b:
                    70:0b:3a:35:5e:0c:da:cd:cb:23:39:68:cd:61:4b:
                    5d:92:d1:bb:c7:19:e1:e3:6d:d8:39:77:ff:bc:65:
                    9e:f8:54:02:03:65:50:b7:ac:80:63:6c:05:ae:6d:
                    91:fa:4c:af:3e:1e:bb:09:06:7c:3f:82:b7:94:bc:
                    7b:4c:71:62:60:58:2e:a2:5e:80:30:9c:11:b4:88:
                    52:1a:f9:15:e8:5e:75:c9:51:fc:79:34:12:23:1c:
                    32:c3:58:3f:d3:b9:d4:30:d6:b1:c1:64:ae:17:dc:
                    5a:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:03:2B:CD:95:CE:F1:55:78:9C:A1:35:BF:37:44:99:9D:57:C6:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8d0cbe54-3dc5-308b-97bd-c0bfed2402ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.27.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:d9:b9:41:39:dc:cc:00:52:81:81:41:43:3e:7d:f9:25:46:
         69:24:47:7d:9a:26:34:3f:dc:18:4f:51:5c:b8:c5:74:b6:db:
         7b:c6:7a:c2:e7:ee:46:67:2f:75:3e:11:25:12:0c:52:c4:13:
         fe:db:b8:8d:11:2d:22:9d:18:8f:83:c7:9d:7e:79:8e:0c:93:
         28:01:bf:0b:c7:32:1c:50:db:d8:6e:e7:c9:1a:ee:b0:b3:e2:
         59:e5:67:2c:14:43:94:e0:4e:75:0c:d1:b4:4b:6d:5f:5f:2f:
         11:e1:53:ed:47:49:a9:2b:77:eb:5d:6d:bf:b9:f8:ea:9b:1a:
         f6:a3:5b:50:52:9c:15:47:30:e7:98:75:da:02:13:ea:71:cb:
         00:1e:41:4b:a5:a8:f2:ab:87:a6:0c:3c:1e:60:51:68:6e:a5:
         c0:3f:d2:46:4e:8e:8b:3a:ce:b1:ad:54:d4:9a:8e:cb:86:93:
         fc:d5:0d:d2:e8:87:13:22:94:9e:b2:f0:f2:99:e3:5a:7b:9e:
         0b:dd:e9:31:c9:db:3f:a3:3a:21:04:f4:ec:d1:a0:f8:6e:a2:
         60:50:4d:8d:0f:3f:77:f0:3d:1e:3a:11:8f:fa:4f:80:af:7e:
         87:2a:2d:3a:5c:91:98:3a:c6:71:af:b8:05:34:55:d7:df:c3:
         11:20:45:1e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWF9jYGRG4hoUmUQAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI0MDQxMjE3MjQ0MFoXDTI0MDcxMTE3MjQ0MFowLzEtMCsGA1UEAxMk
NzI1MDYwZDMtYzlhZC00YjAyLWFhMmEtMzVmMDg5NjJhYWM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUKTkDz8LpPEw7LC+nLilNQRSnP/ywXcDUkB
jqb2qdni95lQ6qhz0Oe4Ujv5ocvR2VonHKe9lidkc6nREIka3A2qg/H52kgCb+I0
O+j9HAlSaqbPxCaUvxHnbx5+EkI3CBzwQUidkAoGic6/hoH9RZZBrqZ/PCQMYjO2
P5Dqciw6ejwLL0ZkU9rDuaNH6dDK7xBdymtwCzo1XgzazcsjOWjNYUtdktG7xxnh
423YOXf/vGWe+FQCA2VQt6yAY2wFrm2R+kyvPh67CQZ8P4K3lLx7THFiYFguol6A
MJwRtIhSGvkV6F51yVH8eTQSIxwyw1g/07nUMNaxwWSuF9xafwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLsDK82VzvFVeJyhNb83RJmdV8a0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvOGQwY2JlNTQtM2RjNS0z
MDhiLTk3YmQtYzBiZmVkMjQwMmVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxvdMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKbZuUE53MwAUoGBQUM+ffklRmkkR32aJjQ/3BhPUVy4xXS223vGesLn
7kZnL3U+ESUSDFLEE/7buI0RLSKdGI+Dx51+eY4MkygBvwvHMhxQ29hu58ka7rCz
4lnlZywUQ5TgTnUM0bRLbV9fLxHhU+1HSakrd+tdbb+5+OqbGvajW1BSnBVHMOeY
ddoCE+pxywAeQUulqPKrh6YMPB5gUWhupcA/0kZOjos6zrGtVNSajsuGk/zVDdLo
hxMilJ6y8PKZ41p7ngvd6THJ2z+jOiEE9OzRoPhuomBQTY0PP3fwPR46EY/6T4Cv
focqLTpckZg6xnGvuAU0VdffwxEgRR4=
-----END CERTIFICATE-----