Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d41ab67f-35a7-4489-ad3d-ff5b73ab0447/3e7330b2-d254-3a83-95bb-f712d9cd0982.roa
File:                     3e7330b2-d254-3a83-95bb-f712d9cd0982.roa (raw, json)
Hash identifier:          s4n649KB8MJ8BiMuQLPYnq3Uo2QWe3NoDuOoWb0ySGM=
Subject key identifier:   E1:79:C4:58:F4:C3:9E:21:D2:32:EB:E2:F3:53:5D:27:8F:0D:F6:FC
Certificate issuer:       /CN=d41ab67f-35a7-4489-ad3d-ff5b73ab0447
Certificate serial:       010D0C9F43285845F2E6CF74E1C317FB1801ED00
Authority key identifier: BD:FA:2A:56:43:4A:7C:92:11:8A:D4:8E:A2:97:D5:C2:BF:94:35:67
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d41ab67f-35a7-4489-ad3d-ff5b73ab0447.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d41ab67f-35a7-4489-ad3d-ff5b73ab0447/3e7330b2-d254-3a83-95bb-f712d9cd0982.roa
Signing time:             Tue 21 May 2024 17:56:45 +0000
ROA not before:           Tue 21 May 2024 17:56:45 +0000
ROA not after:            Mon 19 Aug 2024 17:56:45 +0000
asID:                     61112
IP address blocks:        162.213.131.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 16:08:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:f2:e6:cf:74:e1:c3:17:fb:18:01:ed:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d41ab67f-35a7-4489-ad3d-ff5b73ab0447
        Validity
            Not Before: May 21 17:56:45 2024 GMT
            Not After : Aug 19 17:56:45 2024 GMT
        Subject: CN=999e3d60-0223-4ae7-9690-305de75d42c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:9e:c1:8e:fc:52:8a:db:f9:ed:0e:fc:2a:43:
                    f7:7f:aa:80:ac:2d:9b:3a:5a:76:c6:b3:0e:91:4c:
                    85:6e:c0:fc:6c:11:b1:07:80:68:c8:36:5d:e7:05:
                    fd:65:35:a8:61:cb:7c:4f:c3:b1:81:e2:8e:c6:8e:
                    fc:39:49:44:a9:e3:09:7e:c9:05:26:06:08:d2:73:
                    87:1a:29:4d:b8:03:0f:34:09:ae:32:af:35:d3:b2:
                    7a:11:42:d4:51:1d:ba:d0:b5:c6:e7:5f:c8:e3:89:
                    18:56:78:98:80:f3:74:6b:65:52:ba:89:41:d2:8b:
                    41:1f:1d:cf:04:91:fa:1f:bf:45:db:c0:af:3c:6e:
                    62:e7:ad:f4:05:f5:0e:f4:9b:64:55:79:cf:7d:dc:
                    54:0b:c5:52:59:15:6c:bf:27:45:34:cc:ac:a5:1e:
                    3d:32:bc:f4:69:0f:5f:90:7a:d8:50:44:6b:73:14:
                    2a:4c:d4:72:0c:24:8a:6f:6e:de:2a:e7:1e:d5:95:
                    73:bf:10:8f:17:52:bc:ec:5e:d4:2d:80:cd:e9:b8:
                    e2:c3:85:2d:9c:6a:20:77:e0:0f:07:bb:dd:d3:b4:
                    0c:47:d8:97:de:65:93:01:c9:6c:af:f0:23:36:a7:
                    03:42:21:16:1d:a5:b9:2a:25:75:66:a4:70:6f:27:
                    f9:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:79:C4:58:F4:C3:9E:21:D2:32:EB:E2:F3:53:5D:27:8F:0D:F6:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d41ab67f-35a7-4489-ad3d-ff5b73ab0447/3e7330b2-d254-3a83-95bb-f712d9cd0982.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d41ab67f-35a7-4489-ad3d-ff5b73ab0447/d41ab67f-35a7-4489-ad3d-ff5b73ab0447.crl

