Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/9e88ea0c-dd3a-37eb-b01a-f884f09a4c60.roa
File:                     9e88ea0c-dd3a-37eb-b01a-f884f09a4c60.roa (raw, json)
Hash identifier:          oHn42ac1/FSB0WzScZOk/MpQsrqmhmHbBrukupyyvko=
Subject key identifier:   AE:15:6D:39:E8:B1:46:C0:38:47:4D:50:6C:D9:77:06:F7:1E:38:07
Certificate issuer:       /CN=147f088f-ace0-45c8-9c73-f06e60d7debb
Certificate serial:       010D0C9F43285845FACBA3B245929671A8802780
Authority key identifier: A3:1A:EF:6B:4C:36:94:68:ED:3D:23:83:AE:63:05:1F:9B:3E:1D:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/9e88ea0c-dd3a-37eb-b01a-f884f09a4c60.roa
Signing time:             Fri 24 May 2024 13:48:28 +0000
ROA not before:           Fri 24 May 2024 13:48:28 +0000
ROA not after:            Thu 22 Aug 2024 13:48:28 +0000
asID:                     16509
IP address blocks:        216.147.184.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 24 May 2024 15:23:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:fa:cb:a3:b2:45:92:96:71:a8:80:27:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=147f088f-ace0-45c8-9c73-f06e60d7debb
        Validity
            Not Before: May 24 13:48:28 2024 GMT
            Not After : Aug 22 13:48:28 2024 GMT
        Subject: CN=85e29b2b-b4b8-4b04-b45e-16069cdae18a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:45:66:1d:99:93:0f:1b:ab:10:5f:41:f2:ee:
                    4b:34:e4:2a:23:21:c2:d5:65:b4:ec:72:49:9e:bd:
                    88:38:2b:3a:a1:d8:8a:bb:49:ce:02:29:77:ce:15:
                    34:b1:3f:e7:27:fe:f1:0d:42:73:6c:40:3e:52:66:
                    ae:d4:4e:86:78:91:1b:95:73:cf:a1:ed:96:3a:f0:
                    6e:78:4c:72:86:3d:59:c7:20:ae:92:1b:57:37:ad:
                    de:78:b4:35:17:7a:3c:4a:a7:69:a6:dd:43:1d:87:
                    a2:5c:a3:60:20:64:63:bc:6a:c9:b6:3b:38:59:a8:
                    4a:83:21:5e:a5:bd:e4:7a:d4:4d:b0:48:be:7a:76:
                    51:65:ad:e7:5b:a0:87:2a:77:3e:cd:ae:54:8c:d3:
                    12:a8:a0:8c:84:68:67:73:5b:02:5d:5c:bd:bd:ee:
                    2e:c3:7c:1a:a3:eb:e5:53:5a:71:05:13:ce:9b:62:
                    f7:0d:66:2a:8b:5a:c3:71:13:3c:4a:c8:6b:a5:8d:
                    75:d1:05:b8:9f:d9:8e:03:fc:75:ad:53:9f:c4:0a:
                    8c:dd:a6:77:49:3b:00:d6:52:e7:7c:d7:26:77:28:
                    54:59:91:a3:e6:df:92:39:4e:77:b7:96:9b:61:7c:
                    32:40:51:24:44:8b:b5:79:a9:51:3a:de:59:d2:c9:
                    0e:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:15:6D:39:E8:B1:46:C0:38:47:4D:50:6C:D9:77:06:F7:1E:38:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/9e88ea0c-dd3a-37eb-b01a-f884f09a4c60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/147f088f-ace0-45c8-9c73-f06e60d7debb.crl

            X509v3 Authority Key Identifier:
                keyid:A3:1A:EF:6B:4C:36:94:68:ED:3D:23:83:AE:63:05:1F:9B:3E:1D:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.147.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d7:1e:95:ad:91:dc:5a:cf:29:1f:0f:68:ef:c2:b4:3a:e4:13:
         02:4a:fc:30:c8:2f:09:98:43:a9:32:09:e7:2b:16:c7:bf:54:
         b7:9a:24:0f:ee:96:72:26:f8:a8:0a:8b:30:6e:4b:17:a4:40:
         45:9a:3a:3c:73:9e:a6:3d:1b:c8:ce:fd:42:f2:fb:61:e3:a0:
         59:77:b5:5c:d2:20:76:fd:36:21:59:9b:b7:1e:cf:3d:37:2e:
         24:ec:f5:be:44:01:41:32:57:88:ef:7d:6c:6d:c5:b7:64:f1:
         df:c4:80:4a:d0:af:8e:0d:6a:70:89:77:6b:ed:a8:a5:9c:8b:
         79:d4:e7:cb:9f:42:03:de:36:50:04:60:5d:bb:da:16:bd:e5:
         b6:49:85:bc:0a:c4:c3:4d:8a:f2:2c:a8:52:78:77:54:80:4b:
         25:1a:b2:aa:f5:0c:98:76:bd:0b:ea:cd:a0:67:17:af:53:c5:
         8d:87:d0:3d:2c:76:c9:6c:d8:6a:c3:ef:3a:88:6f:8c:35:65:
         51:c0:7c:d6:80:dc:fb:39:65:62:fd:33:6c:5f:ee:7b:b4:f6:
         28:76:03:e4:50:cb:ea:c3:a2:cc:3b:bc:19:3f:5e:2d:21:f5:
         7a:5e:cb:64:45:81:7b:de:62:5c:a0:05:11:e2:8e:f3:8d:9b:
         6d:0e:a4:72
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEX6y6OyRZKWcaiAJ4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTQ3ZjA4OGYtYWNlMC00NWM4LTljNzMtZjA2ZTYwZDdk
ZWJiMB4XDTI0MDUyNDEzNDgyOFoXDTI0MDgyMjEzNDgyOFowLzEtMCsGA1UEAxMk
ODVlMjliMmItYjRiOC00YjA0LWI0NWUtMTYwNjljZGFlMThhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0VmHZmTDxurEF9B8u5LNOQqIyHC1WW07HJJ
nr2IOCs6odiKu0nOAil3zhU0sT/nJ/7xDUJzbEA+Umau1E6GeJEblXPPoe2WOvBu
eExyhj1ZxyCukhtXN63eeLQ1F3o8Sqdppt1DHYeiXKNgIGRjvGrJtjs4WahKgyFe
pb3ketRNsEi+enZRZa3nW6CHKnc+za5UjNMSqKCMhGhnc1sCXVy9ve4uw3wao+vl
U1pxBRPOm2L3DWYqi1rDcRM8SshrpY110QW4n9mOA/x1rVOfxAqM3aZ3STsA1lLn
fNcmdyhUWZGj5t+SOU53t5abYXwyQFEkRIu1ealROt5Z0skOmQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK4VbTnosUbAOEdNUGzZdwb3HjgHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xNDdm
MDg4Zi1hY2UwLTQ1YzgtOWM3My1mMDZlNjBkN2RlYmIvOWU4OGVhMGMtZGQzYS0z
N2ViLWIwMWEtZjg4NGYwOWE0YzYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMTQ3ZjA4OGYtYWNlMC00NWM4LTlj
NzMtZjA2ZTYwZDdkZWJiLzE0N2YwODhmLWFjZTAtNDVjOC05YzczLWYwNmU2MGQ3
ZGViYi5jcmwwHwYDVR0jBBgwFoAUoxrva0w2lGjtPSODrmMFH5s+HX8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8xNDdmMDg4Zi1hY2UwLTQ1YzgtOWM3My1mMDZl
NjBkN2RlYmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2JO4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANcela2R3FrPKR8PaO/CtDrkEwJK/DDILwmYQ6kyCecrFse/VLeaJA/u
lnIm+KgKizBuSxekQEWaOjxznqY9G8jO/ULy+2HjoFl3tVzSIHb9NiFZm7cezz03
LiTs9b5EAUEyV4jvfWxtxbdk8d/EgErQr44NanCJd2vtqKWci3nU58ufQgPeNlAE
YF272ha95bZJhbwKxMNNivIsqFJ4d1SASyUasqr1DJh2vQvqzaBnF69TxY2H0D0s
dsls2GrD7zqIb4w1ZVHAfNaA3Ps5ZWL9M2xf7nu09ih2A+RQy+rDosw7vBk/Xi0h
9Xpey2RFgXveYlygBRHijvONm20OpHI=
-----END CERTIFICATE-----