            X509v3 Authority Key Identifier:
                keyid:BD:FA:2A:56:43:4A:7C:92:11:8A:D4:8E:A2:97:D5:C2:BF:94:35:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d41ab67f-35a7-4489-ad3d-ff5b73ab0447.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.213.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:7a:7b:10:13:47:91:eb:f0:09:2b:6f:a6:99:5b:60:73:fb:
         9d:ee:35:0f:99:55:2a:af:0f:8c:eb:7d:9e:4c:53:b0:a6:2e:
         14:a3:7c:8b:37:6b:b6:62:e9:d9:9a:0f:a4:17:31:96:08:06:
         4a:5c:48:9f:3a:56:ea:5e:dc:8c:fb:7b:56:f5:07:d7:66:dd:
         9f:ea:43:41:b7:44:7b:15:65:da:1f:d8:1e:17:4d:49:37:a7:
         0a:36:8f:47:93:5e:c9:42:7e:97:b7:37:fc:6a:2d:07:6a:fc:
         a0:bf:a2:6f:8f:25:79:83:e1:03:e6:5e:93:4e:2a:a2:5e:54:
         63:31:39:b5:10:d8:b8:d7:b4:ab:a9:14:d9:02:14:20:1e:76:
         ab:b6:88:1f:40:3c:68:5b:b5:72:f1:3e:77:8c:98:65:c2:43:
         69:e0:f1:cd:e0:a5:c4:d6:d7:d2:95:23:b5:81:56:86:6d:50:
         c3:d7:f5:b2:d6:71:28:11:75:b0:69:8c:15:0e:a7:de:6b:79:
         ba:a1:ab:7f:76:0f:69:2d:88:a7:0f:4e:37:15:6b:4a:3f:69:
         d9:5d:a6:24:75:b2:94:e6:84:57:aa:d2:b2:d0:8f:90:df:19:
         d7:91:84:9e:bb:43:b8:30:62:bd:8f:9b:fe:09:1b:65:4d:3a:
         f9:96:82:5d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEXy5s904cMX+xgB7QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDQxYWI2N2YtMzVhNy00NDg5LWFkM2QtZmY1YjczYWIw
NDQ3MB4XDTI0MDUyMTE3NTY0NVoXDTI0MDgxOTE3NTY0NVowLzEtMCsGA1UEAxMk
OTk5ZTNkNjAtMDIyMy00YWU3LTk2OTAtMzA1ZGU3NWQ0MmM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr57BjvxSitv57Q78KkP3f6qArC2bOlp2xrMO
kUyFbsD8bBGxB4BoyDZd5wX9ZTWoYct8T8OxgeKOxo78OUlEqeMJfskFJgYI0nOH
GilNuAMPNAmuMq8107J6EULUUR260LXG51/I44kYVniYgPN0a2VSuolB0otBHx3P
BJH6H79F28CvPG5i5630BfUO9JtkVXnPfdxUC8VSWRVsvydFNMyspR49Mrz0aQ9f
kHrYUERrcxQqTNRyDCSKb27eKuce1ZVzvxCPF1K87F7ULYDN6bjiw4UtnGogd+AP
B7vd07QMR9iX3mWTAclsr/AjNqcDQiEWHaW5KiV1ZqRwbyf5fwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOF5xFj0w54h0jLr4vNTXSePDfb8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9kNDFh
YjY3Zi0zNWE3LTQ0ODktYWQzZC1mZjViNzNhYjA0NDcvM2U3MzMwYjItZDI1NC0z
YTgzLTk1YmItZjcxMmQ5Y2QwOTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZDQxYWI2N2YtMzVhNy00NDg5LWFk
M2QtZmY1YjczYWIwNDQ3L2Q0MWFiNjdmLTM1YTctNDQ4OS1hZDNkLWZmNWI3M2Fi
MDQ0Ny5jcmwwHwYDVR0jBBgwFoAUvfoqVkNKfJIRitSOopfVwr+UNWcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9kNDFhYjY3Zi0zNWE3LTQ0ODktYWQzZC1mZjVi
NzNhYjA0NDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAotWDMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEp6exATR5Hr8Akrb6aZW2Bz+53uNQ+ZVSqvD4zrfZ5MU7CmLhSjfIs3
a7Zi6dmaD6QXMZYIBkpcSJ86Vupe3Iz7e1b1B9dm3Z/qQ0G3RHsVZdof2B4XTUk3
pwo2j0eTXslCfpe3N/xqLQdq/KC/om+PJXmD4QPmXpNOKqJeVGMxObUQ2LjXtKup
FNkCFCAedqu2iB9APGhbtXLxPneMmGXCQ2ng8c3gpcTW19KVI7WBVoZtUMPX9bLW
cSgRdbBpjBUOp95rebqhq392D2ktiKcPTjcVa0o/adldpiR1spTmhFeq0rLQj5Df
GdeRhJ67Q7gwYr2Pm/4JG2VNOvmWgl0=
-----END CERTIFICATE-----